Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/oTgYZV5mbL6kcs5KVs_pfaivvcg.roa
File: oTgYZV5mbL6kcs5KVs_pfaivvcg.roa (raw, json)
Hash identifier: 32CKCGtYl+jo3H/WFSWl3vfpClYXctGKBEqn8PZoeXE=
Subject key identifier: A1:38:18:65:5E:66:6C:BE:A4:72:CE:4A:56:CF:E9:7D:A8:AF:BD:C8
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0194F65265DE2C6247AA17FD5C09A1B3665C
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/oTgYZV5mbL6kcs5KVs_pfaivvcg.roa
Signing time: Tue 11 Feb 2025 18:43:02 +0000
ROA not before: Tue 11 Feb 2025 18:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:dfc6::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 17:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f6:52:65:de:2c:62:47:aa:17:fd:5c:09:a1:b3:66:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Feb 11 18:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a13818655e666cbea472ce4a56cfe97da8afbdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:14:6b:7d:aa:82:f0:10:90:cf:34:c7:0f:
56:67:06:f6:2a:88:7a:f1:86:5a:ba:6a:eb:bb:dd:
97:54:38:04:5e:ac:ec:ac:d5:16:64:3f:f1:1e:33:
34:b2:e2:df:5b:54:3c:0b:4f:68:3d:20:85:9d:57:
a5:d3:10:d7:60:0b:29:73:de:f7:cc:d9:65:24:cd:
bb:27:cd:1d:f8:83:03:29:56:79:90:e3:74:55:75:
75:2b:cb:06:e1:e0:48:59:4b:36:d2:5d:bd:c9:0e:
0e:18:69:bd:09:38:a3:20:ed:c4:4b:ce:9a:3a:d2:
22:52:6e:51:cf:9d:1d:08:78:0a:d8:3b:86:84:03:
10:89:c5:27:a3:95:da:10:84:0a:f8:c1:a1:84:54:
3d:9c:49:3b:cc:28:f2:29:eb:87:0b:94:99:f7:a7:
94:f7:e9:ec:f2:69:0c:fb:fa:b7:2a:ae:32:63:75:
a6:15:1b:5a:bb:d8:96:67:9e:63:89:e4:11:05:07:
13:d2:28:26:79:32:a9:77:9e:05:9e:5c:cf:68:f8:
e0:0e:64:1b:ad:74:47:11:16:92:87:c0:3a:02:6f:
70:60:06:42:14:4f:23:af:4a:c4:db:00:b7:dd:a5:
60:b3:17:45:ec:f0:44:78:43:6e:ec:b7:3d:18:50:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:18:65:5E:66:6C:BE:A4:72:CE:4A:56:CF:E9:7D:A8:AF:BD:C8
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/oTgYZV5mbL6kcs5KVs_pfaivvcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:dfc6::/32
Signature Algorithm: sha256WithRSAEncryption
11:bb:79:d9:68:bf:56:cc:f3:83:3f:77:38:6d:ae:dd:53:b8:
2e:ae:b0:84:f4:72:d2:9a:f9:ab:c1:55:62:82:20:73:57:55:
0e:03:0a:e8:80:f9:98:8e:21:6f:c5:43:85:fe:1c:ad:ed:46:
c8:2a:10:bb:74:d0:80:b2:13:4e:e6:d3:b5:2c:19:fe:e5:77:
f4:79:b9:83:89:18:e7:29:b9:5a:18:ab:c0:70:29:3e:91:bb:
be:49:d1:02:ba:c0:3b:f1:a5:75:4a:bf:51:eb:7e:48:37:24:
4d:22:17:b8:0e:69:40:82:60:f8:08:a7:74:ed:c1:60:05:2c:
02:2e:0b:72:97:0d:a9:3a:61:66:f7:76:13:6a:62:0a:69:4e:
1d:30:ea:71:04:3e:70:6b:38:fd:f5:98:d6:7f:d4:dc:3e:4e:
c8:94:ea:0e:3a:77:21:94:e4:01:11:26:fe:7c:3a:27:55:df:
1b:b5:da:67:5b:5e:20:df:5b:48:1e:41:06:1a:e7:85:32:ab:
8f:da:0e:2e:17:8d:2b:1c:52:8c:e8:64:b9:4d:8b:40:2f:42:
32:50:a6:5a:4d:5a:45:71:09:40:0b:3c:0d:dd:73:a7:a4:cb:
aa:bd:de:ba:4c:f2:6f:72:2a:98:e2:2c:a4:41:94:72:0d:43:
be:97:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:09 2025 by rpki-client