Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6HXWXu-gBgj1u2Bq9xwvuimU5Xc.roa
File: 6HXWXu-gBgj1u2Bq9xwvuimU5Xc.roa (raw, json)
Hash identifier: RHX7kATt9xezJJ8miP+e9GlMjbWsMqIxp9my+yHMkzk=
Subject key identifier: E8:75:D6:5E:EF:A0:06:08:F5:BB:60:6A:F7:1C:2F:BA:29:94:E5:77
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC2004F6AED2598E270EA00D4EC103
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6HXWXu-gBgj1u2Bq9xwvuimU5Xc.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 2a0f:c400::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 18 Jan 2024 14:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:20:04:f6:ae:d2:59:8e:27:0e:a0:0d:4e:c1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e875d65eefa00608f5bb606af71c2fba2994e577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:b5:67:2f:55:e2:b3:62:7c:1c:e6:9f:4c:
8e:db:dc:e9:e2:34:91:cb:d3:61:69:43:d2:17:13:
f7:8a:30:da:48:b3:d4:c9:45:79:2a:05:f2:48:1c:
5b:14:84:e8:e4:8a:f4:38:75:23:5b:1b:e0:66:a7:
cc:50:54:6b:7f:61:87:56:c5:dd:cc:71:95:0d:f7:
84:6a:fe:44:2d:b5:94:74:a2:cd:aa:0a:83:08:c1:
d2:d1:2d:71:25:9c:f0:53:86:72:a1:17:24:4e:bf:
75:78:f0:14:80:42:99:91:b0:ab:09:45:92:68:0c:
18:5f:8c:ab:5c:a5:d5:b1:97:3b:95:b7:0d:47:f9:
54:35:1c:68:3f:60:6d:eb:49:30:ef:d9:0c:21:8d:
a7:17:c6:b4:45:d4:eb:b5:ef:0b:d7:8c:7a:8d:ca:
f9:22:ae:12:db:b3:64:1f:bf:a8:6f:41:4a:ec:31:
a6:75:be:d5:96:44:91:8a:c9:3e:3f:16:f7:95:df:
9e:89:61:e8:4b:08:65:c1:6a:26:56:9a:1f:30:11:
83:cd:2d:29:04:cb:50:66:37:a4:d8:f8:5b:14:ee:
82:2f:41:bb:93:3c:a8:0b:18:91:c7:03:46:7d:1e:
1f:81:bc:0c:18:56:23:7a:bb:99:e4:93:87:65:a5:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:75:D6:5E:EF:A0:06:08:F5:BB:60:6A:F7:1C:2F:BA:29:94:E5:77
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6HXWXu-gBgj1u2Bq9xwvuimU5Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:c400::/29
Signature Algorithm: sha256WithRSAEncryption
7e:14:61:f2:12:10:90:ac:e9:35:6f:bc:0a:36:5d:e8:83:fb:
80:7f:b7:20:e0:30:31:ab:84:99:bf:6a:71:cd:91:71:67:a3:
4a:a7:c2:4e:6f:37:f9:46:34:2c:e8:b3:1b:4c:2e:0a:3b:2d:
c3:80:07:08:d3:84:b4:a6:4c:85:48:a8:c8:2c:c5:fb:4b:5f:
32:f5:4b:d8:85:28:fc:14:19:15:59:ab:43:8a:44:16:bc:0c:
bf:3a:a3:ea:13:3b:be:5f:75:42:25:f5:91:32:2b:ba:bc:3d:
29:f1:86:b3:cd:32:93:ee:c1:57:01:b4:f7:4d:13:7b:eb:13:
44:94:74:95:e3:82:81:a5:c3:8e:c4:38:94:94:b5:05:6e:21:
7a:6a:5f:8f:1f:9a:10:16:0c:10:60:e6:56:a1:bd:8f:71:0e:
03:e0:3d:7d:4c:1a:d2:05:23:b6:e8:04:c7:71:38:1a:c8:da:
a2:60:97:7e:1b:19:76:8f:56:db:f5:b7:ce:7e:2a:57:02:10:
d0:e1:94:a9:bb:69:ed:ed:89:af:0c:cf:51:e7:28:54:ad:3b:
f9:c1:0f:49:96:25:a7:3b:e4:fa:cd:e6:f2:2e:fb:d5:51:8d:
ce:ae:82:7c:27:9c:4d:41:e9:b9:a5:2a:9d:b5:e2:e2:97:18:
ae:75:2d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:18 2025 by rpki-client