Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/wnUCPcitCkui4DeWpRNPsj3V6y0.roa
File: wnUCPcitCkui4DeWpRNPsj3V6y0.roa (raw, json)
Hash identifier: 2iGDkAsYFOiM0+UV3wPuNCvHthI5sTnhIoxOxDGL1tE=
Subject key identifier: C2:75:02:3D:C8:AD:0A:4B:A2:E0:37:96:A5:13:4F:B2:3D:D5:EB:2D
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 01905A336FCF6CD4A4FBE52A5C6EB216986A
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/wnUCPcitCkui4DeWpRNPsj3V6y0.roa
Signing time: Thu 27 Jun 2024 14:57:18 +0000
ROA not before: Thu 27 Jun 2024 14:57:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215002
IP address blocks: 2a13:75c1:201::/48 maxlen: 48
2a13:75c1:400::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 27 Jun 2024 17:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5a:33:6f:cf:6c:d4:a4:fb:e5:2a:5c:6e:b2:16:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Jun 27 14:57:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c275023dc8ad0a4ba2e03796a5134fb23dd5eb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:e4:80:f3:f8:42:a2:7b:69:3e:f9:65:79:
0b:7f:8e:71:29:b1:aa:35:48:a2:e1:6d:da:e0:4c:
b0:5a:69:92:e1:b3:d5:3b:38:a7:f8:16:38:16:4f:
78:2f:a7:86:de:ce:04:c5:16:09:66:80:bc:cf:7e:
ab:a1:48:16:68:00:07:8b:68:8e:24:44:fe:0b:90:
1e:9d:b9:19:3f:f5:01:bd:02:26:4d:57:0a:fd:d1:
5f:fb:42:b7:8d:2a:09:1f:d0:b3:2f:bd:84:a4:c3:
3f:c5:6e:33:60:68:01:0b:65:eb:43:a9:9e:6a:85:
2d:c2:1e:20:26:58:0f:d3:a0:0e:0e:58:36:36:83:
fc:1c:0d:3b:7f:ab:56:1d:da:0f:e0:7d:92:7d:e5:
0e:34:6b:7f:3e:a4:4b:b6:f7:12:12:f7:9f:e7:6e:
f8:0c:c7:ee:d3:09:22:b9:ea:e7:c3:4e:b7:eb:b1:
b9:f3:d9:75:11:f2:f0:d6:e4:0d:b9:b9:35:03:1b:
ba:55:34:c4:f0:6a:63:ed:7b:47:7d:c0:20:e6:51:
cf:b1:97:16:5a:57:0c:ae:69:6f:0f:02:ca:af:42:
31:43:1e:80:f6:f4:0c:3f:25:b8:3f:ff:7a:c8:f8:
ed:84:78:63:47:76:c7:4f:d1:8c:5d:a2:7f:f3:b1:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:02:3D:C8:AD:0A:4B:A2:E0:37:96:A5:13:4F:B2:3D:D5:EB:2D
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/wnUCPcitCkui4DeWpRNPsj3V6y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:75c1:201::/48
2a13:75c1:400::/40
Signature Algorithm: sha256WithRSAEncryption
a9:80:20:e6:0b:a2:24:fe:ab:89:d4:3c:f5:c6:dc:e6:e9:dd:
c1:d3:17:18:66:0a:1a:24:20:99:95:19:10:2b:89:ef:b4:8d:
77:b1:4d:df:26:91:5d:28:f1:40:59:88:b1:ea:3c:e5:4b:70:
61:3e:9c:6e:4c:a4:a9:3d:bb:22:aa:ce:7c:c3:34:be:ec:ae:
03:89:a2:64:92:d7:be:97:f1:ab:34:92:80:eb:ff:c9:60:86:
ec:83:d1:a9:9b:2a:ce:d6:d0:be:24:7d:31:7c:3a:33:d4:a6:
ec:9e:7b:62:e5:42:a4:86:e0:6a:08:99:7f:68:f8:ef:d8:86:
2b:dd:79:69:67:d2:69:56:f4:11:52:e4:69:59:f9:57:88:b5:
28:9f:f0:80:ed:bf:ab:cf:07:f1:b7:9f:c4:3d:a7:7b:9b:48:
e1:7d:a3:d3:69:2f:e5:84:94:f3:d4:24:2c:5b:0d:fd:38:ea:
32:25:61:76:3c:4a:62:03:4c:56:8d:4f:cc:a1:86:21:63:df:
5d:62:34:b5:47:65:72:91:2c:ce:eb:10:40:63:0f:18:0b:ba:
75:99:dc:72:19:db:7e:ba:ff:47:bb:59:c8:cc:1d:ce:35:4f:
b5:6e:f8:8e:2c:88:ce:aa:94:c3:dc:e5:3f:05:c4:0a:87:7b:
af:17:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:56:59 2025 by rpki-client