Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/kkAKOV86Ht1CkCbAAs6YCTYcozA.roa
File: kkAKOV86Ht1CkCbAAs6YCTYcozA.roa (raw, json)
Hash identifier: t/PWMrL0d4ad7xYgqX5LMwnEE56+GEVVkqo6TR9chZE=
Subject key identifier: 92:40:0A:39:5F:3A:1E:DD:42:90:26:C0:02:CE:98:09:36:1C:A3:30
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228DF9938AA8BDACC81927E0EFB938A0
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/kkAKOV86Ht1CkCbAAs6YCTYcozA.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8285
IP address blocks: 2a06:e8c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 03 Jan 2025 06:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f9:93:8a:a8:bd:ac:c8:19:27:e0:ef:b9:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92400a395f3a1edd429026c002ce9809361ca330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:e7:5f:07:08:ad:cc:81:51:8d:23:ba:5d:
00:a0:93:ff:85:4d:99:5d:ae:c4:0b:f7:25:ab:07:
9b:c8:89:a5:12:03:e8:06:32:e9:44:a0:07:18:fc:
e8:6a:03:d3:09:22:fd:12:49:fb:01:ea:ed:20:17:
aa:d7:6e:58:cd:27:97:7f:e8:14:41:3a:c3:c0:b9:
64:47:76:84:b0:f8:2e:fa:de:6a:78:fe:46:be:fb:
be:dd:1f:fd:d7:fc:1c:4d:18:ff:7e:41:95:7b:3f:
9e:1d:1e:56:f1:76:f9:a8:5d:9a:87:54:3c:1a:87:
0c:b2:34:8d:76:6e:00:f3:82:89:e3:96:08:97:31:
68:d1:cc:97:21:6c:95:74:0b:08:ab:df:e2:a5:ab:
5c:e3:ee:4a:10:54:21:ad:d7:80:91:3e:8c:09:4b:
55:29:0a:04:1c:d8:00:38:1a:45:97:e2:ed:57:d9:
89:b5:ae:57:00:2e:43:77:fb:77:90:9b:ff:7c:48:
33:e1:8d:e5:67:b5:aa:94:81:ed:80:02:7d:24:76:
98:10:b7:24:ab:83:78:ac:19:a5:ac:76:2c:d9:9c:
c3:13:33:a9:5d:96:94:47:54:ed:b8:70:41:93:97:
70:1b:b5:7c:e5:79:c1:65:11:ca:6f:fc:22:1f:2f:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:40:0A:39:5F:3A:1E:DD:42:90:26:C0:02:CE:98:09:36:1C:A3:30
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/kkAKOV86Ht1CkCbAAs6YCTYcozA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:0c:87:e7:c6:91:5c:31:29:ef:4c:4c:21:06:b2:72:09:0f:
90:70:25:fd:30:17:85:bf:83:ef:2d:26:33:f6:0d:1c:46:13:
85:07:db:22:64:13:ac:cd:b7:64:53:17:24:c5:4d:f2:fb:62:
af:32:81:1c:c5:6e:c7:5a:2f:96:96:98:92:9f:95:6c:f6:86:
fc:89:47:dc:42:0d:a1:af:83:e5:e9:0f:98:4b:f9:83:4d:51:
3f:d8:41:3d:4c:b7:18:97:f1:79:8e:90:a7:bd:a8:a6:53:53:
5b:d6:62:ad:e2:28:50:8a:f4:72:ac:46:a0:00:63:ce:bf:87:
d5:38:d8:ad:3b:4d:75:71:a2:35:a0:1f:86:48:f5:3b:e3:3c:
56:25:2f:72:03:0d:05:bc:ab:4a:86:a1:8a:f1:3e:84:68:ce:
f1:9f:78:85:98:d8:d1:c9:d8:e5:73:22:26:6e:a5:ae:c6:2f:
7b:60:2e:48:cb:9b:bd:a6:17:1b:a2:5a:73:0c:3d:11:32:de:
77:7b:d7:21:7e:c3:ab:3b:be:99:e2:18:0e:65:e9:42:bb:9c:
7e:98:44:4f:69:5e:67:28:ca:38:da:2f:03:54:ad:f2:78:a6:
f4:f3:65:e0:0d:bf:89:db:3e:96:fc:2b:b3:06:99:6a:5b:0c:
dc:2b:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:05 2025 by rpki-client