Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ENvbvgI_AcAljgQ_ijDO_xrpJ5I.roa
File: ENvbvgI_AcAljgQ_ijDO_xrpJ5I.roa (raw, json)
Hash identifier: zAbTH6jIaUntXEMTu7Wz3A1VsZEdBdRzzUXRhwpzd98=
Subject key identifier: 10:DB:DB:BE:02:3F:01:C0:25:8E:04:3F:8A:30:CE:FF:1A:E9:27:92
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0194221F477710DEDEDDFC0263F97A96BDAA
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ENvbvgI_AcAljgQ_ijDO_xrpJ5I.roa
Signing time: Wed 01 Jan 2025 13:47:42 +0000
ROA not before: Wed 01 Jan 2025 13:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215443
IP address blocks: 2a0d:d940:9006::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Feb 2025 08:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:47:77:10:de:de:dd:fc:02:63:f9:7a:96:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jan 1 13:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10dbdbbe023f01c0258e043f8a30ceff1ae92792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dd:8c:9a:04:4b:06:3a:0a:87:62:12:3d:71:
92:e8:d5:08:66:60:90:ef:d2:bb:c9:54:91:50:4b:
7d:8e:10:d7:ba:dc:b5:4e:48:12:d7:c9:c6:82:85:
88:03:8e:f1:6a:63:45:9c:ae:0f:2a:e7:5a:a7:dd:
70:7d:89:47:c7:c0:8c:66:50:c8:d3:c4:7c:83:b8:
ec:77:d5:28:fb:f7:70:32:4c:c6:11:76:fb:24:2a:
c9:e5:6d:b6:f5:58:a9:63:10:fa:c6:06:b6:7a:d4:
10:9f:21:b9:65:f3:77:dc:ca:df:a8:9a:ca:52:6d:
98:2e:8d:41:00:d2:ef:30:8d:42:f1:95:94:71:12:
a4:36:75:18:20:72:56:74:cc:7c:f1:e6:21:4a:0e:
2f:64:40:af:90:3b:b8:64:a8:9a:b9:13:de:ab:ef:
4c:f7:17:22:68:3d:70:98:c3:8f:7f:64:4c:0b:1f:
e4:98:84:e6:9b:32:9d:b5:5b:6e:d5:d5:c2:75:71:
74:05:db:02:d9:98:60:c0:49:64:8a:d8:1b:c3:84:
cc:dc:ff:8f:cf:91:00:3c:fd:4c:0f:f6:4c:55:c8:
ed:f7:af:09:90:f2:f2:f8:27:cd:d3:7d:d1:03:c9:
c6:c3:fa:76:ca:38:dd:40:14:e0:29:15:af:a0:8e:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:DB:BE:02:3F:01:C0:25:8E:04:3F:8A:30:CE:FF:1A:E9:27:92
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ENvbvgI_AcAljgQ_ijDO_xrpJ5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:9006::/48
Signature Algorithm: sha256WithRSAEncryption
b6:97:4c:a5:ce:a8:bc:c1:ed:1e:72:ad:a9:3c:28:e1:e7:c9:
1b:e2:13:dc:21:a2:7e:28:79:53:4e:91:f6:b3:75:a5:c9:c9:
86:74:d7:e9:a9:7c:6c:60:36:35:17:f6:49:d7:c4:20:2a:d4:
1f:50:d3:74:de:a5:5d:c5:68:b6:b2:b2:7b:2c:95:25:02:50:
7d:81:de:e4:ad:01:10:b1:87:c5:42:e8:32:ef:1e:a3:b0:2c:
e8:82:fc:d2:f6:55:6a:18:35:1b:1b:6f:7b:cf:74:98:28:0f:
9f:3e:81:c9:2b:9c:7a:6d:59:7e:9a:db:bb:5d:50:66:9a:39:
77:46:67:fa:73:6d:63:7e:ed:db:68:68:b5:ba:7d:3e:b3:04:
cc:ed:34:49:30:5f:ac:fd:b4:e6:dd:7c:2b:f8:2b:4b:2d:63:
17:dd:1d:29:9e:12:ea:07:a8:2e:25:3b:35:23:a4:a3:ee:70:
bb:a2:73:b5:67:4e:da:a5:9c:00:13:78:8e:2b:9c:f5:a4:bf:
38:25:e0:ef:06:65:91:7e:e7:04:bc:4d:53:2e:17:f5:49:63:
aa:10:a9:97:52:bd:dc:27:60:60:50:d4:a1:54:f3:c3:d4:6f:
3e:0e:c0:4a:01:1d:75:bd:75:45:8c:b4:d3:50:25:10:ff:1e:
3f:e1:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:12 2025 by rpki-client