Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xV9F0teiuT5q3ZFGfg-c-TTsTPE.roa
File: xV9F0teiuT5q3ZFGfg-c-TTsTPE.roa (raw, json)
Hash identifier: GeVIomXuCJmGVbersWo+Gh6zYh5P+Ttzz8kJH6YoNww=
Subject key identifier: C5:5F:45:D2:D7:A2:B9:3E:6A:DD:91:46:7E:0F:9C:F9:34:EC:4C:F1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0194B886266834AF1E85AD1B5DE1CA213E00
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xV9F0teiuT5q3ZFGfg-c-TTsTPE.roa
Signing time: Thu 30 Jan 2025 18:43:06 +0000
ROA not before: Thu 30 Jan 2025 18:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a0b:ac00::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 15 Mar 2025 17:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b8:86:26:68:34:af:1e:85:ad:1b:5d:e1:ca:21:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 30 18:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c55f45d2d7a2b93e6add91467e0f9cf934ec4cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:4f:cd:20:8c:b7:a5:4d:47:8f:11:a7:84:
ae:a3:6f:41:3c:6a:a9:f4:73:44:e5:56:4f:8b:a5:
4b:65:d0:9b:b3:76:dc:5a:1f:ab:68:c9:5b:8f:ee:
a8:6c:e3:19:f9:d8:19:7e:c5:56:30:5f:e8:ef:f2:
b9:69:ab:e4:c7:ae:bf:57:0a:b4:e3:4b:d5:10:12:
af:b2:e4:40:cb:ed:aa:d2:64:ca:ef:70:d5:4e:35:
2d:95:a6:5d:79:2c:d3:7e:27:16:33:11:11:33:fa:
ee:1d:1b:97:19:0d:51:46:99:7d:19:12:a1:56:95:
75:89:dc:21:9a:0e:3d:1a:d5:3d:f6:da:06:8b:36:
ef:f1:b2:f4:30:88:81:8c:ab:e3:98:1a:e9:91:ef:
fc:77:59:82:f1:d8:11:52:c4:f3:f3:11:38:47:fd:
d5:d5:cc:20:0f:d4:59:f2:e8:13:63:5f:3a:ea:f2:
2f:d8:c1:1d:63:aa:97:81:2b:8b:02:ac:54:d0:94:
15:13:4d:bd:9a:82:d4:82:09:87:78:43:06:61:43:
26:b3:18:69:f9:18:70:82:f7:54:5e:1c:cd:a9:74:
59:d0:8d:db:18:a4:50:c6:13:a3:eb:ca:10:5b:4a:
bc:de:22:48:c4:11:cf:35:f3:93:6e:5c:50:6c:54:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:45:D2:D7:A2:B9:3E:6A:DD:91:46:7E:0F:9C:F9:34:EC:4C:F1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xV9F0teiuT5q3ZFGfg-c-TTsTPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
0a:19:a7:fd:e4:07:93:7f:c6:38:61:ee:55:ef:74:83:6a:af:
1f:7d:67:ec:65:d6:0a:d6:54:00:5f:fa:db:fc:30:83:ef:8c:
a4:33:a8:ab:ec:12:6a:a7:c2:e3:81:ac:82:42:19:5a:9a:aa:
53:8e:cd:3f:e7:ae:f4:b5:c4:a0:2d:4c:c4:3b:e6:ee:ca:3a:
5a:f4:60:68:ae:d2:61:17:a9:00:c3:c7:f2:8f:9e:7c:be:b4:
f1:82:61:0e:ba:84:89:f7:25:4b:25:36:0a:80:38:71:67:93:
db:2b:f5:27:7a:ec:25:cc:52:7e:94:8a:13:d1:4d:0a:2f:21:
41:d8:9c:4a:f7:bf:fb:7c:ba:b9:d1:b4:27:27:64:be:d4:34:
90:cf:8a:fb:59:2d:8d:6f:f3:5e:41:e5:8c:e5:12:9d:55:70:
2a:19:13:01:2d:c5:a2:8d:d9:da:42:ba:ae:77:98:e4:2e:28:
57:3f:a9:29:50:41:27:1b:25:d0:c5:e7:51:90:39:ed:5b:cd:
0e:ae:34:ae:2a:d5:0d:86:63:07:c0:5b:cf:06:5f:10:ac:c1:
07:ab:e9:27:fc:38:90:fb:62:59:03:43:5c:07:8c:ea:fb:52:
3a:e3:10:b1:7a:3e:af:0b:34:cc:9f:40:a0:0a:f4:bf:b1:0f:
e1:72:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:07:31 2025 by rpki-client