Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wHKpwxmV-CCos66rspA5U0TCWcs.roa
File: wHKpwxmV-CCos66rspA5U0TCWcs.roa (raw, json)
Hash identifier: UYKmTngZCWslTiykLqYvPQdveKYXZX2hLBDWFvqWrNk=
Subject key identifier: C0:72:A9:C3:19:95:F8:20:A8:B3:AE:AB:B2:90:39:53:44:C2:59:CB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195684E5A17D2287FDB344B24F6A82A525B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wHKpwxmV-CCos66rspA5U0TCWcs.roa
Signing time: Wed 05 Mar 2025 21:55:19 +0000
ROA not before: Wed 05 Mar 2025 21:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205745
IP address blocks: 2a13:b4c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 22 Mar 2025 18:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:68:4e:5a:17:d2:28:7f:db:34:4b:24:f6:a8:2a:52:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 5 21:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c072a9c31995f820a8b3aeabb290395344c259cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:33:35:4a:dd:80:1b:17:07:3b:f5:dd:fc:
01:2c:7e:e8:5a:74:60:04:17:07:4c:a7:87:95:50:
f2:4d:d5:35:4f:74:5a:8b:b6:fd:51:12:5f:54:c0:
0f:ac:0b:7a:23:1e:ae:6b:b3:97:58:2e:86:26:ca:
f3:35:de:88:fb:c7:1c:63:7f:60:e7:54:42:7b:c3:
5d:64:00:5f:b4:51:2c:4a:0c:3e:47:97:ef:46:f2:
76:e3:e6:c4:da:a4:b5:ef:b2:2d:a2:84:b6:2b:3e:
af:39:3e:b8:b8:10:05:d0:d6:23:a6:b8:cb:70:fc:
a6:3e:d4:f0:c3:8b:b8:59:cd:77:e7:14:b6:b5:84:
12:cb:8e:fc:22:8d:ad:59:ea:bb:9d:c9:f8:fe:c3:
0c:0c:55:f4:ae:3d:55:bf:d1:39:50:13:76:ac:d3:
e9:e1:9d:09:f9:2b:51:15:dc:a9:32:85:51:27:04:
3a:b0:47:2f:c8:dd:28:b0:6c:66:99:7e:ac:98:25:
86:ba:de:e4:2b:b8:3b:7b:c4:b0:fe:f2:d4:f9:7e:
77:79:87:ef:67:89:87:fd:31:62:8c:95:5f:5b:35:
fa:af:47:5b:4d:49:b1:3c:58:cc:5f:01:5d:81:81:
c7:62:ae:a0:51:09:81:e2:84:a2:97:dd:9b:31:0e:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:A9:C3:19:95:F8:20:A8:B3:AE:AB:B2:90:39:53:44:C2:59:CB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wHKpwxmV-CCos66rspA5U0TCWcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b4c0::/29
Signature Algorithm: sha256WithRSAEncryption
cc:0e:2b:02:3c:21:e2:82:9e:c8:0d:24:84:97:09:ab:66:75:
fc:0e:df:cc:10:ef:0d:2b:5a:70:bc:5f:27:dd:47:0c:94:73:
8c:74:dd:97:76:99:14:69:f5:0f:2b:50:e9:e6:d4:b2:8c:ee:
39:26:4a:d9:a3:fc:23:17:f3:c6:b0:dd:fe:94:39:30:dc:39:
eb:97:67:0b:5b:24:1c:32:2f:05:7d:17:f3:46:fb:5b:fb:1f:
61:85:cd:11:62:d2:12:c9:0c:35:11:1e:be:12:c4:e2:48:22:
11:59:1e:ea:cb:76:53:58:f3:9a:df:63:e9:9e:81:97:12:3d:
2a:78:f5:b1:31:d1:a3:9c:b5:2a:f2:94:42:7f:8d:43:41:3b:
09:10:6b:d5:1c:86:a9:6f:b4:47:a2:14:d4:24:16:23:2e:6c:
75:a0:6e:9b:22:90:3c:e9:59:59:bc:d2:ff:ee:6c:dd:c2:99:
60:61:bc:c4:70:f0:28:23:0e:26:f6:ea:a5:52:55:57:42:74:
93:3b:d8:a7:04:6e:c6:d2:34:40:5e:d4:41:f2:67:ed:c1:ce:
db:c8:51:0b:1f:16:1b:c6:92:fb:26:2e:19:df:ce:2e:f5:a9:
9f:c9:6a:13:93:74:c8:de:e0:75:67:19:4c:d6:d4:0e:67:d5:
9e:a7:9e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:40:27 2025 by rpki-client