Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/2Gn9pes1s9SxBT_tsR_lzIucbS8.roa
File: 2Gn9pes1s9SxBT_tsR_lzIucbS8.roa (raw, json)
Hash identifier: Eu3+xFohG6k22hDzT38KaCtEMT+ZJVAx75M5B/7eonI=
Subject key identifier: D8:69:FD:A5:EB:35:B3:D4:B1:05:3F:ED:B1:1F:E5:CC:8B:9C:6D:2F
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019421B1DAD1D4261CD3BDA7742914F5A9F5
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/2Gn9pes1s9SxBT_tsR_lzIucbS8.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216235
IP address blocks: 2a13:f3c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Jan 2025 19:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:da:d1:d4:26:1c:d3:bd:a7:74:29:14:f5:a9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d869fda5eb35b3d4b1053fedb11fe5cc8b9c6d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:1e:d7:73:3d:81:de:48:c8:a9:2e:20:5e:
53:01:df:f9:bf:6a:72:75:76:a9:3c:86:03:b2:33:
24:fc:00:61:b6:2a:9a:2d:5f:86:07:39:09:10:36:
18:52:72:f7:ca:ad:45:f1:d0:6f:4d:b3:f3:b8:d1:
e4:31:28:85:1c:95:c7:6d:dc:e5:0b:05:51:84:94:
1c:6c:63:2b:c8:3e:30:59:69:17:cd:23:2d:da:f4:
2c:eb:25:ba:a5:f5:76:8a:54:3a:f4:16:d9:3c:ee:
d5:05:12:59:4b:38:21:37:39:c0:99:1e:e6:49:ba:
08:11:7c:4e:0f:c4:65:05:7a:d8:d4:ad:ce:1e:39:
bf:41:01:0a:1f:a8:cb:33:f9:b8:0a:83:f7:2e:07:
07:1d:16:a7:97:77:0a:d0:2a:d3:c3:ca:f9:37:da:
f1:53:f1:1d:ae:87:46:84:92:a5:ec:b9:f7:eb:50:
6b:8c:67:ca:27:0e:d9:30:fd:aa:f2:48:4c:6b:db:
a5:73:d2:df:69:62:7d:25:53:10:79:f5:40:69:c9:
e2:40:d9:90:54:7f:7b:f0:85:f4:2a:4e:61:d3:01:
29:34:20:21:2d:62:7d:f4:d4:5b:92:4d:78:01:53:
44:ee:9f:cb:fd:d1:0f:c6:8f:54:5e:a4:95:23:20:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:69:FD:A5:EB:35:B3:D4:B1:05:3F:ED:B1:1F:E5:CC:8B:9C:6D:2F
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/2Gn9pes1s9SxBT_tsR_lzIucbS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f3c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
19:b3:e7:ab:fc:7e:02:0c:07:0f:48:c2:91:5f:7b:df:1b:74:
a0:30:d3:10:25:19:91:1e:d6:5a:90:f4:66:08:d0:d1:b2:cb:
bb:bb:f2:15:b7:9d:ef:76:7b:4f:d2:d3:d1:b3:8d:92:86:15:
63:93:8f:1a:53:b8:fc:a4:28:7a:e0:f9:49:10:67:8a:5b:a6:
9b:87:d0:f6:af:eb:f2:ac:ff:bb:9a:8f:16:c9:d1:b8:c4:cf:
04:80:35:9c:70:f4:91:0c:5e:1a:af:93:44:39:6f:c0:1a:7d:
50:03:1d:2e:08:2e:ba:ea:61:69:aa:59:08:f5:d3:fb:43:c3:
24:89:85:aa:20:9e:39:27:0c:b8:17:ed:86:41:83:01:87:79:
e5:dc:b6:33:a1:3c:44:e9:a2:21:ce:85:c0:a3:c1:64:c2:ae:
9b:de:0d:94:40:b6:58:59:de:8f:52:ab:42:45:8f:70:77:5a:
a3:fa:50:9a:4d:bc:be:9b:ad:a2:cf:c5:d8:99:b2:ba:5c:35:
9a:0a:6d:49:7c:5c:a6:cf:8e:b6:0d:ad:6d:20:31:b1:ce:c4:
5f:7c:45:bd:4a:42:f5:dd:d2:3a:35:9a:10:54:14:f5:07:08:
47:de:dc:dd:5d:49:0c:4b:1d:af:fb:e4:e5:5a:f2:20:07:d1:
49:25:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:51 2025 by rpki-client