Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m2KOjZe3LxJvvQ5WyVtfg3-g7is.roa
File: m2KOjZe3LxJvvQ5WyVtfg3-g7is.roa (raw, json)
Hash identifier: bgAGCZ8MVLqa2YX34iRFqC15bGpQGO34UwKotwYFNlc=
Subject key identifier: 9B:62:8E:8D:97:B7:2F:12:6F:BD:0E:56:C9:5B:5F:83:7F:A0:EE:2B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0194EACBDC947AF820FE7A8F24AF3CFCE2B8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m2KOjZe3LxJvvQ5WyVtfg3-g7is.roa
Signing time: Sun 09 Feb 2025 13:00:16 +0000
ROA not before: Sun 09 Feb 2025 13:00:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214223
IP address blocks: 2a0c:9a40:80d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Feb 2025 22:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ea:cb:dc:94:7a:f8:20:fe:7a:8f:24:af:3c:fc:e2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 9 13:00:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b628e8d97b72f126fbd0e56c95b5f837fa0ee2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:b1:bc:a2:ab:40:31:1e:22:77:dc:ad:e5:
89:84:62:c0:c8:0b:32:70:60:11:4a:e1:61:53:98:
0e:8f:b7:0d:c8:44:50:1b:61:dd:5c:f2:fc:37:bf:
e7:7a:cc:29:a7:b8:5d:7a:0b:28:77:29:a3:de:9d:
a0:07:22:cd:3d:53:4d:16:42:a1:33:2c:c4:ba:a3:
a8:ac:72:91:b6:7b:73:02:d9:d6:01:aa:d9:59:f2:
3c:75:89:a7:d2:3a:ec:ad:68:5f:18:c2:80:ce:f3:
e7:e2:74:b2:60:04:60:4a:a9:c8:90:8e:db:35:b1:
52:92:47:25:0d:c2:7c:d4:44:ea:ed:ca:bc:0d:a8:
62:5c:4a:51:02:3b:21:e9:06:85:54:ee:a1:93:54:
ed:d4:d7:45:50:ec:02:4a:05:41:7c:b4:3c:02:49:
62:66:18:41:e7:75:c1:10:99:c0:43:f9:38:3a:15:
83:ed:00:95:69:57:bf:2f:b0:c0:c3:e2:e4:22:4a:
89:52:ed:9d:67:9d:57:ad:a8:9a:f7:a2:44:72:97:
95:04:1d:ac:43:f8:97:1e:08:13:77:ed:9d:e3:ba:
f3:4c:2c:46:64:ba:e6:4e:3e:df:9c:7f:ac:43:16:
db:1e:03:03:b6:f1:c5:a5:16:b6:33:32:76:48:96:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:62:8E:8D:97:B7:2F:12:6F:BD:0E:56:C9:5B:5F:83:7F:A0:EE:2B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m2KOjZe3LxJvvQ5WyVtfg3-g7is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80d0::/48
Signature Algorithm: sha256WithRSAEncryption
65:b1:fb:32:4f:80:65:bd:0b:e6:01:c6:3a:4f:dc:9b:fd:26:
ef:96:6a:62:3e:09:16:ff:92:3a:0a:2b:73:95:0c:6d:f8:57:
b0:fb:9d:b3:8e:34:8b:ab:ae:44:b2:1f:d2:73:e5:f8:7a:62:
bc:2c:b0:53:ae:79:ce:f5:01:fc:bd:e9:5c:e1:79:39:57:a5:
4b:9a:41:3e:9b:a8:74:80:8c:09:30:49:72:58:11:b3:bb:43:
55:d8:7d:ac:af:33:aa:de:88:e7:55:03:b5:6c:05:8c:e2:24:
3b:b8:89:60:7a:f0:1c:b3:c2:af:3b:26:6c:99:62:1f:34:81:
df:2e:4c:89:cb:46:86:37:d0:a6:03:e1:8e:71:83:51:32:d7:
40:52:c9:c5:2b:e6:15:81:cf:67:6b:c1:6c:9f:a9:08:a4:be:
f3:7a:ae:30:94:a2:31:19:7a:a6:f0:15:a7:5d:a9:f2:b9:8b:
20:35:d2:d8:ca:74:f7:cb:53:5a:47:2e:b9:cb:c9:15:ce:f2:
87:42:0d:02:7d:f3:d0:f0:ed:7e:27:9e:10:c5:9e:dd:19:4a:
85:d0:64:b9:ca:f6:fc:ab:a5:fc:48:36:78:40:fd:76:ad:3d:
3c:41:7f:3b:86:21:7a:09:1b:ba:c4:f0:5e:51:31:8b:6f:2f:
9b:d6:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:15 2025 by rpki-client