Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/SdnNzvJWNdkEM7juDvNhfhrEGDc.roa
File: SdnNzvJWNdkEM7juDvNhfhrEGDc.roa (raw, json)
Hash identifier: 0qmwkQqdueAwd/Pb8gkDQUZcdwTN3s2EY0Hkcyic/PY=
Subject key identifier: 49:D9:CD:CE:F2:56:35:D9:04:33:B8:EE:0E:F3:61:7E:1A:C4:18:37
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 019427B6689D66C80C5E35BF066FEC7F5AD3
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/SdnNzvJWNdkEM7juDvNhfhrEGDc.roa
Signing time: Thu 02 Jan 2025 15:50:53 +0000
ROA not before: Thu 02 Jan 2025 15:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0e:7f45::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 17 Feb 2025 11:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:68:9d:66:c8:0c:5e:35:bf:06:6f:ec:7f:5a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: Jan 2 15:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49d9cdcef25635d90433b8ee0ef3617e1ac41837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:a8:32:21:73:71:c5:39:55:44:af:62:14:
0e:dc:a6:21:52:d7:dd:31:42:22:db:1a:95:47:55:
98:01:11:b4:af:06:9c:66:7d:96:58:62:f6:75:45:
fc:92:d1:bc:80:ae:f6:10:89:9f:a6:12:41:cf:4b:
ad:41:ce:6d:84:e0:67:9b:b6:45:cb:98:b6:d8:7d:
ff:2e:5b:68:cd:f7:3e:12:72:86:e0:84:8b:e3:20:
0d:e7:bf:3d:a9:b7:43:28:7e:22:60:c8:18:77:10:
48:8c:91:9b:2c:96:8a:d5:7b:9c:7f:bd:77:b3:f0:
c6:d4:ef:c2:5d:cf:32:aa:07:a4:bb:f5:e5:90:bf:
05:23:3b:92:36:e2:cd:27:7e:3a:78:d8:39:a4:5f:
11:7a:5a:08:ba:83:f0:ad:cc:92:81:10:88:96:39:
53:40:a6:8d:46:a4:fb:10:f4:fd:81:7c:0d:b0:0f:
03:98:1f:13:66:f8:72:fc:49:3c:85:b4:ac:ba:c2:
66:d2:7d:ed:f5:7a:59:2a:62:82:e4:ed:6f:b7:b2:
8c:1c:63:1b:16:11:0a:3d:91:02:a7:11:d9:b7:19:
27:39:b8:fe:88:2f:c6:73:b5:d2:8d:c1:ba:cb:13:
bd:ef:7a:2d:21:80:da:21:3c:d7:76:45:a9:c1:ca:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:CD:CE:F2:56:35:D9:04:33:B8:EE:0E:F3:61:7E:1A:C4:18:37
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/SdnNzvJWNdkEM7juDvNhfhrEGDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7f45::/32
Signature Algorithm: sha256WithRSAEncryption
91:da:64:25:a3:d6:69:51:63:04:e7:f7:61:ff:76:62:fb:1e:
6f:57:7b:a9:a0:7b:fe:43:18:a9:b7:c3:28:e0:ee:8f:01:d0:
77:4e:1e:b7:0c:64:da:0b:2f:6d:4b:4f:dd:ba:c1:a3:f0:92:
6c:20:9d:d0:c0:fb:a4:27:5b:29:84:ba:e3:b6:f5:d6:3b:38:
56:93:a6:4d:15:d3:e2:b7:1c:1d:b8:3b:d4:bd:c4:d8:e4:7f:
fa:c5:c5:08:e9:38:d0:8c:0c:a8:b7:c2:51:cf:2f:c9:5b:2b:
61:48:2f:3d:2b:95:87:20:eb:1e:32:17:fa:a6:66:dc:93:e3:
77:11:3c:4f:5b:cf:b7:70:7c:69:60:09:ef:98:9b:c1:f7:bb:
f4:81:06:bb:df:cf:5e:d4:93:87:19:24:ee:4b:12:99:d6:be:
bf:93:10:6e:df:7c:cb:c8:2f:a0:77:b7:d8:45:cc:44:71:8f:
52:be:a5:01:f5:dc:d2:dd:3b:75:1a:66:07:1f:1b:66:d8:86:
a4:56:7b:15:b0:31:23:60:d6:74:45:e8:c3:07:1e:de:ee:d9:
80:56:4d:86:da:4a:65:33:ba:a8:b7:92:87:8a:38:d8:51:eb:
88:c8:74:cb:68:db:95:15:90:48:d6:44:78:80:8a:73:6d:f1:
16:24:b3:65
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQntmidZsgMXjW/Bm/sf1rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWNjZDgzMGI3ZTAzMzA4YmY1Y2YyNWU2N2E3ZmMyYmRl
MDk1N2MwHhcNMjUwMTAyMTU1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWQ5Y2RjZWYyNTYzNWQ5MDQzM2I4ZWUwZWYzNjE3ZTFhYzQxODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd+oMiFzccU5VUSvYhQO3KYhUtfd
MUIi2xqVR1WYARG0rwacZn2WWGL2dUX8ktG8gK72EImfphJBz0utQc5thOBnm7ZF
y5i22H3/Lltozfc+EnKG4ISL4yAN5789qbdDKH4iYMgYdxBIjJGbLJaK1Xucf713
s/DG1O/CXc8yqgeku/XlkL8FIzuSNuLNJ346eNg5pF8ReloIuoPwrcySgRCIljlT
QKaNRqT7EPT9gXwNsA8DmB8TZvhy/Ek8hbSsusJm0n3t9XpZKmKC5O1vt7KMHGMb
FhEKPZECpxHZtxknObj+iC/Gc7XSjcG6yxO973otIYDaITzXdkWpwcqmaQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEnZzc7yVjXZBDO47g7zYX4axBg3MB8GA1UdIwQY
MBaAFMqczYMLfgMwi/XPJeZ6f8K94JV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQt
ZDFjZGUyNDY1Zjg5LzEvU2RuTnp2SldOZGtFTTdqdUR2TmhmaHJFR0RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQtZDFjZGUyNDY1Zjg5
LzEveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg5/RTAN
BgkqhkiG9w0BAQsFAAOCAQEAkdpkJaPWaVFjBOf3Yf92Yvseb1d7qaB7/kMYqbfD
KODujwHQd04etwxk2gsvbUtP3brBo/CSbCCd0MD7pCdbKYS647b11js4VpOmTRXT
4rccHbg71L3E2OR/+sXFCOk40IwMqLfCUc8vyVsrYUgvPSuVhyDrHjIX+qZm3JPj
dxE8T1vPt3B8aWAJ75ibwfe79IEGu9/PXtSThxkk7ksSmda+v5MQbt98y8gvoHe3
2EXMRHGPUr6lAfXc0t07dRpmBx8bZtiGpFZ7FbAxI2DWdEXowwce3u7ZgFZNhtpK
ZTO6qLeSh4o42FHriMh0y2jblRWQSNZEeICKc23xFiSzZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:12 2025 by rpki-client