Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/qV2vC_jyBCxR7JG-ITtc3lnPquM.roa
File: qV2vC_jyBCxR7JG-ITtc3lnPquM.roa (raw, json)
Hash identifier: nfY26WlcnoZ2XlSrI/f2jjILbIZAIXZ2OaPpL2uR91E=
Subject key identifier: A9:5D:AF:0B:F8:F2:04:2C:51:EC:91:BE:21:3B:5C:DE:59:CF:AA:E3
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 019505B992F94747AC0161FFCF53B3B4CD86
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/qV2vC_jyBCxR7JG-ITtc3lnPquM.roa
Signing time: Fri 14 Feb 2025 18:30:02 +0000
ROA not before: Fri 14 Feb 2025 18:30:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8781
IP address blocks: 2a07:bdc2::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Mar 2025 19:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:05:b9:92:f9:47:47:ac:01:61:ff:cf:53:b3:b4:cd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Feb 14 18:30:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a95daf0bf8f2042c51ec91be213b5cde59cfaae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:0b:8a:32:45:b5:16:89:40:eb:cd:88:47:
fa:65:cf:a9:9d:5c:4b:50:58:4d:2d:06:63:f2:3f:
a2:18:a5:2e:ea:2c:3a:30:05:13:db:d3:e6:38:7c:
30:0c:35:22:da:ee:bf:53:71:72:a6:dc:58:9d:5e:
99:22:6b:05:18:43:62:51:9f:f7:73:c0:2b:c6:11:
7d:43:00:ff:32:c3:b7:4b:a8:34:21:ab:a7:0b:59:
de:37:1a:9b:70:ad:e8:59:4b:e0:83:19:92:c4:86:
f8:ad:e8:91:d1:68:de:96:a8:27:40:67:81:66:a0:
f3:a7:6d:5d:08:9e:69:69:0c:02:04:b9:c8:57:52:
87:37:b7:f1:38:5f:e4:b5:2b:dd:80:84:11:e3:fa:
95:ee:38:55:de:9a:55:b4:da:d4:76:20:c4:5c:a2:
7f:45:97:05:6b:06:24:56:9c:83:01:da:8f:9b:f7:
0d:f8:00:65:3f:cb:2e:7b:15:27:31:36:43:5f:73:
96:54:a1:e0:31:4f:7b:f4:8c:99:c4:74:82:f1:d3:
b4:10:7b:dc:21:4e:a5:41:4f:b7:2c:de:b2:67:3d:
52:30:f6:08:60:d9:8b:70:57:65:52:b3:49:4a:d5:
4e:e0:1e:50:50:c5:5f:5c:30:a3:eb:e3:99:5b:8f:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:AF:0B:F8:F2:04:2C:51:EC:91:BE:21:3B:5C:DE:59:CF:AA:E3
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/qV2vC_jyBCxR7JG-ITtc3lnPquM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:bdc2::/32
Signature Algorithm: sha256WithRSAEncryption
2e:7e:88:bc:39:f3:64:8e:8d:c7:38:a7:1b:6e:dd:43:0d:88:
d6:7c:7a:6b:a7:3e:cc:fa:3f:f3:3b:92:41:fc:fc:1b:49:b9:
00:f7:10:e5:c5:28:4a:d6:52:68:4c:cd:c8:bf:22:f2:a3:21:
e2:61:28:d4:60:96:71:e9:47:6a:49:a9:e8:e7:bb:e0:de:01:
d6:bc:2f:d0:9a:c3:1c:6b:3f:34:d8:44:ca:40:48:bd:b6:0e:
ac:45:72:20:dc:24:8f:bb:f8:dc:bf:57:ce:a7:0c:b0:7c:7c:
5d:8f:6b:28:f3:ac:20:c7:86:b3:9e:e9:ef:91:78:c9:bd:f9:
5e:ad:a4:05:16:6d:b5:4d:b7:4f:6e:78:38:f0:f1:8e:ae:57:
f9:82:c0:e5:e8:b3:33:00:97:21:f4:64:f4:82:a8:6f:46:6c:
29:5d:b1:e5:44:d3:bb:1e:44:47:71:be:8b:15:5d:38:94:60:
47:c3:24:c9:88:d0:e6:f9:15:5e:3b:7b:7b:44:61:fb:28:0a:
be:85:a9:06:36:93:a9:77:55:59:80:ab:96:ef:90:99:1f:da:
24:29:71:e5:c2:ae:eb:bb:3c:e2:2a:46:e1:94:67:f8:fa:08:
e9:e4:45:3e:f6:c7:3f:11:41:3f:e8:69:0e:5a:0c:1f:fc:b5:
aa:45:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:56:13 2025 by rpki-client