Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/grikGIwfURsq6bobDGRtzumq3EA.roa
File: grikGIwfURsq6bobDGRtzumq3EA.roa (raw, json)
Hash identifier: WqZf9xSUhWn84ZhlEOZDpxEekp+BWuHMiy78gxwyy/o=
Subject key identifier: 82:B8:A4:18:8C:1F:51:1B:2A:E9:BA:1B:0C:64:6D:CE:E9:AA:DC:40
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 018F0EB8E25118E1B779D9B34ADE027A73AE
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/grikGIwfURsq6bobDGRtzumq3EA.roa
Signing time: Wed 24 Apr 2024 06:09:08 +0000
ROA not before: Wed 24 Apr 2024 06:09:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215137
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 24 Apr 2024 07:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0e:b8:e2:51:18:e1:b7:79:d9:b3:4a:de:02:7a:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Apr 24 06:09:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82b8a4188c1f511b2ae9ba1b0c646dcee9aadc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:64:f7:fa:24:31:5d:3b:7a:89:0d:68:66:
ec:94:0f:3e:c0:a5:97:84:3f:ce:e1:d1:28:30:cb:
94:46:df:6a:7b:1d:16:32:35:89:fc:af:91:42:75:
90:47:37:9f:60:ac:e3:30:51:f2:35:1f:ea:d4:50:
fa:fa:a8:ee:6b:82:9f:cd:a3:fa:91:c0:4f:cc:01:
a3:46:29:c6:a1:3f:88:37:ec:d7:54:66:06:c8:ea:
4f:d8:cf:38:44:6c:fd:8e:42:29:bb:4e:4f:3e:de:
9a:c3:48:7f:52:e4:fc:f5:af:53:b7:e7:30:25:54:
6b:f3:fd:a7:b4:64:11:89:ed:5e:7a:16:34:e3:bb:
d0:3a:7c:40:99:73:bb:f9:c7:19:0a:16:54:51:b6:
d9:2e:a8:27:a1:ce:f7:5d:7b:bb:29:b7:3d:4f:19:
4d:16:6b:73:64:f2:a8:37:77:d1:2d:e1:cf:47:a6:
65:49:95:57:cc:94:f4:2e:e5:bd:d3:5c:23:e7:45:
7c:99:7e:47:02:27:40:65:4a:73:6c:35:9b:f8:e4:
b7:d2:23:3d:1b:5a:ab:fa:04:54:01:ec:7a:75:5c:
d2:6b:6f:a5:e9:a9:17:88:41:3a:67:6a:e3:f5:90:
f9:ec:15:87:f1:db:dd:5b:8b:12:da:cb:b4:5d:08:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:A4:18:8C:1F:51:1B:2A:E9:BA:1B:0C:64:6D:CE:E9:AA:DC:40
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/grikGIwfURsq6bobDGRtzumq3EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
e0:cd:c3:41:d2:9a:f7:32:e7:ed:00:71:3a:29:2b:4e:5f:24:
cb:7c:c0:ff:ca:4b:0d:22:56:e6:31:00:04:d4:ba:0e:75:c6:
ae:c4:f4:7a:8a:f2:42:23:15:a8:bc:90:8c:06:39:fe:92:35:
d7:b8:8c:94:f1:e6:3c:2e:6f:e7:a7:6b:a9:ac:fd:f7:bf:cb:
93:1e:bb:8a:02:da:9b:4a:4e:2f:93:e8:0e:95:1b:50:e9:de:
44:e8:f1:30:94:fd:92:ac:e5:bf:a1:9f:bf:75:b5:ef:d0:e1:
e3:4d:26:9a:ef:47:e7:0d:72:18:5d:e9:9f:4d:fb:dd:8a:af:
2d:d9:4d:5b:d2:92:bd:5c:9f:9d:8a:d8:cd:be:75:06:e4:3a:
49:f6:fe:e0:bf:6b:17:44:cd:1a:11:d7:ce:c3:f8:62:0f:43:
d9:d9:8c:45:a9:10:9a:a4:fa:ef:2d:c3:29:44:3d:f7:4c:78:
c3:cd:f7:dd:e2:ad:61:fa:46:51:3a:bd:ab:47:65:53:01:ba:
4c:9d:1a:d4:13:fc:c1:59:fd:ca:54:b2:aa:e8:36:a2:c8:91:
c6:fc:88:1d:ce:40:1b:ca:72:9a:c4:ff:a3:c6:27:32:46:eb:
98:e8:c0:51:19:f1:9e:56:e3:52:0f:db:ac:28:17:2f:bd:7a:
86:75:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:25:28 2025 by rpki-client