Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/06vtuw65nUf3k2KAbBo7GEzumL4.roa
File: 06vtuw65nUf3k2KAbBo7GEzumL4.roa (raw, json)
Hash identifier: 0vuoIG6Xy3vqP0r6sgzA8ZqiKVnGuYMSbcVEM6eJ0aE=
Subject key identifier: D3:AB:ED:BB:0E:B9:9D:47:F7:93:62:80:6C:1A:3B:18:4C:EE:98:BE
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0194EF5F7FBC4D1D1E1A0AD929BCED11B262
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/06vtuw65nUf3k2KAbBo7GEzumL4.roa
Signing time: Mon 10 Feb 2025 10:20:00 +0000
ROA not before: Mon 10 Feb 2025 10:20:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9080:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 05:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:5f:7f:bc:4d:1d:1e:1a:0a:d9:29:bc:ed:11:b2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 10 10:20:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3abedbb0eb99d47f79362806c1a3b184cee98be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:3f:64:88:55:6b:f2:3e:1f:90:2c:88:93:
30:2c:6b:5c:80:ac:f0:1a:20:84:4c:8d:7f:c6:88:
2f:a4:60:1d:d8:43:52:d1:79:9c:52:dd:03:6a:72:
ec:da:f4:7a:c7:d5:b7:0d:6a:c3:f6:13:fa:94:08:
81:38:e2:31:92:38:bf:01:40:07:fd:14:86:a1:d2:
fc:5f:24:6d:64:22:02:9f:c9:39:55:b9:e5:82:90:
23:a1:af:f3:92:9f:c6:30:51:48:9b:7b:67:1c:18:
98:f0:53:81:5a:c0:ba:2d:cf:ff:1c:3f:39:96:55:
ac:d5:a6:56:8f:03:75:5a:59:48:81:9e:fb:eb:57:
ce:56:8d:36:8a:30:5f:c9:1f:aa:0b:1c:37:83:28:
8d:a9:1d:34:11:5f:ac:0d:9c:a3:ff:73:af:c4:2d:
9b:00:c5:84:81:eb:10:a2:02:89:40:29:17:21:ec:
b5:22:a4:80:6e:10:eb:d8:c0:7e:ad:3e:84:98:bd:
5c:8d:a5:7b:d5:1b:1c:3b:49:a1:ea:6e:ef:7f:82:
f4:97:cb:b3:93:bb:c2:af:7a:b7:55:ab:a5:e5:e0:
c3:64:0e:72:70:2b:26:85:ae:cd:73:48:b5:8c:31:
57:90:33:05:22:8f:55:d5:55:02:48:9f:0c:70:b3:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:ED:BB:0E:B9:9D:47:F7:93:62:80:6C:1A:3B:18:4C:EE:98:BE
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/06vtuw65nUf3k2KAbBo7GEzumL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:9::/48
Signature Algorithm: sha256WithRSAEncryption
bd:13:ec:80:52:9a:f9:1e:00:a1:c3:3e:bd:b7:fe:b7:4f:1e:
f6:05:38:dc:58:0a:0e:e5:4d:1d:a9:ad:e2:86:c5:c4:d0:bc:
df:05:09:7b:37:be:e7:16:0c:70:43:ac:ad:17:fa:1d:f5:a4:
1b:b7:9b:e8:bf:22:af:e9:a8:ec:97:79:5d:85:38:67:ef:b2:
24:a9:c9:cf:9e:f3:e5:c2:d4:48:b1:08:e5:fb:78:34:6a:74:
9b:ac:ff:11:db:41:29:8b:bf:3c:61:c5:12:30:5b:d6:61:28:
30:d0:06:a4:46:a5:99:d0:25:68:b1:fb:ed:01:52:70:bc:d8:
3d:87:83:29:48:9f:94:05:48:ce:cb:7d:cc:be:10:58:08:7b:
ee:32:3d:c7:a2:1e:1d:34:d2:57:37:17:d1:73:3e:27:51:25:
ae:ff:1b:8b:71:3d:5d:71:f7:22:10:0a:e3:bb:fa:51:d7:44:
a5:a3:b7:e9:8b:07:b3:ce:44:72:b6:20:a3:11:72:60:b5:98:
0e:ae:60:85:bc:d7:cc:05:92:38:f7:f0:4b:57:08:3f:c5:82:
0a:ab:0a:40:71:64:57:7b:70:f8:c7:88:f8:ed:b6:93:15:87:
46:70:99:75:24:e3:6b:58:2a:82:ba:7f:9c:e6:9b:48:6b:22:
9e:27:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:50:17 2025 by rpki-client