Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/8U01_SraPavtxOFbD5yM-MwX32k.roa
File: 8U01_SraPavtxOFbD5yM-MwX32k.roa (raw, json)
Hash identifier: 5GlmaBTI2Y+vhcu8YcazL+IMDe8nX7NAvTtQLxIQjRM=
Subject key identifier: F1:4D:35:FD:2A:DA:3D:AB:ED:C4:E1:5B:0F:9C:8C:F8:CC:17:DF:69
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0194519DEB3824FEB8CDAB95FDEED31F5DF0
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/8U01_SraPavtxOFbD5yM-MwX32k.roa
Signing time: Fri 10 Jan 2025 19:08:11 +0000
ROA not before: Fri 10 Jan 2025 19:08:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a09:3706::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 12 Mar 2025 15:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:51:9d:eb:38:24:fe:b8:cd:ab:95:fd:ee:d3:1f:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jan 10 19:08:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f14d35fd2ada3dabedc4e15b0f9c8cf8cc17df69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:3a:4a:6e:8a:46:66:a6:bd:88:6d:0d:db:
19:24:59:28:48:16:26:ef:27:82:8e:78:6f:1c:57:
f8:c5:7d:8b:da:0c:8b:5c:09:2c:ca:7d:16:1b:4b:
20:ae:32:0d:52:f0:a7:81:e7:df:d7:ab:3d:af:d2:
af:9f:33:12:43:63:41:e7:53:66:a8:8c:d2:4c:5a:
5f:41:ed:4a:4f:d9:2b:e0:49:57:90:03:86:4e:64:
08:30:6a:d7:25:3d:5b:69:57:01:95:ec:b6:76:c3:
25:51:83:44:0f:f9:d6:6c:d4:94:20:13:e1:a5:b5:
1a:d5:ff:58:ff:54:53:dd:03:04:6c:eb:e1:9a:d7:
d2:e0:07:7a:bb:09:fe:d3:dd:9a:1e:fa:dd:a4:97:
24:63:cc:8a:9d:98:65:0a:5f:f6:de:82:86:50:54:
f8:5e:67:8a:66:54:85:b1:44:1a:38:51:85:a6:70:
69:37:bd:ee:1e:a6:34:03:23:22:38:cb:eb:10:11:
da:37:10:57:14:9c:6c:e4:6c:62:03:f4:47:fa:e9:
5b:78:c0:67:b0:dc:b7:c6:af:fd:fc:2a:c1:75:3f:
be:0e:7b:b6:3b:5c:be:68:be:5c:a1:89:0f:9c:5a:
30:1d:eb:3e:3a:a0:8c:90:36:46:f3:48:2b:4b:26:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:35:FD:2A:DA:3D:AB:ED:C4:E1:5B:0F:9C:8C:F8:CC:17:DF:69
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/8U01_SraPavtxOFbD5yM-MwX32k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3706::/32
Signature Algorithm: sha256WithRSAEncryption
1e:30:98:a7:3e:3d:8f:fc:47:e4:53:7b:92:5e:cf:95:25:f2:
80:df:1a:a3:35:a0:15:be:18:6e:2d:6d:dd:1f:13:bc:7c:f4:
67:bf:70:9e:5b:79:1d:04:eb:4b:0e:0a:dc:e8:b4:b6:a9:98:
f5:f7:fb:b2:e0:51:f2:16:f0:11:da:39:be:b8:ca:fb:7f:c9:
05:ac:7c:79:de:bc:fe:c2:64:7a:42:52:d1:51:fe:86:0d:f3:
d3:af:89:af:a7:34:13:25:22:33:b6:35:eb:b2:92:63:b7:ce:
aa:21:f2:ef:ca:dd:6e:3a:b8:2b:96:9a:4c:26:a9:55:e4:b5:
db:20:9c:48:c7:5d:89:fb:5a:16:be:4f:e9:b4:80:3a:83:d0:
38:ca:fe:08:07:7a:1e:92:c8:aa:f7:46:e3:91:c7:f3:4f:1a:
70:23:53:32:f0:0f:fd:d7:40:66:96:5f:d3:f1:2c:4d:4c:b4:
0b:8f:9d:aa:bc:48:b6:68:48:ca:78:05:12:3c:0b:e0:ad:7d:
20:ac:db:5b:17:6c:55:9c:9b:f5:0f:cc:1d:28:56:ad:74:bf:
98:d4:eb:b8:7e:f7:9d:6e:49:af:a3:b5:a0:c0:76:de:a6:dc:
73:e0:86:9e:d5:07:36:e0:9b:8f:93:95:c0:18:0d:ad:f2:4a:
84:df:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:09 2025 by rpki-client