Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/a9jdzw6QuPVgJSZ-Ete6APwVcrQ.roa
File: a9jdzw6QuPVgJSZ-Ete6APwVcrQ.roa (raw, json)
Hash identifier: s2CEb4tIkK+8S7jfkEG3Rs501tC8PnbDDvb0wEe/Yu8=
Subject key identifier: 6B:D8:DD:CF:0E:90:B8:F5:60:25:26:7E:12:D7:BA:00:FC:15:72:B4
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0194274846D6BF1EBE876DDE9D9897DEDEC7
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/a9jdzw6QuPVgJSZ-Ete6APwVcrQ.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a12:24c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 20 Feb 2025 17:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:46:d6:bf:1e:be:87:6d:de:9d:98:97:de:de:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bd8ddcf0e90b8f56025267e12d7ba00fc1572b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:f4:71:4b:0a:40:33:95:ae:d0:72:30:7d:
a0:25:d4:45:78:96:7f:43:4d:03:b6:49:b8:95:c1:
af:ab:33:44:01:bd:a6:f8:27:07:da:a1:56:2e:ce:
13:17:5d:8d:58:1c:1c:29:46:14:9e:f2:60:c7:54:
f4:47:31:56:2c:93:58:38:26:6d:61:40:8e:ba:4f:
56:9b:60:14:60:e0:71:18:75:c3:3f:af:21:17:7a:
10:d9:7a:0c:49:af:cd:5b:57:51:eb:1b:a1:a3:25:
33:d5:82:44:26:41:95:e2:fc:fd:62:a4:e5:2d:85:
22:a3:b5:e2:93:0c:e3:11:e7:30:5a:75:95:d2:27:
0d:bf:ff:3a:fa:bd:74:b7:d7:1f:5b:06:88:ae:01:
14:7e:98:3e:03:c3:b8:a9:f1:13:3f:34:a2:18:b9:
0e:c7:62:23:1c:80:63:b2:56:4c:05:74:d5:17:e8:
5b:41:2b:a6:24:dc:d3:6a:25:71:5e:36:15:e7:34:
1e:6c:fc:e0:ce:0d:3a:99:0b:47:b4:b2:3c:e7:83:
0a:1b:35:36:49:25:6e:3f:e5:af:f8:b9:c3:17:c5:
45:cd:b6:77:de:d4:99:80:4b:aa:8a:55:13:ce:e5:
4f:cf:1b:16:eb:d7:47:68:ef:c5:5d:51:ca:d6:3f:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:DD:CF:0E:90:B8:F5:60:25:26:7E:12:D7:BA:00:FC:15:72:B4
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/a9jdzw6QuPVgJSZ-Ete6APwVcrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:24c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:37:98:91:34:81:86:7f:e7:95:90:c1:ca:5b:89:a8:07:46:
73:68:59:81:f9:ec:9b:b4:e8:aa:9a:29:26:98:27:31:d0:c5:
f1:85:6d:e7:4d:73:6e:ca:ad:6a:b1:0e:00:32:d7:ed:e2:01:
03:1a:72:f7:47:14:be:94:1c:f0:4b:19:f9:8b:80:fc:4e:9c:
0c:d4:9c:1d:d8:b3:09:76:6e:2a:6f:59:f0:5a:2f:3e:8a:7a:
78:4a:d8:8d:03:1c:f8:12:4e:a0:01:bb:c1:09:a9:7f:ac:46:
69:03:7d:39:4e:0a:b2:c5:00:3a:7a:04:3a:01:29:16:73:90:
15:6a:d6:03:de:8a:75:ed:e3:e0:1a:7c:e1:a7:0e:f1:d8:7a:
5a:78:aa:19:31:26:39:2a:aa:19:7c:c3:67:e2:42:c7:18:33:
01:f4:e5:c6:ea:70:33:c2:d7:eb:2d:38:56:31:6b:3e:03:4b:
4b:36:59:fb:92:ab:18:3e:23:c9:00:22:69:c8:b8:b9:82:62:
c5:98:78:c6:3e:2a:74:91:f9:f1:72:8d:f9:e2:65:60:ef:19:
29:83:93:c4:66:e9:7f:92:9a:68:58:a4:c1:f4:55:5b:30:ae:
a8:b9:2f:52:2b:d3:b9:be:79:da:41:fe:d7:33:df:e4:34:f1:
99:4b:bf:3d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnSEbWvx6+h23enZiX3t7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjUwMTAyMTM1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmQ4ZGRjZjBlOTBiOGY1NjAyNTI2N2UxMmQ3YmEwMGZjMTU3MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDL0cUsKQDOVrtByMH2gJdRFeJZ/
Q00Dtkm4lcGvqzNEAb2m+CcH2qFWLs4TF12NWBwcKUYUnvJgx1T0RzFWLJNYOCZt
YUCOuk9Wm2AUYOBxGHXDP68hF3oQ2XoMSa/NW1dR6xuhoyUz1YJEJkGV4vz9YqTl
LYUio7XikwzjEecwWnWV0icNv/86+r10t9cfWwaIrgEUfpg+A8O4qfETPzSiGLkO
x2IjHIBjslZMBXTVF+hbQSumJNzTaiVxXjYV5zQebPzgzg06mQtHtLI854MKGzU2
SSVuP+Wv+LnDF8VFzbZ33tSZgEuqilUTzuVPzxsW69dHaO/FXVHK1j9uHwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGvY3c8OkLj1YCUmfhLXugD8FXK0MB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvYTlqZHp3NlF1UFZnSlNaLUV0ZTZBUHdWY3JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhIkwDAN
BgkqhkiG9w0BAQsFAAOCAQEAXjeYkTSBhn/nlZDByluJqAdGc2hZgfnsm7Toqpop
JpgnMdDF8YVt501zbsqtarEOADLX7eIBAxpy90cUvpQc8EsZ+YuA/E6cDNScHdiz
CXZuKm9Z8FovPop6eErYjQMc+BJOoAG7wQmpf6xGaQN9OU4KssUAOnoEOgEpFnOQ
FWrWA96Kde3j4Bp84acO8dh6WniqGTEmOSqqGXzDZ+JCxxgzAfTlxupwM8LX6y04
VjFrPgNLSzZZ+5KrGD4jyQAiaci4uYJixZh4xj4qdJH58XKN+eJlYO8ZKYOTxGbp
f5KaaFikwfRVWzCuqLkvUivTub552kH+1zPf5DTxmUu/PQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:25:17 2025 by rpki-client