Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6J1S8lWrQq4wyey0xxDEgFSgpBA.roa
File: 6J1S8lWrQq4wyey0xxDEgFSgpBA.roa (raw, json)
Hash identifier: xzqFi9Pze+HJUuoEZpYro8jksMbMv2mvyRbr/E4UWSE=
Subject key identifier: E8:9D:52:F2:55:AB:42:AE:30:C9:EC:B4:C7:10:C4:80:54:A0:A4:10
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019479B97BC92671B651AC98EFB501D5A31B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6J1S8lWrQq4wyey0xxDEgFSgpBA.roa
Signing time: Sat 18 Jan 2025 14:03:06 +0000
ROA not before: Sat 18 Jan 2025 14:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:18c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 20 Jan 2025 13:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:b9:7b:c9:26:71:b6:51:ac:98:ef:b5:01:d5:a3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 18 14:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e89d52f255ab42ae30c9ecb4c710c48054a0a410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:6b:29:ee:86:5b:77:37:d0:4a:a9:af:6f:
f3:0b:e5:96:c6:30:cd:4c:ef:f4:eb:f0:e5:fe:ed:
66:24:59:48:2e:d5:78:35:9b:58:95:ff:a1:4f:18:
a1:90:00:23:1b:bb:61:1a:59:fe:35:ff:36:4b:d8:
49:9e:3e:84:26:72:ce:19:0d:84:80:2a:be:49:ea:
33:e5:d1:59:1b:5e:dd:12:66:0b:03:b4:d4:77:8b:
ff:8b:4e:24:e4:02:ea:87:17:5e:33:b8:19:07:b1:
2c:37:59:5b:f5:ca:94:6f:21:d4:ee:e2:d0:e5:d4:
0c:3f:3e:b6:5d:37:b3:61:f8:c5:a9:0e:74:9f:17:
84:4c:42:bc:94:c3:e4:60:77:a0:75:ff:e0:6f:8e:
21:ac:9a:de:c5:05:47:ec:df:d2:db:4a:95:99:e9:
77:70:53:03:08:d5:e4:09:59:a6:71:a3:da:fb:fe:
61:53:58:0a:71:00:24:c3:b8:49:5a:0f:c2:6b:95:
0f:68:d2:37:08:32:2c:1a:b9:a7:4e:a3:2c:1a:d2:
b7:b2:11:40:b0:3b:7c:33:c1:5a:be:42:a5:9c:77:
92:54:68:4a:5f:07:2c:0d:80:80:55:a2:86:bb:94:
fe:02:43:5c:db:7b:10:14:bf:b4:5d:24:e6:93:5e:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:52:F2:55:AB:42:AE:30:C9:EC:B4:C7:10:C4:80:54:A0:A4:10
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6J1S8lWrQq4wyey0xxDEgFSgpBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:18c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:e9:c6:d6:c8:a1:a3:43:1b:e0:97:e8:56:4f:93:97:64:ab:
f6:2c:3a:eb:21:4a:98:4d:ee:6b:93:0f:fd:dc:0d:72:a9:a9:
1e:31:55:8d:c8:6c:d2:27:67:1a:fc:d5:24:51:78:55:62:28:
0d:f1:e0:18:c5:3f:29:3f:73:52:26:b3:75:05:00:c8:27:3f:
3b:ed:21:67:89:fc:87:ab:f1:b1:c4:66:13:ba:73:8f:30:49:
d3:37:38:bd:55:92:b3:63:3b:5e:ec:a0:e3:ef:3b:e9:47:09:
c0:f1:dc:88:02:6e:72:e5:e1:fb:a5:ba:5e:37:7d:1c:79:7d:
2d:23:c1:3e:ba:2d:27:f1:5a:9a:1a:70:b9:ea:01:f6:56:78:
fe:e1:a7:7a:83:4f:71:9b:a5:17:d9:07:5a:ea:16:86:cc:70:
20:ac:58:09:ee:1a:83:c7:22:f6:30:89:f5:f8:7b:2a:c6:77:
b4:29:23:b2:6e:28:6d:34:bd:cc:5e:9f:41:d4:6f:5f:6c:7d:
12:0b:e2:74:77:02:18:ed:64:90:fc:69:32:38:ec:e3:42:53:
e7:4c:24:99:36:d3:3d:6e:0a:dd:e3:06:88:09:ad:8b:ec:6d:
74:b0:83:30:c9:ba:08:af:79:90:51:ce:2f:17:e5:db:25:ed:
28:5d:3b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:28 2025 by rpki-client