Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/BcgyhOJ_9XtBKRSvQgcylWkPSCU.roa
File: BcgyhOJ_9XtBKRSvQgcylWkPSCU.roa (raw, json)
Hash identifier: rKcvYyV98qlPPHEd7yDu/9ErQBrQI36e8bhzxuwqbUA=
Subject key identifier: 05:C8:32:84:E2:7F:F5:7B:41:29:14:AF:42:07:32:95:69:0F:48:25
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 0192919E6CE56CCE59444F3C769D91976B76
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/BcgyhOJ_9XtBKRSvQgcylWkPSCU.roa
Signing time: Tue 15 Oct 2024 19:18:51 +0000
ROA not before: Tue 15 Oct 2024 19:18:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 2a13:7b40:40::/48 maxlen: 48
2a13:7b40:51::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Oct 2024 19:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:9e:6c:e5:6c:ce:59:44:4f:3c:76:9d:91:97:6b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Oct 15 19:18:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05c83284e27ff57b412914af42073295690f4825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:05:4f:1c:48:5e:37:c2:84:f0:7c:70:0b:
ef:28:15:15:71:d9:35:a0:23:3d:92:38:a8:ef:21:
16:b3:d3:23:02:4b:49:77:d9:ec:59:e8:3d:ce:29:
95:03:9e:fb:b2:52:09:09:d4:08:84:09:f6:85:83:
8c:fe:7a:c1:37:00:52:74:fc:d3:56:0e:79:50:e8:
5c:f8:00:80:43:be:26:de:de:a9:45:dd:74:d6:9e:
45:b8:13:d9:6e:62:64:28:7b:3b:ae:20:3a:70:17:
49:6c:57:18:3f:01:b3:0f:d0:ce:34:a5:9a:c9:fb:
cb:c7:7a:57:41:06:c3:ca:78:08:1b:8f:58:9c:eb:
12:89:fa:06:0c:f1:b5:e1:c6:0f:09:79:41:b8:be:
02:56:8e:f7:f0:b6:11:af:34:ee:dd:80:13:7e:a9:
d5:04:ea:da:eb:26:48:5b:4f:d3:72:c9:31:27:fe:
e3:c2:f4:93:07:f1:f7:3e:c8:d3:5d:02:06:35:a7:
3d:5e:3f:d5:b1:7e:b6:18:12:76:c7:0b:7b:f9:58:
e1:df:8f:8f:46:c8:c6:14:a6:64:14:5c:71:0c:51:
32:87:96:66:85:d0:a2:bb:d7:4c:f5:0e:37:74:dd:
ee:34:d3:c6:89:4e:4a:d4:82:66:19:7e:42:4e:65:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:32:84:E2:7F:F5:7B:41:29:14:AF:42:07:32:95:69:0F:48:25
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/BcgyhOJ_9XtBKRSvQgcylWkPSCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7b40:40::/48
2a13:7b40:51::/48
Signature Algorithm: sha256WithRSAEncryption
46:1b:49:e3:19:9b:41:af:33:1a:b0:4c:ec:d7:e4:c2:8c:d6:
e1:d5:a7:9b:66:a5:f6:f1:23:07:82:07:5d:b0:43:12:a4:dc:
52:72:a3:04:9e:c5:a4:c3:97:ca:e6:c6:53:62:38:c8:0f:86:
cc:22:b8:fc:83:ee:c2:6a:b1:24:7f:b4:12:9a:f4:23:cc:ca:
1d:2f:c9:02:9d:ab:5d:83:1e:ab:7a:f4:a3:76:fa:32:6e:b7:
e8:9d:a6:41:2a:b0:20:6d:44:a5:10:3c:cd:c2:f8:74:00:cc:
dd:3d:e1:7c:14:e0:32:0c:25:33:4e:3e:b8:41:4b:3b:5d:f1:
ed:03:ed:70:57:85:9c:c0:ae:a0:3e:8f:19:fa:99:5c:f6:50:
fb:24:c3:05:c3:20:7e:cc:58:72:3e:6a:f3:06:ee:b5:dc:e4:
75:fc:f7:00:77:b9:90:91:77:ca:50:8b:eb:02:48:9e:34:0b:
37:3a:eb:8d:92:42:1c:33:ee:d9:f4:b1:31:ca:c8:90:4a:56:
ba:79:cc:1e:9a:3b:63:f3:8a:fb:91:9c:ac:ea:ed:20:23:ad:
b2:9f:5f:a6:55:f9:cd:d7:5b:d4:00:29:f6:58:7c:69:a1:5e:
0f:e2:40:90:9b:31:b9:9f:06:77:03:ec:58:0f:9a:a8:97:d5:
5e:97:d8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:48 2025 by rpki-client