Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/UzPllA6UizFc_kNo1t7iIKZAGyg.roa
File: UzPllA6UizFc_kNo1t7iIKZAGyg.roa (raw, json)
Hash identifier: CNPqvGFZgWKgNoVOWkGH9rLCSND8UiuWGvsvMHmDbVY=
Subject key identifier: 53:33:E5:94:0E:94:8B:31:5C:FE:43:68:D6:DE:E2:20:A6:40:1B:28
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 01954F02D1FCE90F3643CEC2F5F11EAA7999
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/UzPllA6UizFc_kNo1t7iIKZAGyg.roa
Signing time: Sat 01 Mar 2025 00:02:19 +0000
ROA not before: Sat 01 Mar 2025 00:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 2a06:fcc0:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Mar 2025 19:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4f:02:d1:fc:e9:0f:36:43:ce:c2:f5:f1:1e:aa:79:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Mar 1 00:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5333e5940e948b315cfe4368d6dee220a6401b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:67:d8:a2:47:c0:d0:26:16:18:bd:89:8c:
f9:6e:8f:05:9d:c1:42:05:5a:32:19:2b:de:a0:fc:
49:42:e3:de:59:97:90:c1:b4:89:7e:80:38:80:d2:
03:a3:93:d6:07:0e:7b:f8:78:a0:a6:81:88:cb:c1:
68:da:be:d5:68:5d:48:58:4d:f0:32:ed:c6:ee:05:
ce:95:64:04:f6:2b:22:01:8c:4f:f3:5a:0c:1d:48:
1f:c6:d2:7e:20:9a:ce:44:bc:45:63:6b:a5:75:6c:
ee:86:ba:5e:4e:23:e3:68:dd:a7:21:84:76:85:9f:
65:86:47:8b:9b:90:18:91:42:8a:39:0d:f5:a3:d5:
22:6e:4f:b5:c5:66:62:8d:c5:22:59:db:29:03:bc:
de:dd:cb:eb:a8:27:41:e5:eb:69:9a:b0:0e:8e:57:
72:9d:d2:4d:d2:69:be:29:ea:cb:1c:76:8e:c7:c7:
dd:b6:78:53:4a:3f:98:9b:b5:e5:76:20:dd:72:10:
ee:e4:58:2e:01:56:b2:31:1f:13:c2:af:3e:fe:8f:
d4:69:f7:c6:6d:14:ec:e5:0a:45:1b:ac:7b:5e:39:
a2:12:30:ae:9e:8a:ba:22:ce:35:ee:e7:65:90:c0:
60:04:1e:37:49:e3:93:d0:71:ca:c5:49:b6:7a:0f:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:33:E5:94:0E:94:8B:31:5C:FE:43:68:D6:DE:E2:20:A6:40:1B:28
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/UzPllA6UizFc_kNo1t7iIKZAGyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fcc0:4::/48
Signature Algorithm: sha256WithRSAEncryption
07:0f:f2:0f:48:ae:de:87:d3:88:01:0a:1a:44:e5:53:8c:db:
5c:89:c3:fd:40:f4:24:52:1f:a4:d4:72:a2:f5:84:82:17:ff:
1d:0a:3a:5a:da:10:ac:f7:5d:69:35:88:d9:20:10:c6:ef:ca:
28:13:ee:99:eb:1c:5a:54:36:d8:c1:6f:22:15:cd:11:4d:f9:
5c:86:c5:05:7a:7e:84:09:40:11:ae:c3:a1:12:23:ad:e2:68:
9e:a4:a7:7e:27:3e:fa:0b:9c:5e:11:6e:5e:54:d2:a7:76:3a:
ec:c1:6d:48:19:b3:b7:73:39:84:da:12:91:34:5c:2d:9b:c4:
83:11:2f:ae:05:b3:01:dc:cc:be:92:73:28:a1:42:54:6e:6f:
ee:ea:7d:b9:df:54:67:cd:8c:fe:b1:17:77:e6:19:fd:9d:c8:
17:e4:18:aa:aa:ae:6b:69:ba:bd:c7:ea:b7:cc:f7:63:d7:e2:
85:e9:51:72:85:a2:6a:09:f6:40:7b:cc:30:e8:25:93:8f:a3:
a7:ac:91:57:78:b2:e6:70:2f:e3:64:b8:1b:31:60:68:b1:69:
99:2f:95:bf:15:a4:cd:d3:53:ae:74:6e:4d:49:1c:81:fd:3a:
73:23:0d:92:83:3d:51:3e:ca:65:dd:ab:f2:bd:b9:0a:38:eb:
32:57:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:26 2025 by rpki-client