Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/_bCA2rIJjXfCM_1miExDhqj_wCo.roa
File: _bCA2rIJjXfCM_1miExDhqj_wCo.roa (raw, json)
Hash identifier: gFHlDg1kZ0nepLVvDztRI5ZNQqbcSTGV8e23f9net5Q=
Subject key identifier: FD:B0:80:DA:B2:09:8D:77:C2:33:FD:66:88:4C:43:86:A8:FF:C0:2A
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 0193A984F21B91AD510C578EAA3C3199F40A
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/_bCA2rIJjXfCM_1miExDhqj_wCo.roa
Signing time: Mon 09 Dec 2024 03:44:42 +0000
ROA not before: Mon 09 Dec 2024 03:44:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199124
IP address blocks: 69.30.89.0/24 maxlen: 24
2a09:a380:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Dec 2024 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a9:84:f2:1b:91:ad:51:0c:57:8e:aa:3c:31:99:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Dec 9 03:44:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdb080dab2098d77c233fd66884c4386a8ffc02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:e4:08:71:aa:ed:1c:fb:28:55:f2:f5:d5:
c7:98:3a:d1:88:28:19:1e:b4:4c:e7:6b:22:a3:2d:
4e:74:31:78:d9:cc:78:c1:2b:b5:81:b1:1f:47:6f:
9e:9f:43:63:d4:09:7a:2e:ee:3b:0c:96:c3:33:e1:
82:fc:cc:9a:66:96:05:4c:3d:a6:b8:a4:d6:35:ea:
e0:51:f2:0f:db:bb:98:82:ba:96:29:17:3d:5f:f7:
1f:c9:bf:d8:fd:f4:f5:ed:44:1a:c2:c5:7d:77:20:
e5:e8:fb:0c:1b:60:75:2c:8c:25:5f:b1:0f:90:7f:
02:ef:76:2b:de:f9:c9:fe:9f:da:4e:f9:82:f4:46:
f1:61:5a:05:61:50:14:24:98:6f:0e:0c:84:5a:da:
6c:11:f2:da:72:d7:17:c3:ee:0e:05:ac:45:8f:9b:
bc:f0:18:7d:25:c2:87:6a:69:aa:e6:c0:b8:87:56:
23:4d:76:3a:66:fc:05:9b:55:8c:ef:ef:1f:66:a4:
9e:d4:e1:34:4c:4d:30:96:51:bb:a3:f9:93:07:f4:
01:86:57:c2:31:bc:4f:53:9c:b1:69:1d:f3:fd:43:
88:aa:35:3b:d5:02:e8:e2:6b:9f:38:38:dc:d3:3b:
c1:27:99:da:e5:18:d6:c0:29:35:d8:97:fd:56:df:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:80:DA:B2:09:8D:77:C2:33:FD:66:88:4C:43:86:A8:FF:C0:2A
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/_bCA2rIJjXfCM_1miExDhqj_wCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.30.89.0/24
IPv6:
2a09:a380:1::/48
Signature Algorithm: sha256WithRSAEncryption
63:43:5a:fc:ab:a8:04:d9:b4:b8:2e:c5:46:7d:9d:49:d8:46:
ad:5d:ba:b4:42:84:1f:fa:21:f6:21:05:3d:29:b4:24:74:c5:
fb:c7:d2:d0:63:ec:d5:0f:f9:21:dc:d0:51:53:6e:33:9f:8a:
0b:ab:3b:92:82:e2:45:de:af:ee:bb:29:e9:0b:c4:ff:b9:a7:
72:2a:b2:a7:9c:3d:c1:3a:fe:77:de:76:af:2e:be:75:16:de:
a8:7d:86:3b:3e:05:d9:1a:6b:41:e8:f9:19:f3:f7:17:bb:a0:
4b:2e:f0:d6:7d:89:50:6a:b4:84:52:d7:2e:f2:62:3c:18:75:
ca:72:fb:38:ee:e7:4e:b2:29:73:bc:c1:9a:3d:96:19:54:ef:
4d:0f:91:ae:da:ce:44:79:57:74:c9:d2:1f:c1:37:31:6a:07:
ff:19:2d:4c:e1:8e:55:68:36:88:50:16:93:4f:dc:64:ef:eb:
0d:99:67:ca:d5:64:cf:0c:e3:44:8e:40:6d:09:5d:a7:e9:27:
0a:bf:99:3f:1f:3e:b0:d1:42:48:2b:1c:cb:33:1d:ab:af:5b:
5d:44:f4:5a:58:44:81:f4:44:f0:0e:a7:ad:bc:f1:19:6b:d3:
dd:6c:0f:7e:d3:d9:7e:c7:f3:b4:62:e8:0b:47:55:d2:45:a3:
96:cc:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:47:11 2025 by rpki-client