Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FeX-E6iPfeHrXi1xXCexdC0eGZg.roa
File: FeX-E6iPfeHrXi1xXCexdC0eGZg.roa (raw, json)
Hash identifier: 8R5yBE/LoZiAwO3azaXvrTI4fOtPm/lu3XW00tpriyo=
Subject key identifier: 15:E5:FE:13:A8:8F:7D:E1:EB:5E:2D:71:5C:27:B1:74:2D:1E:19:98
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB60A1A60882E37B4E775BDC41DDCA
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FeX-E6iPfeHrXi1xXCexdC0eGZg.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29182
IP address blocks: 2a13:2980::/30 maxlen: 30
2a12:a341::/32 maxlen: 32
2a13:2984::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 01 Feb 2024 03:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:60:a1:a6:08:82:e3:7b:4e:77:5b:dc:41:dd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15e5fe13a88f7de1eb5e2d715c27b1742d1e1998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:be:97:e6:7b:0b:a5:f8:c0:14:13:72:0a:
1c:29:ac:df:d4:5c:dd:34:30:76:7b:50:2c:a8:d9:
40:07:af:f6:d7:57:82:52:ab:01:20:c5:72:34:25:
9c:99:e9:43:0c:5e:58:3f:c1:89:98:20:60:f9:1f:
d2:da:69:e3:a9:15:b4:f1:b8:d1:7f:24:0e:c0:e8:
e1:06:7f:86:ed:71:e7:81:bc:02:77:4c:b6:68:68:
d6:97:65:e5:17:d4:cd:66:f9:8e:f5:41:b1:c4:b9:
0f:32:5b:40:18:8e:1e:96:a4:d7:74:17:e9:a9:f1:
aa:10:13:01:6f:5c:75:a9:b9:fd:1c:1d:b4:c5:4a:
fa:34:39:0b:6c:a5:61:09:ae:de:d5:a4:77:00:1f:
60:d6:2e:de:dd:04:80:37:6c:99:9a:0a:f9:0c:79:
bb:f0:37:69:f9:7a:e8:ec:9d:58:1c:d9:6c:6f:ea:
b9:1d:1d:ef:35:71:65:7f:a8:08:6b:74:e4:80:af:
ae:67:a3:19:ea:cf:25:52:b1:0f:5e:f6:61:d7:86:
65:a0:c4:42:6a:b4:4b:40:91:6b:ad:c5:66:cd:03:
f1:24:55:43:2b:57:5d:20:24:fb:ad:be:ca:ec:f2:
42:e3:5e:3d:c0:93:13:6c:7a:78:cf:a3:98:11:11:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:FE:13:A8:8F:7D:E1:EB:5E:2D:71:5C:27:B1:74:2D:1E:19:98
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FeX-E6iPfeHrXi1xXCexdC0eGZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a341::/32
2a13:2980::/29
Signature Algorithm: sha256WithRSAEncryption
d1:ae:6b:d5:77:d3:56:d2:a4:21:01:2d:8c:c6:b5:e2:3e:6a:
78:ff:82:26:9f:e6:f6:cb:56:95:e0:dc:b7:61:c0:d3:aa:31:
05:e2:96:c8:dd:ff:b5:af:d2:38:ee:a1:18:5e:c7:da:ef:f4:
68:30:ff:29:e6:06:70:47:96:a7:cb:1a:4e:9d:ea:38:c6:a9:
3c:5b:32:f4:7d:28:70:27:57:d1:26:e9:ec:f1:d0:f3:ff:7f:
6f:5e:fb:a0:ac:cc:46:f1:55:98:e3:f6:4b:9e:4e:31:ca:25:
d8:c6:be:4a:c1:42:2f:f4:e4:fd:34:a1:b8:a8:ab:82:91:9e:
78:62:85:86:f0:8c:24:6c:3f:e9:ae:80:80:40:0a:5a:ec:25:
1c:c3:23:7b:f3:86:35:c0:10:c7:8a:76:df:e0:af:a1:9d:44:
de:67:c8:29:65:71:ff:00:46:72:b3:0b:35:fd:65:ff:07:c4:
09:2d:30:62:50:31:4b:87:45:53:d5:89:6e:75:9f:71:83:85:
a1:63:a4:92:0e:27:31:4c:c2:f9:5b:8a:57:db:01:b9:95:5a:
b7:45:3f:12:c0:f2:39:bb:a6:63:ec:ef:31:f3:31:82:3d:f4:
32:5e:1c:2d:e6:5b:3c:ee:fe:21:58:1e:27:f4:37:1b:51:21:
bf:f5:c3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:47 2025 by rpki-client