Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/Kfeb17KbAT0l5mo7meGb3iPyC38.roa
File: Kfeb17KbAT0l5mo7meGb3iPyC38.roa (raw, json)
Hash identifier: IhJ5Mh9xTKQQQ9fKzq4yr/jbeiRcrk/txsllen+GoMA=
Subject key identifier: 29:F7:9B:D7:B2:9B:01:3D:25:E6:6A:3B:99:E1:9B:DE:23:F2:0B:7F
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 01941FFA2CE4C70B4F6876F36C21355BB7D8
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/Kfeb17KbAT0l5mo7meGb3iPyC38.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57324
IP address blocks: 2a12:100::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 12 Mar 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2c:e4:c7:0b:4f:68:76:f3:6c:21:35:5b:b7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29f79bd7b29b013d25e66a3b99e19bde23f20b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:99:01:9c:9a:c9:33:92:dc:77:f8:c0:50:
31:c1:09:f5:38:d8:bc:cc:d5:c5:5a:85:27:5d:35:
40:31:18:46:84:59:50:d4:67:fe:37:72:ec:01:10:
07:c0:90:44:07:49:92:a2:dd:b1:56:52:09:62:24:
22:99:ac:f0:7a:64:04:a9:91:82:3f:6f:78:c8:6c:
14:e2:0c:f9:06:e4:33:c6:30:5b:76:7d:0d:64:4e:
9a:6d:90:b9:92:1d:62:ab:a8:14:43:ba:da:4d:45:
0b:80:93:16:fd:e1:e1:ba:64:c3:12:2d:e6:6e:ad:
13:ca:8d:5d:ea:d1:3d:91:9c:ea:a2:80:94:1a:50:
06:ee:7a:e9:08:d7:86:e6:fa:e6:4b:84:31:04:d6:
b2:a6:01:55:88:ad:65:1d:8f:00:e0:fa:80:11:b2:
ff:6b:43:0d:20:ee:b1:ec:36:b3:d2:9f:70:90:34:
18:50:24:a3:f0:2b:7c:1c:55:b5:b1:56:f1:7a:e6:
31:b5:61:18:be:c7:e9:ee:c4:13:13:16:35:37:da:
e8:5e:f1:02:22:0f:2c:13:a6:2a:0d:6d:36:0f:a0:
98:5e:6d:c3:3f:39:21:b4:6b:b0:2f:38:ea:c0:08:
1f:33:bb:72:ed:1e:17:2b:20:37:47:14:19:59:b4:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:9B:D7:B2:9B:01:3D:25:E6:6A:3B:99:E1:9B:DE:23:F2:0B:7F
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/Kfeb17KbAT0l5mo7meGb3iPyC38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:100::/29
Signature Algorithm: sha256WithRSAEncryption
2f:a1:5b:9e:66:cc:a3:fd:14:5e:0d:6a:02:b4:c9:20:82:d9:
b5:91:54:68:41:6a:1c:41:c4:4c:68:7f:46:e7:ac:5d:11:e0:
d5:f3:00:20:fe:b1:0f:27:a6:92:97:c2:da:ce:ce:50:08:e4:
de:06:31:cb:a5:6c:1d:c7:02:ff:03:4b:4b:1b:3d:ce:11:93:
1f:a1:39:6c:04:9a:f8:c4:2d:7f:3b:76:13:d1:a3:b4:e2:ab:
01:9f:da:99:b5:7e:36:e4:aa:93:f6:86:f5:e4:83:cf:95:24:
4d:d1:e9:4f:a5:37:45:09:0b:04:91:78:c5:69:d9:2b:19:4e:
d0:a1:97:88:4a:cf:c0:24:e4:47:5f:13:99:14:69:55:a8:f8:
6c:7f:b3:bf:98:a6:1a:4f:fb:5a:f8:f5:63:33:cd:2b:a8:bf:
bf:f4:24:e5:9c:39:a0:09:8c:3b:17:3d:a0:88:df:b3:96:e6:
9d:74:76:d5:aa:e9:20:ec:c1:c0:07:aa:84:a6:0c:ba:48:09:
65:58:4d:a3:a1:09:ef:13:d0:f5:51:f2:c7:ee:ea:86:a1:5d:
0d:b5:49:07:6e:62:5e:78:46:32:0a:2a:09:ab:b1:8b:50:e5:
ce:b5:f6:91:14:c7:b0:50:e3:a6:23:c4:02:10:15:71:93:c7:
8d:af:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:04:11 2025 by rpki-client