Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/bSC7adSVXIZwubRI-UPjNNdU-Rk.roa
File: bSC7adSVXIZwubRI-UPjNNdU-Rk.roa (raw, json)
Hash identifier: vBTu5kUk6Nrt6V7tvw8rG/YcUOssMg5D0rGrZWSmFnA=
Subject key identifier: 6D:20:BB:69:D4:95:5C:86:70:B9:B4:48:F9:43:E3:34:D7:54:F9:19
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0193674D768E7C3AA3F81AD4504D1EEF6665
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/bSC7adSVXIZwubRI-UPjNNdU-Rk.roa
Signing time: Tue 26 Nov 2024 07:09:10 +0000
ROA not before: Tue 26 Nov 2024 07:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200291
IP address blocks: 2a00:fe00:6000::/38 maxlen: 38
2a00:fe00:6800::/38 maxlen: 38
Validation: Failed, certificate revoked on Tue 26 Nov 2024 11:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:4d:76:8e:7c:3a:a3:f8:1a:d4:50:4d:1e:ef:66:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Nov 26 07:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d20bb69d4955c8670b9b448f943e334d754f919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:8c:18:63:8e:8a:61:2b:f6:42:a2:79:69:
4e:ab:6f:20:44:6f:4b:ce:69:0b:c4:f8:d4:24:95:
f9:3b:33:3b:46:da:e9:53:b3:91:5d:e6:dd:a6:37:
4c:33:b2:20:a1:08:fe:b1:89:dd:15:1a:93:9d:f6:
79:aa:92:ab:3e:71:9b:6c:f1:cc:9c:e0:8e:ae:36:
2d:c2:55:d7:db:7b:0f:20:f2:82:4d:68:81:ca:21:
1b:c8:53:1a:bf:6e:29:d2:70:37:68:46:5d:07:9c:
13:37:79:8c:61:1b:d3:dc:62:d0:0d:f0:3c:ee:1d:
30:20:c4:5d:81:44:70:8d:01:b4:85:1e:81:ab:ff:
9d:08:81:5d:e4:0a:1b:0b:73:cf:25:c7:4f:a6:7f:
80:fe:1c:ed:37:a1:ae:22:34:9d:ec:86:ec:45:aa:
83:72:ed:40:8f:5f:f7:19:a8:e2:32:62:61:5e:b0:
1b:4c:19:03:88:00:3b:81:0c:ba:03:9f:44:9f:3f:
03:09:2c:1d:ba:1a:2f:84:2c:5d:7b:91:cc:fa:e2:
aa:9a:b8:bb:66:e3:8d:4d:ef:0b:44:88:61:e2:68:
23:3c:06:af:f5:8b:5c:08:10:28:79:a7:5f:45:12:
50:90:c6:05:5a:78:fc:b0:5d:d1:c6:ee:be:57:0a:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:BB:69:D4:95:5C:86:70:B9:B4:48:F9:43:E3:34:D7:54:F9:19
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/bSC7adSVXIZwubRI-UPjNNdU-Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fe00:6000::/38
2a00:fe00:6800::/38
Signature Algorithm: sha256WithRSAEncryption
1e:06:d6:e7:25:a1:94:01:62:31:f3:b0:d1:31:1b:9a:51:62:
8c:09:06:de:d7:d6:9c:74:6b:f1:b6:f3:10:ef:f9:20:cc:63:
7f:67:d3:2c:2f:02:1f:34:a4:9d:40:28:b2:b8:e3:d7:fc:fc:
34:99:84:c6:2a:1b:5d:ff:f8:b9:1b:f2:a4:df:d1:2b:01:b3:
00:be:37:3a:cf:1b:33:5a:67:9a:e8:bb:77:64:13:6e:6d:d6:
85:5c:75:3d:77:2e:f5:7a:89:05:2d:ff:4b:c6:1b:17:83:4e:
10:fe:c6:b8:00:11:14:32:04:14:74:2c:62:76:92:ce:ea:ff:
08:32:0d:d0:c8:cb:f1:4e:80:79:00:1b:20:b2:17:43:ee:b6:
53:f4:68:e5:22:63:b0:e0:37:b5:af:26:5f:9e:74:53:50:9c:
be:ef:0e:62:e2:ea:73:07:d6:0f:4c:9e:32:4d:70:24:e1:c8:
61:0c:51:47:e4:2f:97:e8:1a:03:ba:12:73:8a:99:b6:f8:6d:
b6:c6:42:6e:15:cf:0a:56:79:06:3e:09:e9:d7:59:82:76:0d:
1f:20:82:d1:e4:85:ab:ab:e9:bc:83:fe:d1:ba:12:53:f6:0f:
d6:12:5e:9f:17:4b:55:19:e7:fa:04:87:36:22:19:e3:00:99:
81:e0:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:44:15 2025 by rpki-client