Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/6Mkambhow4nEwNNGGbzy2rthkFI.roa
File: 6Mkambhow4nEwNNGGbzy2rthkFI.roa (raw, json)
Hash identifier: e3R8gLcHArxcRKFrrsTvszIm5FHlTg9oP7huL05vMt4=
Subject key identifier: E8:C9:1A:99:B8:68:C3:89:C4:C0:D3:46:19:BC:F2:DA:BB:61:90:52
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 01942C795EF8DA8B9EEFDF3B49DE9A41B87E
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/6Mkambhow4nEwNNGGbzy2rthkFI.roa
Signing time: Fri 03 Jan 2025 14:02:19 +0000
ROA not before: Fri 03 Jan 2025 14:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47523
IP address blocks: 2a03:8ac0:248::/48 maxlen: 48
2a03:8ac0:250::/48 maxlen: 48
2a03:8ac0:254::/48 maxlen: 48
2a03:8ac0:255::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 14:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:79:5e:f8:da:8b:9e:ef:df:3b:49:de:9a:41:b8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Jan 3 14:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c91a99b868c389c4c0d34619bcf2dabb619052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:c8:89:07:87:42:4e:70:66:5e:81:e3:1a:
8d:1c:70:04:70:da:89:18:c0:f3:11:57:d7:0b:69:
d3:d5:ab:6a:f1:23:44:7d:c9:bb:56:13:7e:87:a2:
de:3e:c2:09:87:31:e9:8d:38:87:e8:61:11:05:76:
62:20:2d:1c:24:13:5d:5d:1c:2e:74:41:17:98:43:
8a:94:df:67:3b:21:3a:61:24:e9:b2:94:eb:b2:36:
44:64:8b:7f:2d:10:da:38:bd:9f:d5:0d:1f:75:10:
87:53:1e:11:af:f4:56:22:0d:b7:10:b4:f5:d6:b3:
fc:3f:6f:db:cc:c0:2f:ec:26:a4:a1:90:ca:e8:39:
db:c8:e0:15:12:b8:7f:5d:58:a4:55:df:6b:b1:71:
4d:19:67:36:44:18:71:2d:d5:44:10:0d:0f:f1:cd:
83:07:9b:57:72:1f:1f:8a:8d:65:4b:a7:62:f2:cc:
fa:20:9d:ab:96:7b:53:5c:e6:4a:12:d8:bd:8c:eb:
83:0f:3e:28:bd:57:fa:bc:49:c2:d3:99:06:f5:ad:
a5:70:fe:b6:73:6a:94:b2:86:92:bb:a8:01:2d:fc:
07:30:e2:ee:d6:65:1a:22:b8:41:29:6e:83:18:a7:
b6:6e:29:fa:e6:45:f1:f7:5e:7c:37:46:db:50:2d:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:1A:99:B8:68:C3:89:C4:C0:D3:46:19:BC:F2:DA:BB:61:90:52
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/6Mkambhow4nEwNNGGbzy2rthkFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:8ac0:248::/48
2a03:8ac0:250::/48
2a03:8ac0:254::/47
Signature Algorithm: sha256WithRSAEncryption
5f:ac:77:1b:43:dd:df:89:1b:ec:f8:f6:44:b0:19:75:a6:bd:
54:fe:11:6d:37:79:d5:4b:40:2f:57:be:a7:75:f4:90:12:84:
9c:43:20:ab:2b:48:02:e7:cd:e3:fc:03:14:66:07:f2:55:90:
5e:4e:70:87:1f:0b:92:46:57:36:98:52:14:9d:f8:e1:1a:0b:
c0:08:74:69:bf:ff:49:26:18:1f:05:4f:16:50:22:74:75:52:
b7:97:1b:45:57:31:15:0e:24:b7:b6:31:b0:6a:41:79:c7:d3:
d5:74:98:c2:85:03:91:6c:75:f8:c7:a5:36:3a:5b:f2:e1:b9:
d9:47:37:cf:ae:ef:8b:75:87:95:8e:6f:2b:67:99:2f:77:3c:
86:07:b9:7e:2e:31:9c:a5:6d:18:c2:22:97:97:9b:ee:7a:eb:
87:79:41:e2:25:16:94:43:6f:a0:58:57:00:4b:f4:39:3d:55:
71:3b:c3:dc:a5:ee:02:2e:23:7d:c5:20:58:96:bc:38:b8:85:
89:a0:85:8d:fe:a5:61:75:bb:65:28:7a:63:63:74:95:e1:e6:
17:db:d7:d0:71:6b:f3:43:8e:33:2e:85:a2:14:6c:ac:4b:27:
40:a3:d8:3e:39:8b:6f:24:75:8d:8c:7d:74:ea:e1:78:82:bd:
a1:21:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:29:30 2025 by rpki-client