Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/6tS03z66gHeby5KB3MTATymwq1Q.roa
File: 6tS03z66gHeby5KB3MTATymwq1Q.roa (raw, json)
Hash identifier: XAUXXG1AM4R2MBaq23Ha0AZxsqFlaQsQEPwTuTGITVk=
Subject key identifier: EA:D4:B4:DF:3E:BA:80:77:9B:CB:92:81:DC:C4:C0:4F:29:B0:AB:54
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 018E65EAB8207C344E1E1DD3D28C28E10B0C
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/6tS03z66gHeby5KB3MTATymwq1Q.roa
Signing time: Fri 22 Mar 2024 11:27:45 +0000
ROA not before: Fri 22 Mar 2024 11:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208925
IP address blocks: 2a12:d340::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 22 Mar 2024 11:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:ea:b8:20:7c:34:4e:1e:1d:d3:d2:8c:28:e1:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Mar 22 11:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ead4b4df3eba80779bcb9281dcc4c04f29b0ab54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:6b:b4:74:92:cc:46:f1:0d:93:48:41:b0:
45:7a:87:2d:13:8e:c9:dd:d7:d5:a8:97:12:d4:10:
7b:db:06:43:6d:a3:38:89:a6:60:95:ca:b8:54:59:
7e:30:35:b0:3d:78:be:d5:22:01:f6:a9:b3:47:eb:
f1:1a:eb:db:17:47:96:f8:4a:fa:04:b7:30:3d:1a:
48:c4:23:12:2e:dc:30:54:af:38:c7:0e:72:0d:b3:
ae:f1:ef:a3:43:cf:07:a4:cb:bc:23:74:15:0c:e7:
41:11:87:f3:3a:15:65:18:bf:6c:89:ee:62:96:1c:
a6:fe:20:f6:b6:1e:ba:be:c9:32:7e:ee:ec:85:42:
80:a1:1b:59:31:87:44:92:84:8f:f7:2b:82:48:b4:
4c:32:a7:9a:23:ab:e0:98:f3:2c:0d:ed:04:a0:6f:
fe:e1:1b:f4:b4:6d:7c:63:68:ab:23:f7:6e:b3:2e:
cf:64:48:a6:b1:e1:ed:4c:d2:3e:82:64:c9:0a:1c:
18:e0:2a:1c:83:5a:d0:d7:f8:43:bf:8a:9a:93:07:
86:49:d4:59:0b:c9:1b:b8:5f:f8:23:e1:97:34:6e:
a4:72:f7:95:fe:7e:2f:33:4a:64:b2:d0:48:cb:89:
15:18:30:12:83:43:a6:54:5e:45:e5:21:b5:1a:43:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:B4:DF:3E:BA:80:77:9B:CB:92:81:DC:C4:C0:4F:29:B0:AB:54
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/6tS03z66gHeby5KB3MTATymwq1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d340::/29
Signature Algorithm: sha256WithRSAEncryption
2f:97:17:2a:b1:b5:d9:ed:1b:67:c4:fd:af:05:f0:89:8f:0c:
a1:c2:76:16:4b:37:00:5e:bd:78:ff:fd:40:b6:aa:a1:ef:97:
05:0a:92:8c:1b:b9:2b:73:91:44:0d:d1:97:59:ef:b9:ae:56:
af:2d:20:75:49:f8:fa:e0:29:89:df:6d:26:3d:2e:57:02:7e:
5c:2a:d7:4d:38:6d:16:8c:be:29:82:d6:15:85:fe:d5:83:06:
93:96:dd:92:0e:04:d0:24:84:7d:dd:41:c3:d9:93:62:5a:13:
ed:10:e0:f4:d5:5e:b1:ff:71:fc:5c:ca:c7:82:08:ab:e5:80:
c3:6a:28:06:3d:a9:db:dd:b6:8e:00:c8:e3:e4:0f:a2:68:63:
8b:63:eb:a8:d5:f1:1e:87:98:64:a9:e6:44:30:93:d4:64:94:
e7:b3:1d:0c:97:71:7a:2a:5b:8a:12:42:8d:ce:e4:f7:26:f0:
70:bd:74:34:9b:c4:85:77:e7:bb:cc:a3:9f:61:70:d8:c9:66:
86:3a:27:71:58:a8:55:09:a3:fd:91:0a:4b:54:2d:88:4e:85:
39:68:02:53:7e:86:5f:5f:c8:d2:ac:84:b8:c9:0c:15:81:ae:
f9:a1:ef:bd:70:62:7e:63:5b:11:81:43:9a:ce:08:ce:c8:0f:
a4:0a:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:53:32 2025 by rpki-client