Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vqDzIM8Vpyc5H4Q6G08m1Ms-YyE.roa
File: vqDzIM8Vpyc5H4Q6G08m1Ms-YyE.roa (raw, json)
Hash identifier: nuZC1cRA2wiE1foKjJMQVNNe552r5N/Ee2HXyblZwpg=
Subject key identifier: BE:A0:F3:20:CF:15:A7:27:39:1F:84:3A:1B:4F:26:D4:CB:3E:63:21
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01942825735BD20018567958F82F9410D36F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vqDzIM8Vpyc5H4Q6G08m1Ms-YyE.roa
Signing time: Thu 02 Jan 2025 17:52:10 +0000
ROA not before: Thu 02 Jan 2025 17:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198981
IP address blocks: 2a0f:b241:7e::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Jan 2025 23:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:73:5b:d2:00:18:56:79:58:f8:2f:94:10:d3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bea0f320cf15a727391f843a1b4f26d4cb3e6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:70:95:ba:4a:1a:96:0d:f6:c9:cc:59:a6:09:
1f:7a:57:b8:7a:f6:ce:08:f8:c3:97:3f:68:e1:45:
2d:a5:0c:e1:48:ae:8d:87:a3:f9:58:c3:67:63:92:
1e:27:2a:15:c7:9b:b3:a2:f2:ce:31:a1:a6:75:34:
48:1e:23:ee:41:9b:09:48:20:da:7f:bf:29:a2:76:
89:8d:58:10:09:16:f8:b2:1f:23:39:42:30:51:8b:
08:09:fe:54:f9:1f:c3:6f:04:0f:6f:29:e2:96:ee:
7f:f9:30:35:2f:14:d3:71:ed:7d:ae:a8:e7:80:12:
f6:d9:dd:d1:00:de:e2:a3:a5:2b:fc:d3:bd:69:29:
76:7f:6a:ab:74:a0:b1:80:af:70:56:d7:67:49:52:
5b:16:b8:bd:32:31:9c:5b:51:4c:00:65:41:46:59:
11:dd:b1:81:52:79:67:96:0d:a6:20:a3:b4:66:67:
92:f1:85:4d:c3:b9:d2:7b:00:57:6d:03:e1:e0:d2:
c7:44:cc:c5:1d:76:7c:da:ec:be:d8:19:60:c0:04:
69:6b:78:56:00:5a:d9:d1:87:2e:36:ad:cd:c9:ad:
5d:73:2a:32:88:74:f3:79:43:29:39:6b:6d:91:e6:
76:8c:31:83:76:da:13:e5:e2:6f:21:9d:e0:03:f7:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:F3:20:CF:15:A7:27:39:1F:84:3A:1B:4F:26:D4:CB:3E:63:21
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/vqDzIM8Vpyc5H4Q6G08m1Ms-YyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:7e::/48
Signature Algorithm: sha256WithRSAEncryption
38:de:41:a8:ba:87:53:3c:3b:5f:22:2f:b0:14:05:56:c4:e0:
ea:ae:ad:0a:51:ac:a6:07:05:b6:3d:74:32:29:8e:72:50:47:
b5:9c:ec:bb:eb:e6:9f:d3:2f:63:3a:56:31:33:c2:39:11:ee:
c6:8a:a5:ec:93:05:33:d0:25:7b:ce:7e:4b:ad:6d:66:3d:f3:
6c:e8:1a:9a:78:80:b4:66:ad:d7:24:2a:b5:de:40:3a:43:dd:
86:80:02:17:e9:f7:d3:34:94:6f:dd:bf:6e:13:8d:8e:81:b2:
d2:59:5d:8a:e0:51:33:b8:ad:c1:a7:87:8d:c7:02:99:ee:82:
36:af:cf:dd:75:31:bf:9c:31:9e:4d:44:1f:89:17:b9:72:e3:
7d:6e:74:b3:c8:dc:c8:78:0a:5e:3c:5f:87:29:01:e4:65:2d:
a7:ab:7d:31:09:7e:2f:8d:3f:cc:a5:9e:17:21:2b:7d:f8:79:
d0:c5:2a:42:7e:7d:f0:b2:f6:bc:62:4c:e6:a7:2a:36:96:7e:
47:4b:23:cb:06:36:22:fe:1d:04:f9:4f:96:4d:f3:32:c8:07:
77:a2:7d:49:f1:75:f3:19:68:b0:c2:18:d5:c3:e6:a4:f6:f4:
fa:48:57:3c:27:ed:be:4f:29:84:d1:f3:30:7a:e8:c0:1b:86:
04:d2:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:20:04 2025 by rpki-client