Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/Tgsv28g5rB-tM2nosTqQxKxgzxg.roa
File: Tgsv28g5rB-tM2nosTqQxKxgzxg.roa (raw, json)
Hash identifier: KaNoSdKWIio7wFrrRIKWTETXemTwxmjk3bhuQ3ZDsqA=
Subject key identifier: 4E:0B:2F:DB:C8:39:AC:1F:AD:33:69:E8:B1:3A:90:C4:AC:60:CF:18
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 019422FC28B19A6D718DC39B6FD524E53E9D
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/Tgsv28g5rB-tM2nosTqQxKxgzxg.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 141.252.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:28:b1:9a:6d:71:8d:c3:9b:6f:d5:24:e5:3e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e0b2fdbc839ac1fad3369e8b13a90c4ac60cf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:42:51:db:1c:7a:cd:3a:ac:b2:1f:38:6e:
7b:06:2c:aa:21:01:e1:6c:10:e8:eb:1c:a6:96:68:
de:a2:05:17:55:22:13:9a:06:48:29:71:34:7c:87:
c5:01:68:fa:fb:53:95:3a:95:c5:36:f9:0b:16:d6:
05:31:b8:64:6e:ed:80:44:f0:e9:bc:33:70:62:e5:
7f:b4:cf:34:1e:22:41:d2:c8:02:af:5e:01:dd:fd:
a1:6f:0a:a2:db:44:21:81:1b:14:d1:2e:f3:60:e1:
0a:a5:9d:32:37:6d:e2:a1:f5:9c:7f:56:e9:fb:2d:
2e:0c:5b:f3:11:72:77:68:52:29:64:61:14:35:56:
77:5b:12:85:54:da:67:d1:44:18:ba:6f:a2:ae:41:
2b:43:95:7d:8a:d4:44:7f:26:0d:cc:4b:83:ff:bc:
92:30:03:df:1d:1e:6a:29:d4:00:48:5b:4c:5d:9d:
b1:cf:55:0a:6a:b4:7c:2f:0a:c4:a6:9f:ca:d9:52:
3c:f5:bf:fa:07:9c:47:56:39:eb:ce:64:56:6e:5f:
c2:40:d7:96:db:c2:93:2a:08:e9:3a:4f:28:92:ff:
98:ea:5c:62:cf:66:1f:7f:2a:3d:03:dd:0e:40:00:
7c:1a:e4:c8:57:45:d8:09:bc:75:b2:f1:69:8f:04:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0B:2F:DB:C8:39:AC:1F:AD:33:69:E8:B1:3A:90:C4:AC:60:CF:18
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/Tgsv28g5rB-tM2nosTqQxKxgzxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:14:f0:9a:ec:f3:ef:ea:0d:44:6c:1f:45:aa:90:ce:8f:5f:
b5:05:94:e6:e7:71:78:d9:18:68:81:e7:13:85:1a:32:e2:71:
d0:b1:8c:f8:dc:d0:e4:c0:78:3c:21:6b:65:40:2a:67:e5:15:
b9:83:26:f0:47:f3:76:b1:81:58:9d:80:1c:c6:1e:30:0c:ee:
27:7c:ff:c7:7c:d6:30:5c:d0:76:60:1b:e4:c4:32:69:f4:89:
ce:fd:3d:71:06:08:d9:78:fa:0c:bf:13:fe:cd:b1:fc:b1:fd:
25:0b:78:59:f1:08:dd:6f:69:32:bf:79:d3:4d:ae:3f:e8:3f:
09:b2:0d:52:35:f0:31:52:de:10:4a:56:0f:44:74:06:b3:f2:
59:68:28:84:37:35:f5:4d:2f:b3:cd:3a:7d:0d:4f:09:c0:71:
d7:b4:24:93:19:6a:e8:09:a8:1d:f7:2a:5d:25:7b:0e:13:90:
8b:53:cd:16:24:0b:f1:ce:d8:81:a3:95:73:9b:a3:0e:da:dd:
ce:5e:0c:a9:5a:b6:5d:85:a8:da:60:6a:8f:32:94:41:80:5e:
61:41:81:26:f0:32:9c:04:44:03:85:c2:dd:79:d5:75:39:5e:
98:29:70:9c:92:a8:b1:5b:10:c9:fc:ef:28:e7:e5:59:d1:9f:
50:44:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:37:46 2025 by rpki-client