Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/86czc-LsWhozWc-TE_Yd2ByhrCE.roa
File: 86czc-LsWhozWc-TE_Yd2ByhrCE.roa (raw, json)
Hash identifier: KFUxA2NTEviFE0lBYRq78bd61ohWFqAce2D5ZMpTDGw=
Subject key identifier: F3:A7:33:73:E2:EC:5A:1A:33:59:CF:93:13:F6:1D:D8:1C:A1:AC:21
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB606D3DB7E8EFEF7FEF9354B83A93
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/86czc-LsWhozWc-TE_Yd2ByhrCE.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:3884::/30 maxlen: 30
2a13:8c44::/30 maxlen: 30
2a13:8c40::/30 maxlen: 30
2a11:5780::/30 maxlen: 30
2a11:5784::/30 maxlen: 30
2a13:3880::/30 maxlen: 30
Validation: Failed, certificate revoked on Wed 20 Mar 2024 09:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:60:6d:3d:b7:e8:ef:ef:7f:ef:93:54:b8:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3a73373e2ec5a1a3359cf9313f61dd81ca1ac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:8e:98:d3:0e:5c:a2:d7:30:93:8e:41:39:
b1:4d:69:0a:f8:07:b8:f4:30:55:a1:9e:8d:04:be:
06:88:30:14:c7:41:e9:d5:6e:75:ad:7e:5a:b6:39:
da:cb:94:05:f3:43:3e:f8:84:3c:59:18:fa:b3:3f:
89:09:e2:d9:36:28:1b:c2:c1:f6:a3:a2:cc:40:a0:
32:c5:f2:75:31:a0:93:0f:00:77:15:ce:34:68:a7:
7e:ac:29:0c:30:f3:c6:9b:07:4b:4e:0c:09:26:71:
bf:d8:bd:29:79:1c:10:01:bd:f7:bf:88:cd:73:06:
fa:c2:2a:79:d4:dc:11:97:c4:3e:8f:de:f2:a3:d7:
d0:83:2f:89:f8:94:9a:9d:e3:27:63:59:e0:4f:34:
e6:f1:38:7c:64:bd:47:c7:5f:44:08:fd:8c:5f:41:
19:fe:9c:9f:90:2c:d1:8a:c8:e0:7b:61:14:68:7e:
18:03:5b:e8:6c:b2:8a:b8:aa:ff:7e:58:76:dc:72:
c8:4d:5c:b1:64:6d:8b:9f:79:7c:f1:01:67:4d:52:
13:f3:b9:57:87:6e:96:12:f8:cc:65:a6:99:cc:41:
c9:80:fe:a0:01:c4:0f:3d:74:19:7f:57:57:82:24:
ed:d7:29:7e:c6:55:31:aa:bb:8c:e9:bd:ec:63:ca:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:33:73:E2:EC:5A:1A:33:59:CF:93:13:F6:1D:D8:1C:A1:AC:21
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/86czc-LsWhozWc-TE_Yd2ByhrCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5780::/29
2a13:3880::/29
2a13:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
95:14:52:02:ce:c0:77:2a:0d:ef:31:39:61:06:4e:0e:eb:1e:
74:cf:83:d6:3c:b7:e0:aa:03:09:68:67:d0:b0:91:dd:5c:53:
1c:78:bc:fb:91:ae:9a:06:c3:8f:8f:bf:e3:7b:9a:35:63:ab:
71:d7:7f:cb:66:3f:a1:ef:a4:88:5d:37:96:58:48:ec:71:ee:
94:05:10:df:e3:f1:d7:41:2c:62:e8:48:c6:2d:38:f3:2a:72:
78:98:d6:50:1b:e1:83:42:53:44:7e:10:1b:8d:d9:17:27:66:
0d:bf:e9:0c:0e:87:8a:69:54:77:b3:61:d2:d9:54:48:4c:dc:
56:fe:51:a0:21:b2:07:c4:26:b3:af:d4:c4:68:fe:77:18:6e:
f1:b8:4c:53:80:78:b6:c7:6a:8a:05:e0:df:48:fd:99:d3:4c:
72:0e:30:c0:88:3b:1b:2a:f3:4a:11:eb:5f:2a:36:f6:41:17:
43:c8:b1:73:5d:b6:55:3d:11:6d:ab:bb:d7:5d:00:08:07:d2:
aa:a3:f0:05:83:3c:d0:78:e3:b9:60:0a:1b:90:44:60:24:85:
15:be:d5:c4:da:69:c5:2d:f9:b8:75:76:64:e5:40:89:58:14:
c8:b5:df:6b:a9:f2:be:92:ce:38:32:e1:4a:74:08:05:7d:77:
35:90:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:16 2025 by rpki-client