Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/rcu8mPCD7dqPAWvlFduRITKoBV0.roa
File: rcu8mPCD7dqPAWvlFduRITKoBV0.roa (raw, json)
Hash identifier: zyAPOqLTNFyWEQfAhGPM9Kg11ECQgOZ3EfCDXOlGxzI=
Subject key identifier: AD:CB:BC:98:F0:83:ED:DA:8F:01:6B:E5:15:DB:91:21:32:A8:05:5D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01919D6B070B0275EAB1E066EEFE01B79606
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/rcu8mPCD7dqPAWvlFduRITKoBV0.roa
Signing time: Thu 29 Aug 2024 09:15:22 +0000
ROA not before: Thu 29 Aug 2024 09:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0d:8b40::/29 maxlen: 29
2a0d:9440::/29 maxlen: 29
2a11:26c0::/29 maxlen: 29
2a11:2b40::/29 maxlen: 29
2a11:3580::/29 maxlen: 29
2a11:4080::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 16 Nov 2024 08:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:6b:07:0b:02:75:ea:b1:e0:66:ee:fe:01:b7:96:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 29 09:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adcbbc98f083edda8f016be515db912132a8055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:7b:67:80:9e:48:eb:67:ad:b9:2f:16:52:
3c:db:4b:db:cd:0c:05:c7:b8:6f:cf:44:c0:b9:22:
5c:93:51:0e:19:ad:1c:5a:b9:9e:36:84:91:c0:53:
b0:ca:61:00:99:16:be:c3:6f:4f:e1:db:8e:86:f9:
26:19:0c:ef:d7:b2:2d:d5:ca:5f:71:39:eb:50:98:
f3:f4:94:8a:41:9c:9e:1b:c9:f8:9e:6a:83:75:61:
2d:94:c4:54:ba:78:46:84:b8:da:90:48:93:57:f7:
80:15:5f:f1:c6:8e:5a:b1:40:66:92:a0:5a:b9:6e:
4c:50:41:09:e2:45:5a:50:77:9f:06:61:65:c7:1c:
3d:0b:ce:63:f6:d5:66:53:ea:04:ae:40:b7:74:74:
37:80:24:34:26:0d:97:30:c1:2d:b9:f6:ed:06:84:
53:06:a2:fc:92:9f:fa:5f:d5:c6:98:1a:36:35:cb:
17:46:e8:ee:78:c5:8c:99:14:2d:b9:e6:22:f5:b4:
16:f0:ab:d9:56:9c:ed:b6:95:81:03:71:6d:41:43:
80:42:53:6e:04:ca:b0:cd:e9:cb:a8:ec:95:f0:cd:
62:c0:65:1e:a3:24:9a:d8:f8:1c:1a:0d:87:6c:e7:
12:67:e7:31:11:60:15:15:e6:29:af:90:68:61:cc:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:BC:98:F0:83:ED:DA:8F:01:6B:E5:15:DB:91:21:32:A8:05:5D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/rcu8mPCD7dqPAWvlFduRITKoBV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8b40::/29
2a0d:9440::/29
2a11:26c0::/29
2a11:2b40::/29
2a11:3580::/29
2a11:4080::/29
Signature Algorithm: sha256WithRSAEncryption
4e:45:af:ef:94:bf:62:1d:ce:ba:1f:7b:0c:1e:cf:c8:96:03:
c1:73:8a:60:9a:c4:29:be:80:16:5c:fa:82:8c:72:00:8f:a7:
f2:23:b2:de:42:df:89:79:56:48:48:d7:be:89:0a:4d:6c:c9:
15:12:a8:3d:bd:b0:31:f7:06:0c:b4:f7:5b:ed:09:ae:25:71:
c4:46:e1:c4:67:cd:f9:f5:5c:83:35:84:53:13:be:ec:d4:11:
ef:d9:0a:a5:0e:2f:63:09:09:76:e6:83:ed:c3:25:ca:ef:8f:
d1:92:1d:19:f9:49:f1:3b:73:f7:d9:80:ee:75:b1:0d:ed:a6:
b4:d1:d6:70:f9:84:96:6f:0b:ae:d0:46:3b:36:4a:f2:0f:8d:
de:24:28:69:9b:7e:fd:70:07:6b:29:0a:6c:d8:47:0a:af:54:
2c:69:43:e5:43:59:89:6b:ce:44:5b:f1:36:67:40:c0:c1:71:
ef:7f:4d:de:e1:8f:01:ba:0a:39:63:79:29:54:ed:b8:f3:87:
16:a7:6f:2e:af:82:1b:b9:6a:d6:53:76:8d:40:81:52:12:3b:
f7:f2:4a:03:15:8d:99:ef:0c:51:e0:5b:ad:ac:c1:de:5d:17:
25:01:16:6d:13:d0:ce:f4:a8:16:6e:33:15:e4:2b:3d:8c:eb:
fb:f8:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:59 2025 by rpki-client