Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/OGhXnXH-It30OQ9GIl37KLe5jPY.roa
File: OGhXnXH-It30OQ9GIl37KLe5jPY.roa (raw, json)
Hash identifier: zfyn1qefrNYFPzUI9x7kXAWT8KQkHbt/BvNZueIU1xA=
Subject key identifier: 38:68:57:9D:71:FE:22:DD:F4:39:0F:46:22:5D:FB:28:B7:B9:8C:F6
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0194DC5D8FA886704D7D71B1984DDE68D581
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/OGhXnXH-It30OQ9GIl37KLe5jPY.roa
Signing time: Thu 06 Feb 2025 17:45:06 +0000
ROA not before: Thu 06 Feb 2025 17:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:9442::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 17:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:5d:8f:a8:86:70:4d:7d:71:b1:98:4d:de:68:d5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Feb 6 17:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3868579d71fe22ddf4390f46225dfb28b7b98cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:20:76:a5:72:4d:81:4a:72:4e:68:c2:df:
ba:80:cb:7f:03:a6:7b:cf:52:21:0a:ba:98:84:a1:
79:09:cd:5a:ba:36:a7:7a:cf:91:53:2d:fe:da:d1:
c9:5f:9a:0a:7d:bc:80:6f:ba:c4:bd:fb:4c:aa:a0:
f2:a8:25:d5:2e:bc:0c:50:d4:b9:94:ab:46:c0:17:
96:c6:ad:e9:67:56:7f:13:bf:3d:9c:4b:fc:f4:61:
ad:c7:50:fe:bd:3a:b7:ad:e2:8f:eb:44:a0:75:da:
c0:89:14:85:ef:df:86:61:47:9f:b8:bd:ea:a6:cc:
29:a7:91:04:69:49:72:76:f9:86:3e:aa:6d:3b:a6:
12:17:9b:36:bd:f5:c5:07:2d:e9:a7:79:2b:d1:b3:
cd:f6:42:cb:69:13:cb:87:e3:af:2d:ce:62:ab:55:
44:ec:30:ff:fd:df:96:5e:49:fa:51:ed:50:14:3e:
88:4d:c8:b7:31:90:3f:cb:9e:93:99:e0:40:4d:d4:
1f:4c:9f:09:ee:f3:63:c4:0d:62:75:72:97:ea:cb:
c3:6a:73:e3:7e:4e:3e:b1:21:55:dc:39:03:7b:ad:
34:02:bb:5f:e1:3d:8b:cb:f2:46:fa:8a:4c:ff:e5:
6e:21:05:09:c8:a0:c7:97:fd:f0:60:95:48:51:d4:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:57:9D:71:FE:22:DD:F4:39:0F:46:22:5D:FB:28:B7:B9:8C:F6
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/OGhXnXH-It30OQ9GIl37KLe5jPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9442::/32
Signature Algorithm: sha256WithRSAEncryption
9a:25:5e:d6:cf:71:e7:f5:16:a3:66:43:22:d2:47:f4:b3:f5:
9f:9e:db:f7:db:2f:af:53:de:bf:ab:6b:5b:57:dc:0f:25:27:
5d:3e:92:69:47:b8:44:57:d0:a3:0a:2f:ee:93:9b:13:d4:08:
c0:65:f0:57:1d:d2:ad:81:fd:7e:9d:ea:7e:19:23:97:37:f0:
d3:cc:c9:ba:eb:d6:1a:ad:4b:7f:a9:c0:0f:a1:d3:91:55:69:
2e:d1:7e:fa:40:4a:80:9a:7c:12:76:2d:62:47:7d:d2:79:c8:
ac:74:f7:2c:31:d9:12:9c:16:1d:9b:44:fc:70:6d:00:35:32:
2d:79:f0:c0:86:18:1f:c1:d1:cd:c9:c2:e3:1b:7f:01:6f:6a:
a7:87:72:22:4c:96:d5:15:b2:b5:7d:b5:8c:0b:7e:81:62:59:
54:01:39:ee:42:0c:86:3b:e2:7f:80:18:3b:1b:aa:b2:ae:86:
ac:c4:e7:9e:a5:41:37:9d:4a:41:08:43:47:0c:2d:65:28:98:
16:67:bb:36:42:bc:da:26:ff:dc:98:90:b6:7d:c9:c8:76:83:
8e:65:a4:8f:98:32:e7:38:cd:24:6a:6f:0e:af:32:ee:ba:aa:
00:ca:06:31:fe:3b:76:9a:73:18:2b:89:0d:76:f8:6e:00:81:
32:19:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:11:37 2025 by rpki-client