Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iB4tpz7-KfZdZ93D554ZBBVQQgY.roa
File: iB4tpz7-KfZdZ93D554ZBBVQQgY.roa (raw, json)
Hash identifier: 8wILmE7oniGm18ahleP/VgtQRCblLqUs2S6gwpAWQic=
Subject key identifier: 88:1E:2D:A7:3E:FE:29:F6:5D:67:DD:C3:E7:9E:19:04:15:50:42:06
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0195027C1BB485B21FC0BF35CC94AC7FB7B5
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iB4tpz7-KfZdZ93D554ZBBVQQgY.roa
Signing time: Fri 14 Feb 2025 03:24:02 +0000
ROA not before: Fri 14 Feb 2025 03:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36832
IP address blocks: 2a0f:b244:600::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Feb 2025 15:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:02:7c:1b:b4:85:b2:1f:c0:bf:35:cc:94:ac:7f:b7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 14 03:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881e2da73efe29f65d67ddc3e79e190415504206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:06:94:96:15:4a:66:f2:c7:13:70:a2:d1:
62:a5:b8:06:78:85:1f:b5:41:a7:3b:60:16:71:40:
f8:2a:54:62:7b:e9:5e:4b:89:74:c6:a6:20:3a:14:
dc:2f:fe:b9:d8:35:91:c5:25:87:6d:32:9a:7f:0e:
05:95:8c:c9:4d:96:22:70:d0:58:c0:10:22:d3:c5:
9e:4e:ac:5d:d5:41:e9:85:45:36:bf:a7:7f:c6:57:
c0:38:9d:85:a5:36:75:a1:6d:24:35:83:70:7d:97:
53:b4:a1:82:1a:e6:0c:ca:cb:3f:0c:22:65:28:c1:
5b:97:97:67:de:8c:b6:c2:18:8a:4f:32:cd:98:ec:
e8:e2:11:72:81:d1:1b:f9:cb:cd:65:aa:00:96:4c:
d1:18:8f:4c:ba:58:19:cd:3c:14:dc:ca:c6:55:91:
7a:5d:38:38:ae:8e:73:9d:34:3f:c8:bc:ba:4a:e1:
f2:ad:77:75:8c:d5:13:7b:90:59:dd:0d:94:ec:35:
c2:eb:1d:ca:7c:52:0b:70:f0:ac:ae:12:06:0d:dc:
3b:8a:93:3b:da:79:e5:36:6a:82:a8:0e:ae:e0:60:
be:39:88:1f:aa:a6:f4:ad:e1:66:f1:bc:23:32:03:
ae:61:20:14:dc:3b:4e:98:09:42:e5:70:15:18:1e:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1E:2D:A7:3E:FE:29:F6:5D:67:DD:C3:E7:9E:19:04:15:50:42:06
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/iB4tpz7-KfZdZ93D554ZBBVQQgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:600::/40
Signature Algorithm: sha256WithRSAEncryption
18:4e:61:fa:8b:44:a9:7e:f3:f3:03:48:1d:5e:37:92:b7:be:
a2:88:78:7e:b7:39:06:61:e6:77:c5:b6:42:4d:bf:69:bc:2f:
bf:42:74:a1:98:d8:17:ab:90:39:e6:70:e1:56:cf:91:ab:28:
52:e7:fd:4b:68:8d:6c:a5:a4:b8:2a:02:76:f2:83:c2:84:bc:
0e:fa:1b:9a:eb:a8:a8:89:13:c1:2a:b6:5d:fd:70:22:d2:02:
25:42:52:f1:b3:19:1d:3d:0e:7b:f8:28:7b:55:d2:38:c2:b2:
2a:60:7f:d6:de:76:55:58:fa:67:85:00:0d:df:5c:76:c6:c2:
8d:a1:0e:f5:c9:e5:58:ca:df:37:52:6c:bf:c2:d4:5d:a3:4f:
0b:79:1a:0c:31:4f:83:6c:0e:0c:2f:74:86:1c:91:8c:56:f1:
f0:0d:51:b9:07:11:12:cf:01:f6:ff:9b:84:37:4c:e2:29:62:
30:82:39:07:e4:b4:d6:81:2b:a4:5d:8a:67:f0:91:f5:86:fb:
22:34:61:5e:d8:6a:ca:1b:5c:67:45:f7:1d:5a:e5:ba:cd:34:
f5:96:27:38:69:6b:2f:70:89:79:7d:b3:d7:25:2b:36:21:f7:
bf:59:b3:22:e1:92:10:bc:d0:2c:83:fd:98:a5:1f:b0:30:a1:
fe:d1:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:41 2025 by rpki-client