Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/m7DgmTEJ8--bG4pRIcViTdKe83M.roa
File: m7DgmTEJ8--bG4pRIcViTdKe83M.roa (raw, json)
Hash identifier: yQ0E4qOahNxIqKoH2aO+RFg3xEe40iMF/1q8sSVuT18=
Subject key identifier: 9B:B0:E0:99:31:09:F3:EF:9B:1B:8A:51:21:C5:62:4D:D2:9E:F3:73
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 0195AAB2A8BEEB46362F0D32A43F5870DAE3
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/m7DgmTEJ8--bG4pRIcViTdKe83M.roa
Signing time: Tue 18 Mar 2025 19:19:50 +0000
ROA not before: Tue 18 Mar 2025 19:19:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:5183::/32 maxlen: 32
2a11:68c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 28 Mar 2025 20:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:aa:b2:a8:be:eb:46:36:2f:0d:32:a4:3f:58:70:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Mar 18 19:19:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb0e0993109f3ef9b1b8a5121c5624dd29ef373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:16:c2:ae:4d:b1:5a:47:63:90:1c:85:4a:
c5:6a:09:d0:8b:5f:ef:3c:69:7a:16:e0:37:65:a6:
fd:ff:94:e5:40:f0:2f:9f:52:c0:b3:9e:17:1e:ca:
e7:48:54:75:ac:19:dd:ec:2d:6e:e3:da:74:b1:91:
a1:4b:8e:e8:6d:33:56:ee:87:16:51:29:75:09:cf:
e6:de:00:57:63:12:1e:d5:0d:fa:a1:b0:4e:68:82:
78:2e:db:83:ae:a8:6f:06:10:05:69:95:d1:52:ad:
67:ec:ae:0a:8a:d5:34:3e:d8:c0:1e:5a:b9:61:c5:
c6:73:a1:35:76:5e:0f:bf:1d:94:f9:68:ad:6f:8e:
2c:e3:25:df:4d:d4:59:f0:a7:3b:f8:ad:e7:86:92:
3d:31:f6:2a:1e:51:4b:df:e7:8c:19:b1:aa:ac:d7:
01:67:4f:b9:51:76:7e:11:d6:69:45:d2:ae:47:74:
bc:0c:f1:25:d2:cb:fe:6f:8c:85:41:a4:e6:f5:ac:
16:a3:9d:5e:bf:bf:e6:60:45:1e:f4:e3:55:d2:e0:
ac:7e:01:cf:2b:0f:6d:a2:54:b8:44:fc:b3:25:7c:
65:20:bf:7d:a9:0b:43:a8:34:38:f0:76:68:0b:8c:
ca:06:c6:cb:1f:6c:78:d5:35:20:a9:a3:02:3c:7a:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:E0:99:31:09:F3:EF:9B:1B:8A:51:21:C5:62:4D:D2:9E:F3:73
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/m7DgmTEJ8--bG4pRIcViTdKe83M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5183::/32
2a11:68c7::/32
Signature Algorithm: sha256WithRSAEncryption
58:a6:d7:7d:6c:ca:a4:12:63:ba:e2:0f:14:67:b9:71:c9:84:
d3:74:7b:03:70:4a:fe:a0:44:63:be:9b:41:9f:e4:5f:05:a4:
5b:3f:62:5c:2a:53:1a:6c:ea:8f:18:d3:9b:78:7b:37:21:d0:
12:3e:38:89:2b:28:70:ab:91:c3:79:ae:2e:6f:4b:92:d9:a2:
1f:8b:75:c5:92:2a:25:40:0c:cd:89:97:ff:b5:1d:01:1d:fb:
39:18:d3:31:bf:38:c4:3f:7a:ad:10:30:d3:4d:4f:a5:c4:af:
51:1e:cd:2b:e9:55:bd:cb:d2:f3:a3:77:d8:9c:dd:74:76:2c:
3a:20:e2:71:fa:a9:a6:a8:5c:d5:d5:47:1f:8a:1c:84:38:4f:
cf:b9:04:8c:1f:15:24:cb:a9:ca:fb:6d:23:48:0a:ac:e4:16:
cd:24:a4:41:6f:3c:2c:57:01:07:38:d3:8f:08:b9:38:24:fc:
76:c1:86:ea:16:c7:d7:39:d7:6c:e4:e7:90:c2:aa:7a:2b:3f:
96:92:b3:27:b2:a3:5b:5c:64:ca:e5:5b:8c:1d:50:e6:d4:d5:
ea:1f:de:65:56:3a:26:aa:dd:8a:f4:28:67:a0:7c:86:50:92:
d2:c4:d0:14:fe:59:9b:7c:08:8e:b4:ac:e5:39:76:b4:e2:0e:
ad:42:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:13:41 2025 by rpki-client