Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/C2r0BDeGfZVNq_0vfijgkpLtxh4.roa
File: C2r0BDeGfZVNq_0vfijgkpLtxh4.roa (raw, json)
Hash identifier: 2sSxGXO5+NHHHKFopXfXPpsRxvbEZtNPxsL5cQVcQSo=
Subject key identifier: 0B:6A:F4:04:37:86:7D:95:4D:AB:FD:2F:7E:28:E0:92:92:ED:C6:1E
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 019420D66587ED552F259421195DBB42FEFF
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/C2r0BDeGfZVNq_0vfijgkpLtxh4.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44947
IP address blocks: 2a13:3cc0::/30 maxlen: 30
Validation: Failed, certificate revoked on Fri 24 Jan 2025 21:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:65:87:ed:55:2f:25:94:21:19:5d:bb:42:fe:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b6af40437867d954dabfd2f7e28e09292edc61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:87:c0:d0:29:d5:51:43:f9:4f:a2:96:e6:
b9:c9:a8:77:5d:f1:22:02:8a:22:8f:3c:ce:04:3d:
ea:56:04:f0:b9:44:aa:a0:72:0c:f8:54:14:e6:cb:
8c:69:59:05:b6:97:0c:42:a3:e2:95:12:5c:b1:8a:
f9:7b:a4:a8:ba:e7:2b:28:dd:47:b8:aa:cd:19:39:
1e:ef:a0:8b:71:32:d4:93:d5:ab:ac:e8:13:7c:9b:
29:12:45:95:23:26:dd:46:d3:a2:ab:88:c3:14:7b:
de:c3:d4:8e:b9:03:89:c4:a0:7e:27:e6:b5:cf:7d:
35:cd:ea:56:38:25:34:a1:89:55:b3:31:40:19:bc:
25:07:49:3d:9e:63:e1:39:e2:30:2c:ef:c3:cb:dd:
cc:9a:29:b6:4e:83:5a:43:85:d4:10:a0:36:8f:49:
62:e1:fa:4d:e5:00:d1:b3:b7:03:36:64:81:80:48:
f6:31:72:43:2b:34:86:6f:da:15:74:d1:4f:91:95:
26:f3:60:84:13:a1:4d:35:ec:83:66:25:4e:76:fb:
74:70:78:1e:11:a6:dd:79:ef:ef:c2:67:e6:a8:4b:
5f:c9:b9:a0:05:ac:99:6b:d2:bd:f1:3e:10:6f:49:
68:3d:8c:38:b6:ee:8a:6e:f5:5c:1d:f0:02:59:6d:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6A:F4:04:37:86:7D:95:4D:AB:FD:2F:7E:28:E0:92:92:ED:C6:1E
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/C2r0BDeGfZVNq_0vfijgkpLtxh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3cc0::/30
Signature Algorithm: sha256WithRSAEncryption
90:2f:f0:67:13:ff:fb:48:88:17:03:9e:44:b3:40:a6:0d:2e:
e6:cc:b2:44:84:44:ed:74:c1:00:35:1f:bd:ac:d2:44:40:0a:
60:34:bf:19:f1:ae:dd:5d:b0:d0:c2:61:cd:2a:41:15:58:ae:
39:c5:a1:1a:3e:8e:96:71:a8:11:ea:b6:37:d9:bd:c7:43:c2:
e9:75:cf:92:e9:1b:0c:7b:36:6a:96:51:f3:c9:c2:71:21:d1:
be:c7:33:99:01:e4:e6:42:c1:ec:0a:cf:57:a5:5d:09:c0:81:
4c:e8:8c:98:7e:77:1d:cb:39:b4:aa:0f:87:5b:96:6e:8f:0d:
2b:8d:03:55:a4:4c:69:78:65:ef:44:27:3a:85:e7:18:fc:be:
70:96:30:38:b9:b5:f9:3e:38:de:87:35:b1:3f:0a:e1:9a:7e:
d2:60:81:8e:83:22:bc:c7:0b:28:ae:12:d0:62:13:46:c4:d6:
5f:a4:22:79:53:6a:44:85:8c:66:c1:47:df:ec:8a:60:b2:0e:
83:6a:bd:e0:be:1d:b7:f4:4a:3c:46:80:84:ba:1f:6b:bf:f7:
6d:92:7f:79:95:ba:fe:48:22:0b:41:13:a4:53:d4:99:1a:4d:
d1:df:1c:f1:e8:00:69:d5:00:7e:f8:7f:8d:5e:b5:59:ca:c7:
2c:24:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:04:59 2025 by rpki-client