Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6BCJWOtwnpQOfH_7J3VQh34nSQU.roa
File: 6BCJWOtwnpQOfH_7J3VQh34nSQU.roa (raw, json)
Hash identifier: 5WruSoL7dBUenbknaPcNdjye9O1oFyaMNfALdWQDDFA=
Subject key identifier: E8:10:89:58:EB:70:9E:94:0E:7C:7F:FB:27:75:50:87:7E:27:49:05
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01968169662E5AD2D16263D62F14670DDDF3
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6BCJWOtwnpQOfH_7J3VQh34nSQU.roa
Signing time: Tue 29 Apr 2025 11:58:10 +0000
ROA not before: Tue 29 Apr 2025 11:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133944
IP address blocks: 160.19.92.0/23 maxlen: 23
2a10:b40::/29 maxlen: 29
2a13:b4c2::/32 maxlen: 32
2a14:1106::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 01 May 2025 06:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:69:66:2e:5a:d2:d1:62:63:d6:2f:14:67:0d:dd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 29 11:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8108958eb709e940e7c7ffb277550877e274905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:61:61:a3:52:25:cf:03:ed:37:f3:df:50:
64:b2:05:e5:ac:ac:c7:5f:00:b9:47:96:20:21:c2:
c3:04:cc:29:96:5e:3a:8c:f9:4b:92:70:c9:68:cf:
48:47:c3:c8:41:9a:fa:49:0e:35:f6:9e:a5:bf:76:
4a:34:2d:65:9d:39:f1:2a:86:3a:da:f2:c7:fd:e0:
33:a2:94:9a:ae:68:41:f0:c1:32:44:d7:fb:34:ff:
fb:2a:90:97:00:af:9c:e8:0c:82:0a:22:44:40:10:
a7:c9:69:8d:61:95:a8:18:e1:da:80:f5:9a:ca:c5:
d6:17:83:da:5e:6a:a5:32:82:cc:4d:db:ad:82:34:
67:7d:5a:bd:61:d6:51:fe:e1:73:f4:bf:56:17:81:
73:b3:eb:62:15:e6:b3:26:64:ec:4f:6b:30:88:fe:
bd:d0:26:fc:d4:72:87:50:3b:ef:1d:3a:90:12:06:
28:c6:4a:12:ea:91:d9:f9:b1:d0:cd:58:f7:4c:08:
a8:cd:20:be:51:ec:74:12:c9:3c:56:2a:b1:9c:4c:
1a:f3:d8:6a:d7:0a:52:22:82:cb:84:ae:3a:66:d1:
ec:4a:e0:fd:00:68:5c:4e:82:b9:b2:a8:9b:98:74:
77:30:0c:cb:67:22:ee:51:09:d1:40:bf:8d:fa:1c:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:89:58:EB:70:9E:94:0E:7C:7F:FB:27:75:50:87:7E:27:49:05
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/6BCJWOtwnpQOfH_7J3VQh34nSQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.92.0/23
IPv6:
2a10:b40::/29
2a13:b4c2::/32
2a14:1106::/33
Signature Algorithm: sha256WithRSAEncryption
9b:ce:a4:c0:23:e7:11:f7:eb:04:d1:02:86:2c:75:f5:ca:e6:
d8:a9:77:e5:de:6d:dd:1d:81:53:f3:43:70:e5:ce:fb:13:53:
68:ba:28:64:4c:67:02:2b:f1:1d:92:ec:72:90:20:cc:21:e3:
ac:08:20:30:b6:c7:25:b3:e3:34:63:b0:cc:70:4c:82:a6:eb:
36:0f:b3:15:52:93:63:dc:cf:ad:5e:de:44:45:ed:ec:91:50:
52:28:19:e1:97:0d:7a:d7:54:9a:04:43:24:68:d4:3c:72:fa:
2a:6f:42:c1:59:a0:c1:0c:81:3f:2d:62:6a:06:3d:54:35:e9:
4e:93:73:d0:b0:31:99:c4:71:93:69:0f:4c:a4:b6:74:8e:e4:
c8:2a:d0:dd:5e:b1:9a:7b:87:02:b0:cc:09:c0:83:74:19:46:
ba:ae:a6:fb:0e:52:72:97:84:e8:83:1a:44:25:09:18:b1:85:
2a:79:8c:b7:51:dd:52:49:65:02:02:2a:d5:37:f1:a7:ff:7c:
21:a9:ae:1b:3c:39:1a:0b:be:41:8f:f2:a2:53:17:d1:37:04:
d5:97:f8:d3:bd:3b:65:51:5a:76:7e:ab:94:a5:2f:ee:97:b4:
6e:47:7f:0f:1e:43:de:e7:f8:db:12:9c:1e:d5:27:0f:50:11:
c4:ef:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:53:25 2025 by rpki-client