Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/04X2qV_4G2XkiQchQ54BmNTiKJg.roa
File: 04X2qV_4G2XkiQchQ54BmNTiKJg.roa (raw, json)
Hash identifier: IIVfQDNO6CaHliSnB9Nt0G3ZI7LA5l3MusXlvtzBcVE=
Subject key identifier: D3:85:F6:A9:5F:F8:1B:65:E4:89:07:21:43:9E:01:98:D4:E2:28:98
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 0194258FA5BE1E92F76151E414A8FAB4FCCC
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/04X2qV_4G2XkiQchQ54BmNTiKJg.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216463
IP address blocks: 2a02:f680::/29 maxlen: 29
2a02:f680::/48 maxlen: 48
2a02:f680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a5:be:1e:92:f7:61:51:e4:14:a8:fa:b4:fc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d385f6a95ff81b65e4890721439e0198d4e22898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:75:15:f3:c4:e3:ff:a6:46:86:1e:31:cb:
c1:49:3e:89:49:9b:e0:e7:6c:2e:fe:19:4a:b0:51:
78:83:22:55:e8:b2:e4:79:cc:87:77:dd:69:26:08:
46:31:c5:d3:e8:4b:79:b3:09:9e:29:89:1d:40:9f:
1f:86:ef:dd:d3:69:12:46:d0:91:83:91:3d:8d:b4:
3b:f6:d8:53:e9:c3:b7:97:63:70:c3:10:74:91:a8:
c4:b4:93:ed:be:71:af:fc:a4:2c:8d:72:4d:87:4b:
22:1b:06:8b:6c:7b:f5:5e:dd:fe:e2:89:dd:ad:d9:
f2:d2:1b:6f:f5:ab:49:67:c9:13:c4:cb:18:45:22:
9f:a9:07:48:76:31:f7:bb:fa:c8:c1:3f:7e:ed:a8:
97:ca:7a:33:13:57:db:e0:a7:9b:98:0b:8b:e3:75:
ae:47:9d:b0:10:c9:41:cd:20:c6:2b:16:6b:9c:db:
7a:e2:0f:48:21:19:41:93:80:70:a1:90:a2:a7:29:
74:cf:fc:f0:b2:14:3a:33:23:df:8a:51:2c:2c:24:
84:d2:f9:c9:38:f4:a9:f9:1c:65:5d:b2:2c:93:90:
16:f3:eb:c5:a3:1f:5c:03:b9:34:01:36:1f:31:a5:
44:58:4d:a1:50:02:c4:4d:bd:ba:28:4b:ce:66:4d:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:F6:A9:5F:F8:1B:65:E4:89:07:21:43:9E:01:98:D4:E2:28:98
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/04X2qV_4G2XkiQchQ54BmNTiKJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f680::/29
Signature Algorithm: sha256WithRSAEncryption
45:bf:a9:93:dc:5f:e7:77:18:f2:28:8a:7f:98:a7:d4:f9:a3:
d6:c0:aa:f6:7d:39:bb:f4:f4:bd:7b:0c:45:25:b1:fd:ea:b7:
b7:3b:85:10:81:a9:fb:4f:0b:be:1b:71:b2:68:fc:34:b1:1f:
07:44:77:26:a0:6d:e8:bc:bc:bc:58:a4:1f:fb:95:13:01:74:
f3:d9:6f:21:27:c2:09:10:bb:b2:fe:dd:37:8a:5d:6d:a9:79:
30:8a:7b:54:f0:e3:b8:31:a1:2f:a1:83:a8:1c:37:46:0c:f6:
40:7f:4d:de:f2:a3:60:6d:7c:59:69:c0:41:d5:40:7b:11:e7:
80:4d:e2:c8:29:32:e7:6f:92:0c:f7:1b:dd:f2:76:34:c3:a9:
ee:df:67:73:1c:c2:ce:df:93:7a:28:57:7a:a9:26:02:dd:fb:
4c:a4:75:3f:6e:9a:2c:95:e7:a7:d6:fb:b0:5c:f0:61:12:ac:
8a:03:d2:00:22:14:f5:2f:0c:89:59:11:d2:44:e5:be:e3:22:
d2:49:a1:cc:91:be:b1:f4:6c:3e:18:93:a8:47:69:09:af:f4:
96:b7:db:d6:2c:10:f4:6b:af:93:46:f1:30:d3:d2:42:f6:98:
34:c0:a4:3a:d6:9c:1d:27:6a:05:a3:c7:ce:f8:50:de:40:4e:
10:71:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:29:13 2025 by rpki-client