Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/9UHzVr48PlxwJEfUKOjN0YRfqYk.roa
File: 9UHzVr48PlxwJEfUKOjN0YRfqYk.roa (raw, json)
Hash identifier: Asv8H489fk4d4ndYozKHA0uwTlxcbIH4mtHIlKV0ZKE=
Subject key identifier: F5:41:F3:56:BE:3C:3E:5C:70:24:47:D4:28:E8:CD:D1:84:5F:A9:89
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 0194E10BE3DDE7EC0A8C8F995F678049F3F2
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/9UHzVr48PlxwJEfUKOjN0YRfqYk.roa
Signing time: Fri 07 Feb 2025 15:34:00 +0000
ROA not before: Fri 07 Feb 2025 15:34:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215638
IP address blocks: 2a14:f700::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 16:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:0b:e3:dd:e7:ec:0a:8c:8f:99:5f:67:80:49:f3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Feb 7 15:34:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f541f356be3c3e5c702447d428e8cdd1845fa989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:af:31:ab:f2:68:34:db:95:46:cb:2e:17:
58:08:d6:99:33:31:85:46:67:69:0a:a7:fa:bc:43:
06:5c:93:56:bb:a5:59:dd:ef:8b:be:7a:22:37:e5:
d4:e1:db:38:f8:41:8d:23:cd:06:b7:b8:23:41:80:
67:88:96:a9:e3:7d:4c:ba:28:6d:b5:97:1e:fc:ac:
07:1c:e1:b0:a9:20:88:cc:c9:66:62:67:a9:d9:9e:
aa:32:59:65:70:5f:af:71:1f:0b:d1:fc:ae:3b:7c:
af:ed:87:cd:4d:7f:13:9b:31:03:84:18:06:8f:81:
9b:3e:4b:e6:0b:32:84:63:5c:a2:d1:55:46:3d:48:
4b:97:e0:33:b6:ca:64:e7:77:de:33:9d:b8:26:c7:
11:99:fc:a2:7b:75:62:78:44:2d:ea:28:e3:02:36:
97:5a:b3:a5:d6:f8:f3:fe:41:77:92:9c:35:eb:5b:
15:4b:6a:f5:03:53:06:aa:c9:c3:0e:61:08:c7:57:
6e:93:93:7b:73:3a:2b:93:40:1e:8c:e9:da:ae:95:
a4:09:15:06:38:87:57:2d:d2:0d:9e:2e:e4:bf:58:
22:8c:0e:ea:31:15:4c:99:06:7a:4b:7b:d5:aa:56:
97:83:54:88:9c:ce:3e:d5:42:c3:fe:a4:b5:af:87:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:F3:56:BE:3C:3E:5C:70:24:47:D4:28:E8:CD:D1:84:5F:A9:89
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/9UHzVr48PlxwJEfUKOjN0YRfqYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f700::/29
Signature Algorithm: sha256WithRSAEncryption
2b:e0:61:12:f6:7d:f0:09:9b:75:b0:f1:f6:53:fb:03:8a:ee:
79:4e:53:96:c1:a1:91:93:2c:17:c2:f2:14:bd:76:51:d5:8c:
a2:0e:f5:a7:41:b3:8e:57:62:50:5d:04:83:70:cc:a6:78:66:
40:cd:69:bc:b1:a3:18:b9:70:05:45:8c:ea:70:2f:6a:e8:07:
0a:77:5f:66:77:9f:45:8b:0e:dd:fd:da:1e:ae:ce:ef:60:1d:
a9:0b:df:c5:11:08:19:6c:49:2e:45:2e:79:45:7d:7a:0f:dd:
70:31:77:d5:e7:bb:24:e5:4d:a3:fe:53:91:5d:68:9f:e6:63:
7e:5c:97:1c:44:45:28:71:79:08:9a:a9:55:85:3c:92:26:61:
11:38:f0:7e:8a:9d:a8:6d:ca:ec:fc:6b:20:fc:67:50:94:c3:
67:51:e3:9a:a0:b9:f0:cb:54:a2:65:af:69:ab:d8:e1:a3:0b:
85:56:3b:bb:a6:f6:55:0f:cf:c1:6c:57:bc:fa:63:72:51:0c:
f9:a5:8f:f4:d1:8b:1a:a7:7f:eb:59:01:d8:b2:e6:ad:62:e5:
3d:2c:6e:21:59:6c:b0:87:48:e6:30:d3:a0:4e:9e:07:21:75:
f6:b9:44:29:e9:e2:69:12:1f:64:38:a1:be:32:e1:52:61:10:
bc:a5:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:18:05 2025 by rpki-client