Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6069.roa
File: AS6069.roa (raw, json)
Hash identifier: qQS+9kMEjDPSY8D1v8bUAXtL6dvrpTPS4LeiOUXv99g=
Subject key identifier: DE:A0:CD:4D:B5:D3:CF:CE:1D:08:36:A0:05:76:BE:11:F8:C9:8A:23
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 05715F21C1C94D674282A77C3851C9526B3DE241
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6069.roa
Signing time: Mon 26 May 2025 19:37:11 +0000
ROA not before: Mon 26 May 2025 19:32:11 +0000
ROA not after: Mon 25 May 2026 19:37:11 +0000
asID: 6069
IP address blocks: 82.29.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 16:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:71:5f:21:c1:c9:4d:67:42:82:a7:7c:38:51:c9:52:6b:3d:e2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 26 19:32:11 2025 GMT
Not After : May 25 19:37:11 2026 GMT
Subject: CN=DEA0CD4DB5D3CFCE1D0836A00576BE11F8C98A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:5e:3f:31:1a:be:8c:56:14:c6:a3:39:70:
c0:e4:35:69:aa:f9:e6:3e:a5:f9:a1:ea:2c:40:10:
27:fc:70:02:f0:b1:31:f6:1c:68:3c:fa:43:c3:79:
8c:31:d3:29:ce:17:e1:86:a0:10:f0:80:f5:78:6c:
54:53:60:3a:4f:27:69:24:32:5c:53:c4:a0:f4:1a:
13:26:52:c0:06:90:5b:31:94:04:b9:95:5b:d1:dc:
af:33:c7:bd:fc:39:b0:2b:6d:c2:52:9d:ea:52:5f:
fe:19:c3:ca:2e:49:6d:a1:c7:36:c2:b0:72:d7:15:
ab:04:01:1e:22:c9:83:61:82:83:f2:bd:c9:7b:43:
d5:a9:4b:f5:79:56:c9:00:7e:4c:74:a2:52:2b:75:
51:81:4d:f7:10:7b:a6:3f:69:c0:67:1d:22:9c:26:
18:ff:48:90:26:07:20:07:ca:1b:8a:c7:fe:15:b2:
27:2e:96:79:44:9c:05:85:39:83:54:2f:6c:84:bb:
96:91:59:61:86:95:c0:1f:91:1e:23:4f:f9:b2:25:
49:e9:2b:fd:9d:4c:83:22:58:79:7b:81:b0:94:91:
78:14:2f:4d:8e:ab:c3:d9:b1:23:4d:68:7b:93:2f:
8d:7c:1a:78:93:7e:82:f1:e7:03:d9:dc:20:1d:ca:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:CD:4D:B5:D3:CF:CE:1D:08:36:A0:05:76:BE:11:F8:C9:8A:23
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d2:ab:37:b2:2a:ba:49:5c:7c:2b:0d:fb:13:f8:a6:ce:73:
bd:57:ff:52:42:7f:69:28:b7:97:2a:6f:c0:02:9c:95:4f:57:
57:75:25:b1:44:bf:e7:33:4b:bc:34:3f:3c:ee:aa:9e:58:5d:
cb:66:44:39:47:70:02:83:2d:53:ba:f0:59:f8:89:7c:e4:e2:
5e:cf:b5:62:a6:f8:9b:02:f9:7d:78:42:20:3f:6c:58:14:7c:
b6:5f:98:18:b5:35:a8:7c:9a:15:8b:3d:1d:d6:3c:cc:30:2d:
c6:70:6b:bd:d2:54:2a:1f:0d:a3:98:a9:96:10:e2:f5:73:a1:
7b:ce:31:ad:7f:e6:2f:35:5b:f9:e7:fc:49:1d:f4:6c:eb:08:
39:00:8a:a8:a3:b3:9b:7e:99:06:0b:e1:de:a1:a3:d2:1c:a7:
88:07:ac:1e:b0:37:48:56:31:89:66:22:a4:99:75:22:99:48:
8c:1a:ab:6c:46:5a:e9:54:34:c5:03:fa:bf:8e:54:05:f2:bd:
8a:4d:4d:1a:e8:34:5d:5e:0e:3c:66:87:bf:1c:39:84:f8:db:
85:16:2e:38:8f:09:27:46:76:dd:06:60:5d:ce:04:b6:fc:2b:
29:18:c6:d2:a4:d2:d4:91:38:51:34:42:89:ca:b8:36:a8:05:
9f:ce:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:20 2025 by rpki-client