Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Sp9ps6OIo0frI4tRAxMU6LsRA2E.roa
File: Sp9ps6OIo0frI4tRAxMU6LsRA2E.roa (raw, json)
Hash identifier: PqlAm+imkhKsbBBQmEU3gStebd0zz75ZtV6qlWRNA9s=
Subject key identifier: 4A:9F:69:B3:A3:88:A3:47:EB:23:8B:51:03:13:14:E8:BB:11:03:61
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA88E65227F6ED7CFD4CD395E8DAB9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Sp9ps6OIo0frI4tRAxMU6LsRA2E.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206368
IP address blocks: 2a0c:b641:710::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Mar 2025 11:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:88:e6:52:27:f6:ed:7c:fd:4c:d3:95:e8:da:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a9f69b3a388a347eb238b51031314e8bb110361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:58:64:47:0c:cd:14:81:c7:55:66:f4:d2:
52:91:7d:a5:14:2f:9e:08:cc:88:54:19:ef:52:d5:
75:c3:81:35:13:4d:da:54:95:5f:d6:e7:1a:09:e1:
df:21:0a:50:b2:26:2d:5c:d6:17:5f:23:cf:8c:9d:
64:cd:6f:51:7c:15:67:c7:5d:aa:a0:ea:2e:d3:d4:
d7:54:ed:24:4f:a8:d4:0c:a8:b3:6d:79:8a:7a:25:
1f:66:77:e1:0a:25:4c:57:f3:b3:4e:1d:3d:fd:90:
06:22:aa:50:de:12:ed:38:56:98:2c:e2:c4:bf:77:
7d:cc:f2:69:21:d5:24:ec:4e:9b:a3:71:c5:de:0f:
4c:82:1d:c9:ca:a1:8d:b2:f9:05:65:20:39:a0:87:
ae:ff:0c:46:3c:5a:2b:d4:91:7b:e9:62:77:13:75:
18:da:fc:5e:52:8a:88:be:4d:e7:0d:21:51:c9:55:
ae:6c:aa:b7:84:6f:27:b3:ee:b8:57:28:f9:80:f2:
46:49:95:c9:40:58:a8:b8:b9:ed:82:db:60:2e:43:
d0:3a:cc:e4:a1:af:cf:8b:3b:37:b4:0c:7f:57:6f:
49:7a:86:ab:df:52:4a:0d:6b:f1:cf:6c:ab:e4:db:
c4:a6:1c:ae:1d:5e:6c:15:80:65:c7:0f:aa:c6:46:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:69:B3:A3:88:A3:47:EB:23:8B:51:03:13:14:E8:BB:11:03:61
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Sp9ps6OIo0frI4tRAxMU6LsRA2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:710::/44
Signature Algorithm: sha256WithRSAEncryption
21:7b:3d:73:33:b3:81:ea:d8:94:0c:6b:e2:75:59:c7:df:0e:
33:bf:4b:96:83:66:a4:c0:71:c5:ff:26:04:6f:b8:81:74:2a:
c9:65:fb:da:dc:a6:85:64:e0:a3:e7:20:39:ce:1b:d1:e9:22:
43:18:1c:89:d3:08:7c:de:ad:1f:b8:11:b1:6e:2c:55:8e:85:
38:2d:74:e2:7f:fc:1f:26:35:3e:3f:f2:87:f8:29:54:2a:24:
e3:84:2b:83:ed:5e:db:35:e1:ae:3d:c7:44:c1:68:b3:f6:a8:
65:74:27:e9:8d:39:fb:4b:8d:af:a5:a0:c6:0c:3c:4c:91:97:
48:a0:38:56:d0:80:3d:5a:1b:6a:ac:5a:ed:70:67:33:37:c1:
42:02:4d:ea:c8:59:b2:f0:30:3b:16:60:94:84:57:55:41:92:
45:21:30:7b:80:4c:ce:6b:b5:7c:d0:49:7d:c3:a7:0e:dd:a1:
8b:af:af:22:69:5d:97:5e:47:ac:9e:e4:24:39:01:3b:3d:44:
62:ae:d2:0f:53:eb:d2:68:08:86:c2:a4:5f:f1:12:f0:a7:f6:
31:bf:69:8c:57:71:51:bd:c2:f7:7d:c2:4d:ae:73:7e:df:e0:
2d:e8:a7:63:ce:84:2f:49:6c:44:5a:46:ea:15:08:c4:ea:e7:
10:2b:7d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:31 2025 by rpki-client