Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/rx6rRtipVt2H37-YV6WFN28EFGo.roa
File: rx6rRtipVt2H37-YV6WFN28EFGo.roa (raw, json)
Hash identifier: 1PsHGv/ZutZI296JpZtY5Rwqjm8tK8zd8gzsuuKserQ=
Subject key identifier: AF:1E:AB:46:D8:A9:56:DD:87:DF:BF:98:57:A5:85:37:6F:04:14:6A
Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial: 0190FD465B38DD84C2B38F8B84A062C4ACA4
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/rx6rRtipVt2H37-YV6WFN28EFGo.roa
Signing time: Mon 29 Jul 2024 06:56:04 +0000
ROA not before: Mon 29 Jul 2024 06:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49088
IP address blocks: 2001:67c:edc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:46:5b:38:dd:84:c2:b3:8f:8b:84:a0:62:c4:ac:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Validity
Not Before: Jul 29 06:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af1eab46d8a956dd87dfbf9857a585376f04146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:97:b1:17:89:21:e7:5e:70:cd:c9:86:b6:
ac:ee:fc:10:d3:41:dd:ac:32:08:fd:e7:7a:d6:d1:
2a:42:7e:4f:5a:0b:67:3f:07:a0:b1:09:56:f5:d3:
41:cd:bb:58:42:7e:ab:df:3d:e4:49:c0:a6:8f:5c:
77:b1:79:b1:8b:89:22:bc:2f:0e:d2:f8:93:d4:f0:
64:54:3e:ff:c5:1b:a4:e0:18:dc:ca:a9:d7:d1:58:
84:11:f7:b5:3a:e4:08:c4:d6:21:42:1e:0c:3a:c3:
6a:20:43:90:88:f4:ff:fd:b8:c4:77:c7:da:26:0f:
44:a8:94:5e:4a:d4:aa:b6:d6:db:4b:a2:fb:e4:6c:
b2:a9:6c:d5:f9:c5:9b:7a:10:ee:c6:6b:03:b2:30:
57:b8:91:45:59:19:8a:7d:d8:97:bd:ac:a3:78:ba:
36:aa:5a:f5:e4:92:1f:f3:9f:a4:65:a2:41:ba:52:
a5:4d:40:f1:a7:2e:0f:00:70:b2:ad:e1:32:f4:25:
3a:6b:b1:43:86:0a:47:c8:72:1f:22:74:ce:58:b9:
3e:78:4d:ac:48:61:e7:a5:c2:3b:93:f0:a8:bc:70:
d8:c8:67:51:f2:fd:f0:84:c9:cf:d6:bc:5c:06:ea:
60:54:4f:b4:a9:50:c1:44:95:a7:5b:f6:93:20:69:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:AB:46:D8:A9:56:DD:87:DF:BF:98:57:A5:85:37:6F:04:14:6A
X509v3 Authority Key Identifier:
keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/rx6rRtipVt2H37-YV6WFN28EFGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:edc::/48
Signature Algorithm: sha256WithRSAEncryption
32:d7:35:64:b9:ee:e9:0c:21:77:84:37:fa:0e:fd:fb:5d:e8:
b7:ed:90:73:39:d7:88:94:19:88:88:ce:c3:04:18:e6:1b:89:
04:be:12:5f:da:47:18:26:f7:9f:7a:26:5c:83:6b:95:5e:2d:
a6:9b:aa:ba:27:96:6a:d9:99:e3:6b:9d:bd:35:4a:76:07:9a:
2c:64:7c:cd:a1:e7:76:73:33:4e:23:f8:73:e2:57:2d:19:98:
7f:88:75:36:1b:34:0f:21:27:98:95:e1:17:c8:b6:ab:0c:99:
12:f5:39:80:bb:c0:af:b6:05:d8:d8:42:4f:2f:07:5c:66:9e:
b1:d6:ba:53:88:ec:70:c6:1c:65:fe:f2:77:51:13:a2:a6:1d:
5a:91:38:07:8f:28:b6:8c:da:c9:2a:37:54:88:b1:65:b7:22:
71:d0:dd:6e:04:30:fe:9b:82:4d:4d:49:0d:bd:ac:98:83:da:
12:16:95:f0:56:02:d6:11:16:d8:9c:05:57:3d:0f:44:fe:3f:
b3:04:dd:83:03:d7:d2:d8:a6:bb:07:24:0e:e2:31:9a:72:58:
4e:7d:1e:76:dc:a9:83:b7:e0:0d:6f:73:4a:30:0a:67:f8:11:
cc:0a:1f:06:ed:d4:d7:3c:f3:b5:fe:b4:86:6d:d8:b1:9f:2e:
f1:3a:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:12 2025 by rpki-client