Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sKbYvCJVTfjkImTIswi88NPXT8g.roa
File: sKbYvCJVTfjkImTIswi88NPXT8g.roa (raw, json)
Hash identifier: VcPWwkFes2smz+Wr5iN1G+N1mwfSrAm7K4EmBgvhVzg=
Subject key identifier: B0:A6:D8:BC:22:55:4D:F8:E4:22:64:C8:B3:08:BC:F0:D3:D7:4F:C8
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDC2B5A76DF10C51EA772D14E4AF46
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sKbYvCJVTfjkImTIswi88NPXT8g.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207894
IP address blocks: 2a07:3500:1c30::/48 maxlen: 48
2a07:3500:1c31::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 15:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c2:b5:a7:6d:f1:0c:51:ea:77:2d:14:e4:af:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a6d8bc22554df8e42264c8b308bcf0d3d74fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:91:74:2c:68:2d:29:fd:29:1c:9e:2f:2c:
15:e1:67:fb:c0:f7:60:9e:1b:d9:b3:0d:12:27:fb:
67:91:a9:4c:6b:62:7a:24:42:3a:ae:98:22:7b:36:
f6:e4:cb:31:e9:ff:74:d4:9f:46:69:01:3d:fc:b9:
a9:9a:1f:76:32:fe:82:e7:4a:5e:ca:87:ca:f0:34:
84:35:ac:5e:7e:f4:aa:1b:28:6c:3a:60:86:ee:e3:
89:5e:ed:73:6f:43:48:cf:67:65:72:9b:6e:58:77:
33:c0:eb:46:c9:59:34:58:26:c7:7e:65:47:fa:81:
7a:01:a8:87:07:62:f7:79:ee:44:b3:63:25:a3:01:
c0:9f:4c:41:7e:76:29:2a:63:19:a9:b1:54:4c:7c:
7c:46:01:fe:e4:4b:9a:fa:13:66:5b:ce:7b:a1:6b:
19:87:bc:40:75:d7:4c:70:a7:78:49:f9:0f:16:ad:
ad:58:94:5b:29:b9:3c:63:a8:9a:08:fe:f4:b5:88:
a5:93:5e:0f:31:b7:eb:7e:2d:6a:cd:39:12:89:df:
bd:e2:64:30:75:a5:15:c3:df:12:ad:ec:e3:f6:1d:
3d:c7:1e:22:42:45:91:d9:d5:37:ab:84:48:91:21:
9b:a8:b0:6c:dd:e7:fc:45:dd:73:4f:af:42:24:9c:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A6:D8:BC:22:55:4D:F8:E4:22:64:C8:B3:08:BC:F0:D3:D7:4F:C8
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sKbYvCJVTfjkImTIswi88NPXT8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1c30::/47
Signature Algorithm: sha256WithRSAEncryption
33:df:a0:f3:d8:70:be:78:35:47:66:d7:f5:97:20:25:e0:9f:
01:b2:4d:44:0b:c7:5f:fa:b2:ea:6c:01:8e:8e:38:23:cd:65:
92:36:e8:51:7e:30:95:94:95:63:b4:fc:cf:7d:f8:99:a9:33:
02:e7:30:7b:65:3b:96:c9:ab:99:a6:d0:9f:64:09:44:9c:59:
fb:d1:0b:23:40:81:b9:ff:be:95:df:ac:e1:c4:a5:42:40:bd:
8a:27:bf:e6:94:45:da:30:60:c9:3e:84:1e:4c:11:ab:10:09:
54:27:09:fa:a5:4d:77:d8:4b:1d:b4:33:a7:b0:18:24:c4:7c:
e6:25:9c:e3:15:46:57:56:1e:01:f0:c3:08:d2:8d:f0:8f:25:
e8:8a:55:cd:39:56:43:a1:ce:7c:ad:8c:aa:97:89:cc:be:43:
88:fe:68:98:bf:cd:42:8a:72:1c:2b:67:6c:71:f5:eb:d6:63:
be:27:73:bc:54:70:ab:7a:6f:55:c9:a1:11:85:0e:5a:c7:0f:
8e:6c:12:60:bf:01:5b:3c:65:db:15:2d:04:a8:d1:0f:46:83:
46:d1:26:6e:98:63:3a:ad:a1:21:6c:65:6f:64:5e:71:14:4d:
58:98:a2:86:c6:a2:07:41:f8:3e:e1:16:2f:15:73:e8:78:e3:
68:86:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:03 2025 by rpki-client