Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/2KpncpojpGgMXpVZEgbD1uZYPRQ.roa
File: 2KpncpojpGgMXpVZEgbD1uZYPRQ.roa (raw, json)
Hash identifier: /8OBHurBEPqt4foeaNYqP1PWM2Xz6Gm2i83yxe//v10=
Subject key identifier: D8:AA:67:72:9A:23:A4:68:0C:5E:95:59:12:06:C3:D6:E6:58:3D:14
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019424B37786C9C9BA92EE1B228A58C6DFEF
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/2KpncpojpGgMXpVZEgbD1uZYPRQ.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398549
IP address blocks: 2a13:d8c0::/32 maxlen: 32
2a13:d8c1::/32 maxlen: 32
2a13:d8c2::/32 maxlen: 32
2a13:d8c3::/32 maxlen: 32
2a13:d8c4::/32 maxlen: 32
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 Jan 2025 14:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:77:86:c9:c9:ba:92:ee:1b:22:8a:58:c6:df:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8aa67729a23a4680c5e95591206c3d6e6583d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:8d:53:7c:e8:4b:56:f7:4e:02:8a:d2:83:
0c:87:ce:52:f3:e4:f5:c4:51:f9:b6:f3:af:2a:75:
2d:33:cf:4c:ba:d5:11:59:8a:1e:67:b3:b2:8c:d9:
4d:d7:73:3a:ac:0f:9a:50:91:c4:57:c6:ac:40:c7:
98:90:01:04:a1:e1:4f:15:2b:25:2d:9e:3d:3c:47:
b5:47:06:ca:13:e2:ca:27:4f:fc:6a:a2:5d:ca:37:
7a:8d:cc:2a:d5:b2:16:b2:30:b5:21:81:8d:e6:4c:
e6:f5:f2:e1:46:1a:95:7f:a0:2e:87:b7:3b:dc:b8:
74:48:d8:45:1b:f6:b0:f5:b2:c1:10:73:76:de:66:
98:48:23:96:be:f6:94:37:f7:96:28:ef:da:b5:ad:
06:5b:cd:36:25:4b:ef:02:07:98:6d:de:bb:70:cf:
00:7d:de:35:f2:b9:4c:c3:05:91:96:bd:91:c1:0d:
08:4e:64:72:77:c5:c3:59:bb:6f:d2:d5:cb:d2:0a:
eb:e8:2b:2f:4f:06:5e:13:f3:f1:73:2f:bc:57:20:
7b:db:cc:89:c7:17:fa:c9:d0:cf:9a:ae:5b:6b:ef:
88:08:64:f1:1c:0f:bd:28:73:0f:3e:d2:75:e6:c6:
66:ce:e9:24:bb:e6:8a:96:39:22:2d:10:8f:40:a7:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AA:67:72:9A:23:A4:68:0C:5E:95:59:12:06:C3:D6:E6:58:3D:14
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/2KpncpojpGgMXpVZEgbD1uZYPRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d8c0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:5e:e8:11:43:32:b8:5d:29:6b:dd:be:2c:c0:4e:57:63:c7:
23:ab:5c:6e:d2:0f:e9:ec:45:02:76:2f:49:ff:26:70:3a:f0:
4c:d0:ae:40:90:7b:f8:ca:fa:11:5f:16:4e:91:48:82:fa:e1:
08:9e:da:7b:bf:a6:05:f1:06:36:bc:2a:df:29:ba:42:5f:5a:
b2:ac:8e:c7:c0:8a:76:b6:a5:7b:f7:01:a0:24:28:b7:08:0e:
ce:52:bf:76:5a:a9:79:c1:3f:e8:08:dc:32:36:8f:ba:2a:2d:
51:e1:0d:09:42:2a:37:14:2a:78:14:f1:64:a4:6e:75:3f:fc:
dc:cd:16:e8:0e:4f:d4:60:a4:34:6e:5b:11:08:0e:ec:a7:d9:
a3:24:42:e9:ac:c1:5f:dd:c0:32:4b:7a:8d:43:9d:c8:bb:66:
9c:fd:c5:3c:c4:6b:46:9d:6e:e6:42:65:53:b7:0d:40:77:2f:
f2:68:9d:96:09:f5:19:49:53:07:2b:ec:14:09:f9:2f:14:c0:
13:1a:fe:46:58:a0:04:b2:65:15:f8:07:fa:67:dd:ca:bd:b7:
28:de:7e:67:a3:62:1b:61:b7:9b:8f:16:d6:81:e9:1f:0f:81:
21:3e:0b:02:c5:4c:27:5f:d8:f5:0c:59:1f:36:1d:77:e8:14:
a1:4a:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:12:55 2025 by rpki-client