Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/_7mQtMzGoCIwY4DuNuI8PEZI4t8.roa
File: _7mQtMzGoCIwY4DuNuI8PEZI4t8.roa (raw, json)
Hash identifier: DSktgHNGWNQnewNFUYVk3I8BD09vXdKLdlFWpAwS4VU=
Subject key identifier: FF:B9:90:B4:CC:C6:A0:22:30:63:80:EE:36:E2:3C:3C:46:48:E2:DF
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018DD618D583776B7DA519CB4904A5D769F0
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/_7mQtMzGoCIwY4DuNuI8PEZI4t8.roa
Signing time: Fri 23 Feb 2024 13:12:48 +0000
ROA not before: Fri 23 Feb 2024 13:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 2a00:e2c0::/32 maxlen: 32
2a00:e2c0::/33 maxlen: 33
2a00:e2c0:8000::/33 maxlen: 33
2a02:aa00::/27 maxlen: 27
2a02:aa00::/28 maxlen: 28
2a02:aa10::/28 maxlen: 28
Validation: Failed, certificate revoked on Fri 08 Mar 2024 12:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:18:d5:83:77:6b:7d:a5:19:cb:49:04:a5:d7:69:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Feb 23 13:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffb990b4ccc6a022306380ee36e23c3c4648e2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:26:76:1a:75:f3:a9:3f:c5:7b:a6:c3:e2:
fe:a7:cf:d2:88:a4:88:52:43:cf:f9:25:35:e1:a1:
6a:1f:0b:3b:50:88:7f:b6:e3:63:9a:c4:6b:22:03:
c7:45:f0:78:50:a8:75:2e:e1:8c:a8:b0:ec:a8:72:
b4:89:cd:da:e9:47:1e:cc:21:47:d3:de:03:89:c0:
36:48:40:94:cb:e9:87:6c:f2:56:9e:01:67:63:5d:
9d:24:86:07:4f:ec:cc:b9:1e:8d:2a:02:ab:0d:7f:
1c:4f:d7:b2:83:89:70:1d:f4:ba:d0:c4:06:9e:60:
a4:f8:c9:2a:bb:49:e0:c1:77:3b:1a:21:a7:bd:d0:
f8:c9:1d:b9:05:df:e9:e7:e3:3e:91:d4:2f:ce:e3:
c1:33:b4:67:3a:b9:7b:d5:ba:03:93:c2:f6:b7:88:
dd:2e:06:ed:77:13:70:2d:a4:f5:c2:8f:2d:77:07:
e7:4d:88:cf:16:10:4e:99:a8:0d:86:aa:d3:0e:32:
1e:51:f5:7a:8b:4e:c2:a3:3e:1a:8d:c2:04:e5:40:
b3:2a:d2:08:7f:f6:f8:e6:53:29:7b:a7:d8:74:81:
8d:4c:f8:5a:8c:f0:2b:15:f5:dc:5f:1e:b3:63:b8:
01:6d:bb:8c:16:a4:1c:af:60:f5:26:95:d1:56:61:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:90:B4:CC:C6:A0:22:30:63:80:EE:36:E2:3C:3C:46:48:E2:DF
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/_7mQtMzGoCIwY4DuNuI8PEZI4t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:e2c0::/32
2a02:aa00::/27
Signature Algorithm: sha256WithRSAEncryption
77:1e:d4:a0:89:5f:d0:43:68:da:b6:4f:46:18:30:cc:50:f5:
91:16:44:2e:42:94:38:b2:0b:2f:41:1f:03:b9:a2:86:96:2b:
77:97:ef:9b:ae:ab:aa:ca:85:57:96:73:16:c2:98:ed:c2:f5:
ed:0f:f4:88:8d:ce:e8:e6:bd:58:1f:8c:cd:ab:65:96:36:88:
4f:2f:06:ac:f5:ff:09:58:ed:d9:29:96:fb:72:9e:44:f1:24:
00:7a:5c:77:75:6f:86:75:c6:95:de:68:17:8f:fe:ba:95:32:
7c:90:a5:1c:d2:fe:81:94:bb:65:0d:3b:d4:79:05:35:9f:0d:
eb:95:80:c8:82:31:2f:48:c7:57:8f:ae:05:e7:f8:80:ab:19:
f7:59:bb:73:e3:40:35:6e:91:6d:aa:46:a6:bc:b8:cd:dd:53:
87:5c:e9:76:21:58:21:10:5b:d3:9f:ce:c7:1d:1e:a7:84:36:
00:5b:5d:d6:01:ec:d2:ab:5e:4c:9e:ea:3b:f0:fa:c9:9e:55:
a3:9b:00:01:18:5a:dc:10:06:c0:5c:3f:f3:8f:89:7d:dd:da:
cd:d5:80:b6:24:2c:23:be:a3:41:30:2a:47:47:42:95:ad:a3:
81:9f:22:ce:e9:ea:8d:7a:41:b9:62:8d:10:c0:58:00:07:f5:
20:36:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:33 2025 by rpki-client