Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/0Cr7yqiEi7fpiphi1UCUwRoYtGE.roa
File: 0Cr7yqiEi7fpiphi1UCUwRoYtGE.roa (raw, json)
Hash identifier: 2osdv8qJMfaKcADvnzpVGU8rVRy1KO0HQMwKSorIOfw=
Subject key identifier: D0:2A:FB:CA:A8:84:8B:B7:E9:8A:98:62:D5:40:94:C1:1A:18:B4:61
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 019524794780FD125C5B8B8A5DF0AB1A2CB6
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/0Cr7yqiEi7fpiphi1UCUwRoYtGE.roa
Signing time: Thu 20 Feb 2025 17:48:02 +0000
ROA not before: Thu 20 Feb 2025 17:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a09:3700::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Mar 2025 09:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:79:47:80:fd:12:5c:5b:8b:8a:5d:f0:ab:1a:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Feb 20 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d02afbcaa8848bb7e98a9862d54094c11a18b461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:64:85:cc:5c:4a:12:cf:4c:fe:b6:a2:86:
03:ac:35:9d:74:ba:6f:80:7a:18:0a:81:d5:df:d5:
00:01:28:e4:51:9c:6c:2c:8c:dd:1b:90:f2:69:d2:
e1:7c:e8:a8:34:ab:32:32:3d:3e:a3:cf:68:24:8c:
c8:25:fe:b3:11:ea:ef:95:ed:13:43:f0:be:ee:9d:
5f:e4:54:45:ea:d3:fc:9d:60:72:54:33:d9:4b:45:
a7:28:84:eb:a7:92:fa:45:92:db:45:3a:93:23:ee:
44:48:b4:bb:d5:76:63:85:95:fa:56:94:5f:5e:96:
a9:8b:d4:80:74:31:5a:5f:83:d3:11:b3:1a:23:01:
29:c3:6b:6b:29:dc:54:a7:04:d8:c1:21:0e:9c:f7:
e3:39:76:f1:a0:bd:be:ca:08:a0:68:49:90:3a:27:
ac:38:5c:c1:cf:0d:ba:8d:2f:7c:24:2e:12:64:ce:
d0:28:4f:3b:d7:76:5f:d2:0c:d5:78:4f:a8:ff:18:
3d:8e:13:55:b8:78:bb:63:99:b9:2d:b9:37:ef:f8:
8f:9b:eb:d6:b1:62:16:e5:fc:3d:52:c2:1e:89:96:
88:be:19:45:a3:e8:b0:67:3d:02:61:47:37:18:6f:
29:8f:e5:01:1d:bd:dd:56:b3:e4:0c:03:84:92:ce:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:FB:CA:A8:84:8B:B7:E9:8A:98:62:D5:40:94:C1:1A:18:B4:61
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/0Cr7yqiEi7fpiphi1UCUwRoYtGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3700::/32
Signature Algorithm: sha256WithRSAEncryption
8b:d5:70:d8:8b:ca:17:0a:91:cd:b8:19:8a:6d:95:c0:09:9f:
b5:c8:9c:d9:4e:37:b6:02:96:5b:67:30:22:0a:64:44:29:41:
d4:7e:6f:e3:23:48:e0:36:5f:5e:6d:04:c3:44:47:c5:99:50:
59:dc:50:64:e6:2c:f9:f1:ad:38:06:1e:e4:8c:97:64:9e:ec:
af:53:a7:d7:08:b2:ee:a9:3f:26:06:36:f3:41:75:c2:52:5f:
4e:74:23:95:3a:5e:1e:f0:c2:5a:46:30:1e:c5:f7:19:44:0f:
5b:2d:e5:4a:20:ff:47:9c:ae:8b:3f:09:4f:ba:f8:2d:60:0b:
54:61:ed:2d:47:d4:58:bc:7a:70:f1:b0:67:7f:6c:27:c0:b1:
ed:ec:b4:cb:c1:87:35:01:db:57:e9:34:61:31:7d:a5:2a:b0:
9d:a4:dc:d6:23:4b:15:dc:5c:3e:9b:9f:c6:5c:3b:41:62:3b:
0b:0e:3c:41:6f:a7:02:46:bc:d8:1c:30:9f:64:b8:1d:a3:5e:
23:ae:26:c5:50:37:d5:ca:41:4f:6e:27:d9:df:2c:9e:04:86:
b4:a2:44:d4:38:3f:42:db:61:80:d4:64:d6:b3:69:d1:b6:2a:
ea:2d:1f:98:fe:69:2f:af:93:e9:36:f5:d8:a2:66:8c:fc:a6:
da:bb:1d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:36 2025 by rpki-client