Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/bw6JKhUa8SYkaK18SAe_Ivcjuwg.roa
File: bw6JKhUa8SYkaK18SAe_Ivcjuwg.roa (raw, json)
Hash identifier: otwriBtJo6Q+94SNglSuA3oxP4hvwHMOlgbXkF9koWA=
Subject key identifier: 6F:0E:89:2A:15:1A:F1:26:24:68:AD:7C:48:07:BF:22:F7:23:BB:08
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019129BE051A280A074EEDF04BD2E6BC8BDA
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/bw6JKhUa8SYkaK18SAe_Ivcjuwg.roa
Signing time: Tue 06 Aug 2024 22:10:04 +0000
ROA not before: Tue 06 Aug 2024 22:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 2001:3500::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 Aug 2024 22:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:29:be:05:1a:28:0a:07:4e:ed:f0:4b:d2:e6:bc:8b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Aug 6 22:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f0e892a151af1262468ad7c4807bf22f723bb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:40:60:61:5b:5d:c1:72:01:e2:64:5a:ab:
a8:f4:ac:5b:99:1f:c6:0d:76:47:a1:31:78:cb:29:
8f:30:6c:9f:6c:48:f9:61:10:03:ea:9f:ee:22:aa:
93:d4:c6:3a:02:e2:08:51:8e:50:eb:99:85:9f:55:
f4:9a:48:1f:29:37:4d:5a:56:28:a9:4a:66:54:fb:
7b:d8:98:56:1a:ad:8f:47:df:c1:71:93:56:71:bd:
7d:2d:c5:a2:10:0f:3d:0d:4d:76:42:a0:69:a1:04:
a6:c6:a3:a0:4c:76:27:ea:bc:f2:67:68:2c:da:11:
91:e3:72:a8:ae:22:ba:de:9a:e1:e7:98:00:2f:7c:
60:18:ab:f2:20:27:dd:11:66:14:52:0b:39:97:c6:
79:21:a4:8d:fe:50:cb:8f:ba:72:fc:7c:5b:7e:7e:
75:ed:d8:ee:af:44:3f:8c:27:11:71:56:62:63:d0:
f1:85:5d:36:9b:38:75:70:e0:16:4d:4c:5c:68:3c:
7f:37:d9:aa:32:2f:8d:63:b1:71:4c:5b:24:d6:19:
3f:ff:9a:08:52:63:70:c1:45:fb:00:49:67:9d:e4:
a8:81:a8:dc:28:b1:98:87:66:cd:7a:05:18:21:9e:
1b:df:9f:52:24:61:84:cb:d7:01:ac:8f:12:0a:15:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0E:89:2A:15:1A:F1:26:24:68:AD:7C:48:07:BF:22:F7:23:BB:08
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/bw6JKhUa8SYkaK18SAe_Ivcjuwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3500::/32
Signature Algorithm: sha256WithRSAEncryption
42:87:d1:4a:7d:4f:83:96:95:31:3f:70:47:37:49:3d:79:23:
3c:99:48:74:db:e1:9e:b0:da:88:92:a8:e6:49:25:03:62:66:
81:70:9a:4e:eb:8d:08:9b:c3:c3:6b:3d:d1:46:5c:43:d5:f5:
a3:31:26:0e:73:68:d4:40:95:45:e0:ed:86:fb:88:30:79:ad:
c4:68:97:ac:5c:81:68:0b:0f:d1:42:79:54:2f:1c:57:51:1a:
39:46:3d:be:e5:3a:cf:3f:26:e1:2d:a9:6d:d4:a9:7b:0d:ad:
97:a2:8e:18:47:38:b3:d7:7c:9c:fd:4b:ef:18:b6:c5:32:43:
b4:2e:b1:43:74:a3:05:34:cc:d8:70:63:80:3e:c2:e9:45:0a:
fd:81:0b:d8:27:e1:dd:a3:09:14:6a:c1:62:a6:a7:d1:68:be:
b1:d3:d6:9f:b9:d4:33:b4:c4:a4:6b:59:b9:6f:5a:58:b6:49:
d8:4c:78:fe:0a:97:62:85:01:b8:6e:8f:c7:37:3a:22:01:e4:
4e:fb:5c:33:f3:00:66:57:cd:ad:e3:c9:44:6a:bb:ec:d6:63:
25:da:51:b1:2a:3e:d2:cb:ee:04:30:22:a4:72:0b:c8:84:91:
49:81:b5:e6:83:fa:dd:40:3c:f2:af:23:e0:ad:6a:89:0f:14:
a5:ba:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:46:59 2025 by rpki-client