Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6Vye3AgfMhqaTscVgAAGyNSTQzw.roa
File: 6Vye3AgfMhqaTscVgAAGyNSTQzw.roa (raw, json)
Hash identifier: paejFqyt/Y5FgR1rckOWHKZim4/Mf71EDVJ3iFFsqcY=
Subject key identifier: E9:5C:9E:DC:08:1F:32:1A:9A:4E:C7:15:80:00:06:C8:D4:93:43:3C
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018F0A9C0935F35CF07700929AA394DB5252
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6Vye3AgfMhqaTscVgAAGyNSTQzw.roa
Signing time: Tue 23 Apr 2024 10:59:09 +0000
ROA not before: Tue 23 Apr 2024 10:59:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44237
IP address blocks: 85.94.0.0/23 maxlen: 23
85.94.0.0/24 maxlen: 24
2a02:930::/32 maxlen: 32
2a02:930::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 04:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:9c:09:35:f3:5c:f0:77:00:92:9a:a3:94:db:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 23 10:59:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e95c9edc081f321a9a4ec715800006c8d493433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e3:2a:bb:8f:be:4f:86:53:01:d4:4b:9c:a8:
0f:47:4f:d8:d8:22:05:22:10:b1:f0:ec:f6:f7:04:
0e:aa:b8:73:a9:9e:a4:4d:72:64:1c:a8:ca:01:88:
27:c0:13:01:36:8a:85:77:3c:da:6b:4c:57:a3:91:
a9:32:7d:72:a5:6e:f8:0d:e8:cb:9f:83:c6:53:cd:
35:74:4d:42:8d:e1:8d:07:f6:45:67:1b:c6:1c:89:
9d:fb:a6:6d:d7:03:bd:52:52:2c:73:fd:a6:6d:99:
0b:e2:ef:d4:27:2c:c8:0d:3d:c2:e9:50:1a:69:f1:
5d:2c:d7:c1:79:c4:1e:58:23:9e:a6:1b:27:b3:31:
63:48:b8:e4:ce:b1:e4:e8:3f:bf:b1:25:32:3f:01:
4c:0a:24:46:d7:1a:8a:79:05:20:f6:20:7b:2a:20:
d1:39:54:bf:18:b5:0a:2e:c0:62:19:43:71:71:d5:
ab:53:a3:1f:22:ac:11:2f:8e:83:f0:b6:ae:d0:b1:
0b:85:38:aa:1e:27:0f:ff:f8:22:4f:68:cb:2c:1f:
08:90:eb:10:a3:0c:4d:3c:00:10:f4:67:d3:cf:fb:
6f:19:e5:01:70:d0:53:4b:90:92:49:7e:6b:e0:b4:
71:d2:84:73:d5:bc:0f:9a:4e:2d:d7:91:d8:45:fd:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5C:9E:DC:08:1F:32:1A:9A:4E:C7:15:80:00:06:C8:D4:93:43:3C
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/6Vye3AgfMhqaTscVgAAGyNSTQzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.94.0.0/23
IPv6:
2a02:930::/32
Signature Algorithm: sha256WithRSAEncryption
59:4d:fc:ea:f6:1f:89:f0:28:05:6e:4d:d4:9a:d8:47:56:ba:
45:ab:44:91:94:09:08:e4:e0:7e:18:39:cc:ef:2e:ab:e6:78:
d0:cf:74:c4:cd:58:c9:6e:8c:d2:48:a7:ad:79:23:58:c1:55:
07:0d:de:f0:e8:73:5c:b6:f9:f8:b1:cd:68:a3:f4:30:8d:05:
1d:04:35:44:97:00:97:ad:6f:f0:c3:72:ae:17:f5:38:b7:fb:
7a:1e:8f:1e:77:c6:37:09:42:c9:94:52:74:5a:a7:14:12:e5:
22:7d:73:d1:d8:cd:4d:54:21:3c:44:43:07:ca:57:9d:04:88:
5c:1e:4c:9b:69:2d:4b:3d:c7:b9:92:36:0d:8e:65:5c:5f:91:
03:f4:ea:38:3b:2f:ca:db:30:5d:f9:4b:1c:9a:a5:a7:0e:bb:
f4:4f:3d:51:de:58:87:45:40:f1:2b:ea:2c:ad:a1:55:3e:39:
55:1f:c8:58:bd:5b:72:df:c3:48:6d:c5:e2:dc:dc:0e:82:d1:
bc:16:9a:8a:1a:37:96:39:32:45:0f:36:b5:ed:f1:a0:a0:1c:
11:63:aa:89:85:94:02:e9:12:55:80:02:27:9c:25:d2:95:c2:
d0:94:a5:10:ca:b4:27:74:cb:e4:4e:2b:78:4c:4a:c0:0e:6e:
74:ad:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:17:43 2025 by rpki-client