Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/aFUGzScHVC6T5ix1t6rJtVU357M.roa
File: aFUGzScHVC6T5ix1t6rJtVU357M.roa (raw, json)
Hash identifier: qsJ4kCl778b/i3TYlPID9M3/JfYURM3LEopJuNKq/xM=
Subject key identifier: 68:55:06:CD:27:07:54:2E:93:E6:2C:75:B7:AA:C9:B5:55:37:E7:B3
Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial: 0193BFE62D02912AF4040352FC549ADBC38F
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/aFUGzScHVC6T5ix1t6rJtVU357M.roa
Signing time: Fri 13 Dec 2024 12:02:33 +0000
ROA not before: Fri 13 Dec 2024 12:02:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213713
IP address blocks: 2a0b:6981:111::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:e6:2d:02:91:2a:f4:04:03:52:fc:54:9a:db:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
Validity
Not Before: Dec 13 12:02:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=685506cd2707542e93e62c75b7aac9b55537e7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:fc:ac:1d:c4:14:59:32:14:5b:b4:b6:16:
a8:e2:8c:39:62:f2:e1:d9:5a:21:d1:70:90:33:45:
1e:40:31:20:72:d1:59:a2:a2:31:b3:10:86:a4:1f:
94:e4:85:e2:f9:61:df:58:d6:c5:96:99:43:d3:84:
2d:ad:c9:c9:53:e5:87:92:07:15:66:b7:93:2c:a9:
79:96:61:7e:44:b4:90:32:b3:59:a2:e7:ec:85:cd:
e5:5a:b0:db:4e:ca:0c:1d:f7:47:e6:51:ff:0d:24:
88:3c:dd:1a:fe:38:99:37:fd:a9:99:e7:47:87:90:
94:ad:9f:74:8d:88:15:3e:f2:ec:65:11:35:a2:b2:
27:2b:e2:04:25:99:d7:22:37:50:77:4c:fe:19:9b:
fe:00:6f:55:a5:2a:cc:53:cf:96:33:90:ac:30:55:
0d:92:ef:14:cd:89:a9:88:b0:6e:c2:dd:e2:27:b0:
8f:61:be:54:39:c1:31:48:65:ac:99:7d:fa:e4:6b:
9e:63:a6:eb:07:6e:d5:57:4f:12:5d:a6:5a:c0:5a:
b5:93:8d:5f:31:76:cc:08:ee:5c:d4:d3:e5:1c:c2:
df:80:39:2e:64:97:ee:2f:25:f6:9a:ce:44:24:bc:
04:e5:cb:3f:51:1b:61:48:67:f8:18:91:e7:ef:c3:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:06:CD:27:07:54:2E:93:E6:2C:75:B7:AA:C9:B5:55:37:E7:B3
X509v3 Authority Key Identifier:
keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/aFUGzScHVC6T5ix1t6rJtVU357M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6981:111::/48
Signature Algorithm: sha256WithRSAEncryption
08:74:6a:7e:3b:09:00:c2:f2:e0:a9:5b:78:41:08:96:e9:63:
0a:cc:e3:4d:2c:74:23:e7:9a:73:2a:6f:49:69:5c:7a:6b:a4:
89:72:47:e7:04:4e:33:41:d0:f1:db:55:e0:d3:65:a2:1e:93:
9b:c1:87:70:c5:b9:cd:09:02:8d:78:e1:86:60:61:f6:4e:25:
6f:93:6b:8b:28:e5:17:b1:f1:81:ea:31:32:93:b3:aa:48:b3:
f6:d2:d9:a8:87:f3:36:2f:e8:bb:9f:90:35:5d:8d:e5:b8:bb:
73:46:81:f5:54:16:a7:72:8c:38:33:5f:ca:0d:cc:12:dc:5b:
9e:46:53:3d:15:4e:ec:0c:ef:d1:9b:d0:bc:46:58:45:5e:4b:
47:26:0c:4b:3f:9f:0d:6b:13:10:43:e2:e3:b7:32:16:b2:ac:
2c:ef:b0:76:c9:ad:6f:48:9e:f4:ea:5c:0b:f8:80:d8:4a:74:
61:3a:fb:b8:2e:50:89:ca:74:d5:78:d3:2b:5f:97:89:8d:e7:
c1:cf:90:77:3b:01:58:eb:14:c5:d4:68:17:48:73:c5:13:7a:
66:93:3d:75:63:55:55:37:6f:59:9c:0d:19:67:18:9d:c9:3b:
ba:cb:a4:9e:74:be:1f:13:d6:88:da:d8:b3:4e:6d:7f:9d:35:
67:8c:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:23 2025 by rpki-client