Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/4FWf4euQ6SomIIbxfDn3l2kH8Hw.roa
File: 4FWf4euQ6SomIIbxfDn3l2kH8Hw.roa (raw, json)
Hash identifier: OVE+jpnWUoxitVVDiX2misqRdOVwzrPHKx7Mtevi1AU=
Subject key identifier: E0:55:9F:E1:EB:90:E9:2A:26:20:86:F1:7C:39:F7:97:69:07:F0:7C
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 019421B23CCBFB45FE62119FB987237BA149
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/4FWf4euQ6SomIIbxfDn3l2kH8Hw.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12679
IP address blocks: 2a0c:b6c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Feb 2025 21:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3c:cb:fb:45:fe:62:11:9f:b9:87:23:7b:a1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0559fe1eb90e92a262086f17c39f7976907f07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:bd:f6:40:dd:01:36:05:1e:bc:84:05:d4:
40:9c:e4:9c:b9:66:f4:42:74:a5:1c:cf:fe:14:26:
60:2b:8a:a5:0d:7c:67:0e:26:4e:0b:db:09:fe:89:
e8:70:41:25:4c:fd:e6:94:8b:86:57:03:41:e5:19:
ef:74:6b:c2:06:d8:75:ae:30:91:66:f4:35:78:e2:
74:a5:c2:09:6e:d0:fc:68:b9:33:9b:cf:6c:e5:73:
88:e6:09:54:a8:d3:ef:b5:ff:91:7d:22:db:9d:81:
06:78:5a:b1:36:d8:3d:c7:25:90:0e:4c:ed:35:23:
05:96:1e:b1:88:3b:c5:d7:b1:c0:50:c2:80:ea:af:
8a:5d:91:d3:ab:98:e7:7e:ce:a9:89:05:9f:df:a8:
c8:a7:a5:5b:8f:4e:a5:b5:53:31:c6:64:21:e2:04:
53:ef:6e:b9:7d:75:9b:7c:7e:ba:e0:a2:72:9f:11:
e5:f1:3b:da:bb:01:6d:0a:64:5d:7d:97:7a:eb:82:
b6:cd:8f:01:5c:f3:2b:c3:06:2d:bf:ee:d4:96:67:
e7:e6:5e:75:dd:83:28:e5:2b:cd:d9:71:5a:bb:68:
60:be:55:1e:3b:eb:86:9d:3c:4d:38:06:33:9e:97:
3b:f1:61:57:51:ed:e4:d5:95:e4:a9:b9:2c:df:6b:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:9F:E1:EB:90:E9:2A:26:20:86:F1:7C:39:F7:97:69:07:F0:7C
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/4FWf4euQ6SomIIbxfDn3l2kH8Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b6c7::/32
Signature Algorithm: sha256WithRSAEncryption
23:9c:76:e4:d4:d7:3b:bf:4b:b6:2f:4c:cc:a2:61:57:70:84:
4a:95:87:42:03:01:5e:5e:d8:90:55:b6:73:49:cc:90:36:bb:
81:cd:44:cb:dc:26:91:40:60:e8:db:69:5e:eb:55:d0:75:50:
bf:dc:9b:2f:6b:94:e9:50:7b:62:6f:a3:08:17:49:f4:5d:65:
e6:62:95:f4:fc:bd:fb:d7:b8:23:02:6e:23:f4:74:ca:52:22:
9d:58:7a:f0:c5:35:60:47:16:ee:49:b1:c8:30:67:da:63:80:
d5:3a:cb:67:dd:ec:93:3b:f0:f6:05:4b:79:be:a9:5a:5a:e4:
fa:b9:54:d8:da:b0:fe:b4:b4:c8:d9:ce:e7:f7:e9:23:f6:ee:
93:31:c7:84:51:b4:8f:b0:c6:67:74:2c:51:6b:72:c1:a5:41:
d7:24:80:ae:4f:e3:16:f9:70:e9:b5:c4:94:23:6b:09:e7:64:
4b:26:47:83:15:df:54:fc:78:6c:ac:e5:c9:6d:9c:ae:8a:b6:
ff:b2:5c:a7:ce:d8:5b:76:10:93:fc:7f:69:eb:4c:e1:96:d1:
aa:c6:94:f0:4e:73:29:ac:6d:68:f7:52:54:82:7c:47:64:98:
f7:ea:7a:e1:c0:0b:14:ce:dd:a2:63:52:71:85:a8:4f:d0:0d:
6f:96:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:14:06 2025 by rpki-client