Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/6jk6JbLY2HGc8oGrF4k1BZMRDAI.roa
File: 6jk6JbLY2HGc8oGrF4k1BZMRDAI.roa (raw, json)
Hash identifier: 4EeOyYjWqqCnBLrjfpDSIwevb+X+CAuYy9xG5pWdDLs=
Subject key identifier: EA:39:3A:25:B2:D8:D8:71:9C:F2:81:AB:17:89:35:05:93:11:0C:02
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0193A342C5A3300857AD94DCD529A6098908
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/6jk6JbLY2HGc8oGrF4k1BZMRDAI.roa
Signing time: Sat 07 Dec 2024 22:34:42 +0000
ROA not before: Sat 07 Dec 2024 22:34:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 2a10:eb80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a3:42:c5:a3:30:08:57:ad:94:dc:d5:29:a6:09:89:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Dec 7 22:34:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea393a25b2d8d8719cf281ab1789350593110c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:48:0a:52:a0:71:a2:bc:a5:f8:82:a0:3c:
05:b9:a6:af:dd:90:f3:36:ec:ac:6b:83:7b:b5:14:
71:29:3f:f1:9f:cf:1b:7f:11:95:91:e7:10:8c:e9:
a0:9f:f8:07:21:e2:3d:2f:59:95:7d:6b:3f:b5:71:
3f:d3:61:8b:a3:73:61:cd:0f:b8:14:bb:37:19:f8:
fa:92:aa:30:61:b7:fc:bb:ac:b7:f2:9f:8d:c5:17:
e4:06:12:2d:8f:80:4c:7c:15:43:d9:4b:7b:ec:db:
96:06:f2:11:fa:c5:cd:12:d7:7c:7b:f9:dc:eb:25:
78:7d:93:be:0d:44:c3:b3:04:fa:db:13:f7:89:de:
f8:e1:d5:fe:2a:81:35:c5:12:cd:76:74:84:5f:6e:
35:9e:47:64:f1:e6:38:f1:9b:e4:f2:8a:42:44:b0:
23:88:90:48:42:95:39:ae:f0:23:25:37:66:8b:fa:
e0:49:5e:12:7a:aa:ce:14:c4:0b:4b:13:1c:cc:6e:
46:ac:32:09:0f:7b:2f:d1:3a:cd:2f:df:57:c4:fa:
ad:65:5d:52:ff:1d:fa:bd:b1:b4:87:64:80:4e:6a:
45:94:d4:0f:23:d3:85:95:36:69:76:f5:0d:9b:0d:
7c:d4:37:03:bf:73:d0:fe:a8:c3:55:ef:63:da:1e:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:3A:25:B2:D8:D8:71:9C:F2:81:AB:17:89:35:05:93:11:0C:02
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/6jk6JbLY2HGc8oGrF4k1BZMRDAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
04:80:64:c8:7a:f0:b9:6d:59:fa:d9:c2:7b:4c:c5:83:47:22:
c7:4e:3f:8c:ed:f1:d8:cb:af:9f:cc:48:f3:7d:f3:47:0c:69:
72:63:8b:e5:08:64:5d:64:c3:1c:1a:76:35:a1:aa:63:74:eb:
bd:b6:0b:be:88:e9:7d:cf:a8:14:01:2d:3b:4e:30:38:73:33:
04:85:cf:72:e2:b7:59:73:21:39:6c:6f:c9:60:e6:30:cd:46:
4e:b8:db:b6:8e:ca:95:e4:ad:02:53:06:cd:56:b2:ac:a6:ea:
f7:cb:3e:d4:4c:62:9c:df:67:28:6e:5b:96:96:a4:c9:6b:d6:
ac:05:23:73:b3:0b:98:be:fe:f0:0c:7e:6a:43:4f:32:8c:2d:
ca:a3:3b:e5:b8:19:ed:dc:1c:8e:91:56:fd:1b:5c:4d:3d:8f:
1e:69:77:8e:f4:1e:6c:8f:ea:0b:6d:8d:a7:b5:46:53:7a:33:
3c:30:8b:5f:e1:07:34:a8:71:30:e8:df:21:03:fd:4a:9c:54:
0c:9f:91:56:1e:b9:3f:8e:a3:98:61:b6:a7:91:13:21:1d:68:
8d:0d:3b:e2:8c:69:e9:7c:7d:a8:28:09:8a:c8:9a:9c:67:d3:
e3:03:20:e9:78:5f:b4:42:35:fc:ab:d2:11:e3:d6:75:11:c6:
3d:ff:fb:b6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZOjQsWjMAhXrZTc1SmmCYkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjQxMjA3MjIzNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTM5M2EyNWIyZDhkODcxOWNmMjgxYWIxNzg5MzUwNTkzMTEwYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFtIClKgcaK8pfiCoDwFuaav3ZDz
Nuysa4N7tRRxKT/xn88bfxGVkecQjOmgn/gHIeI9L1mVfWs/tXE/02GLo3NhzQ+4
FLs3Gfj6kqowYbf8u6y38p+NxRfkBhItj4BMfBVD2Ut77NuWBvIR+sXNEtd8e/nc
6yV4fZO+DUTDswT62xP3id744dX+KoE1xRLNdnSEX241nkdk8eY48Zvk8opCRLAj
iJBIQpU5rvAjJTdmi/rgSV4SeqrOFMQLSxMczG5GrDIJD3sv0TrNL99XxPqtZV1S
/x36vbG0h2SATmpFlNQPI9OFlTZpdvUNmw181DcDv3PQ/qjDVe9j2h6U2QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOo5OiWy2NhxnPKBqxeJNQWTEQwCMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvNmprNkpiTFkySEdjOG9HckY0azFCWk1SREFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhDrgDAN
BgkqhkiG9w0BAQsFAAOCAQEABIBkyHrwuW1Z+tnCe0zFg0cix04/jO3x2Muvn8xI
833zRwxpcmOL5QhkXWTDHBp2NaGqY3TrvbYLvojpfc+oFAEtO04wOHMzBIXPcuK3
WXMhOWxvyWDmMM1GTrjbto7KleStAlMGzVayrKbq98s+1ExinN9nKG5blpakyWvW
rAUjc7MLmL7+8Ax+akNPMowtyqM75bgZ7dwcjpFW/RtcTT2PHml3jvQebI/qC22N
p7VGU3ozPDCLX+EHNKhxMOjfIQP9SpxUDJ+RVh65P46jmGG2p5ETIR1ojQ074oxp
6Xx9qCgJisianGfT4wMg6XhftEI1/KvSEePWdRHGPf/7tg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:22:02 2025 by rpki-client