Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/rYHeTpZ45qYpNlcihkyZ7XjgHoc.roa
File: rYHeTpZ45qYpNlcihkyZ7XjgHoc.roa (raw, json)
Hash identifier: wln//pq9Y+OhhCrB0LmWnsrOko8Y2aJlI3M8ZXQj7gQ=
Subject key identifier: AD:81:DE:4E:96:78:E6:A6:29:36:57:22:86:4C:99:ED:78:E0:1E:87
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01942825FAB0E5587C3CFD1E1A19473D796F
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/rYHeTpZ45qYpNlcihkyZ7XjgHoc.roa
Signing time: Thu 02 Jan 2025 17:52:45 +0000
ROA not before: Thu 02 Jan 2025 17:52:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214342
IP address blocks: 2a09:be87::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Jan 2025 10:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:fa:b0:e5:58:7c:3c:fd:1e:1a:19:47:3d:79:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 2 17:52:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad81de4e9678e6a629365722864c99ed78e01e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:e8:c3:0d:20:39:20:a9:98:b0:87:9c:54:
eb:9d:64:17:dc:25:a6:07:35:41:bf:c8:f1:36:be:
24:1f:c7:f3:3e:51:5d:38:bf:22:26:ef:6c:11:12:
59:65:98:3e:4d:f6:91:41:bc:3b:00:bd:88:f1:15:
54:f3:b1:d8:47:9a:5d:e3:1f:77:cc:24:16:b7:9c:
cd:4a:1d:a5:01:a5:71:17:0b:75:45:42:c0:7c:69:
96:4f:20:0e:4d:68:1c:a1:9c:c8:9c:00:7b:8f:18:
fb:d5:b6:e1:2b:35:db:a3:b9:df:3a:d9:f1:8f:d1:
a3:4b:42:68:76:3f:ef:b9:04:be:c3:52:b4:53:dd:
f9:fd:d2:b4:16:31:fd:6f:50:2d:4c:a0:2f:0b:23:
fb:be:00:60:1c:78:63:c8:0d:54:cb:7f:05:e7:53:
23:9c:e0:c8:ba:71:dc:74:ee:e5:7f:ec:6a:9a:97:
44:2f:f5:20:21:cd:79:1c:e1:a1:15:9b:af:56:45:
46:c8:f3:aa:96:2f:41:ec:f1:00:6f:61:cd:6e:bc:
16:f8:f9:20:5c:aa:40:d5:0c:eb:6f:fe:a8:b9:29:
32:c9:0e:25:7a:5b:c9:83:72:d2:4e:c6:6c:51:4c:
29:d0:3e:77:b9:b2:b7:3c:3d:f1:3d:e2:55:c7:01:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:81:DE:4E:96:78:E6:A6:29:36:57:22:86:4C:99:ED:78:E0:1E:87
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/rYHeTpZ45qYpNlcihkyZ7XjgHoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be87::/32
Signature Algorithm: sha256WithRSAEncryption
34:91:7b:5f:59:fb:4e:65:12:30:01:05:98:ec:89:38:5c:47:
4d:cb:6b:8e:8b:34:fc:43:1f:81:a2:02:c9:88:03:68:62:38:
94:55:c4:c3:92:a9:45:2c:fd:04:31:86:5d:dc:82:44:ce:c2:
64:9c:c5:d5:22:9f:e9:fb:24:0f:6d:f1:15:bd:a0:e8:a1:a1:
dc:c5:0f:fb:17:d0:3f:90:0a:d0:74:5a:97:0f:d7:2a:c8:1c:
99:0c:fe:a3:89:04:00:0f:47:c6:04:f4:1d:7a:e6:b8:42:0a:
e5:24:62:92:61:d6:cd:ac:da:50:2a:27:60:88:3d:4a:1c:8d:
61:f1:b3:4c:38:10:59:9c:a1:82:ad:cb:2a:0e:b6:62:57:46:
37:a1:d6:e7:42:80:da:6f:fc:70:78:cc:7e:42:14:c7:6d:cd:
02:f7:15:24:db:38:e8:3c:f6:d1:1c:ca:91:dd:8c:61:eb:a3:
c7:f8:83:64:db:f8:33:b0:e1:d7:15:03:04:b3:7e:26:18:3a:
5e:ac:90:87:1f:05:8e:f3:a5:cb:a5:d6:b1:4f:94:3e:71:8d:
11:57:9b:dc:fb:88:72:33:2b:c1:4d:88:d6:3b:3e:ba:31:d8:
b6:9a:e0:8a:8a:6b:78:bf:b8:ce:8b:4c:25:98:49:cd:75:5c:
64:d2:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:44:34 2025 by rpki-client