Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/eTfXPq4cDXsbP8OEjH26xOIaDng.roa
File: eTfXPq4cDXsbP8OEjH26xOIaDng.roa (raw, json)
Hash identifier: Odz/B8wNLevHfVMa7urGcVtnDGctylw9BKQQGBLyT6s=
Subject key identifier: 79:37:D7:3E:AE:1C:0D:7B:1B:3F:C3:84:8C:7D:BA:C4:E2:1A:0E:78
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 019513A1243A5E0D013B626C1549BFAA2380
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/eTfXPq4cDXsbP8OEjH26xOIaDng.roa
Signing time: Mon 17 Feb 2025 11:18:02 +0000
ROA not before: Mon 17 Feb 2025 11:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213407
IP address blocks: 2a14:9400:230::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Feb 2025 22:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:a1:24:3a:5e:0d:01:3b:62:6c:15:49:bf:aa:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Feb 17 11:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7937d73eae1c0d7b1b3fc3848c7dbac4e21a0e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:de:96:b5:10:fa:bf:23:71:f3:1e:5c:e2:
ef:3b:73:f4:9a:f4:17:9f:d4:26:ea:c1:1a:3a:3f:
10:df:2e:24:53:ee:40:fd:7d:b3:3a:4e:02:40:c1:
b2:ef:b9:eb:c4:56:34:c3:02:c7:de:88:8f:b4:e2:
c4:d1:65:b8:0d:b3:47:4d:cc:ff:18:85:c0:e7:5e:
aa:b0:b6:6e:25:6d:58:fb:dc:68:ff:48:33:3b:1e:
3a:30:8b:7f:8f:74:e8:9e:0b:05:ea:22:96:4f:dd:
37:52:e0:39:70:47:35:6d:b0:bc:25:0f:85:d7:1d:
62:88:9c:58:06:ea:e2:0d:cd:49:1f:e7:df:24:d4:
2c:a7:82:54:4f:a8:9b:e5:d8:07:24:bb:bc:b2:98:
fa:b4:35:1d:d0:3c:12:f0:b1:cb:62:14:ab:5d:56:
5a:da:d7:bd:00:80:eb:5e:82:1e:df:e6:9c:28:bd:
71:c9:7d:19:56:13:21:4c:31:27:ea:fb:02:ca:fa:
41:12:70:76:ed:1d:7e:ea:47:6c:09:a0:e4:10:b2:
07:9c:cf:d1:7d:1e:a1:b2:7a:5d:1f:7f:79:47:ed:
20:bc:be:66:1b:01:1f:36:d1:1e:29:c1:21:73:94:
30:90:c4:6a:11:0f:12:ef:ee:1e:b9:fd:ea:75:a2:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:37:D7:3E:AE:1C:0D:7B:1B:3F:C3:84:8C:7D:BA:C4:E2:1A:0E:78
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/eTfXPq4cDXsbP8OEjH26xOIaDng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9400:230::/48
Signature Algorithm: sha256WithRSAEncryption
80:6e:9c:e3:cf:06:3a:1f:bb:30:7f:79:25:56:e1:ba:41:e9:
4f:86:98:e8:f4:7e:ac:51:e4:28:7f:ed:bf:66:2e:aa:96:41:
42:29:e4:e9:e6:3c:44:49:74:c5:30:92:db:9e:2a:4b:e2:3d:
2d:85:e4:82:e7:11:dc:43:b5:2e:f8:ca:0b:db:e0:0c:b0:45:
a9:a4:6f:75:eb:68:e3:21:9b:e5:a0:52:1f:fc:44:6d:15:b9:
19:5d:08:7d:da:83:5d:8f:2f:bb:99:0b:b4:6b:d2:8b:7d:d2:
71:4e:de:30:cc:bd:14:57:cc:52:5f:89:1f:68:da:41:26:55:
09:4a:ee:d1:88:eb:36:2e:d7:7f:74:95:4d:bf:d2:a5:47:0e:
81:89:15:ef:3d:b5:75:b0:f7:f6:24:83:bc:5b:c7:ed:41:6e:
24:56:ca:40:5e:3a:f4:48:0e:31:fb:35:ab:9e:88:6b:45:06:
21:f2:03:21:61:42:c8:a1:67:db:0d:09:50:d6:c5:b9:98:d4:
4f:e5:d6:8b:9e:04:d5:03:44:53:bc:de:21:02:a4:ba:f1:99:
06:48:31:56:25:64:8c:f2:50:57:84:80:9b:d9:a7:ac:d5:e9:
2c:a6:3e:27:18:49:f3:9e:bc:e8:d3:9c:48:75:20:9e:a4:a4:
0a:5b:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:47 2025 by rpki-client