Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/id09orIp1SaFehqaqq3Ek736VPk.roa
File: id09orIp1SaFehqaqq3Ek736VPk.roa (raw, json)
Hash identifier: NLF/2rSQVWYiLSyN4Y8wKunoNN+nuIsAwAH3IQpO20U=
Subject key identifier: 89:DD:3D:A2:B2:29:D5:26:85:7A:1A:9A:AA:AD:C4:93:BD:FA:54:F9
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 0194266B78B065E7A13391503F8379EC3C0B
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/id09orIp1SaFehqaqq3Ek736VPk.roa
Signing time: Thu 02 Jan 2025 09:49:24 +0000
ROA not before: Thu 02 Jan 2025 09:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197445
IP address blocks: 2001:3800::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 07:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:78:b0:65:e7:a1:33:91:50:3f:83:79:ec:3c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Jan 2 09:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89dd3da2b229d526857a1a9aaaadc493bdfa54f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:5b:34:77:43:05:38:25:31:2d:eb:db:f9:
6f:8b:74:0a:47:2e:c0:1c:59:e9:c2:f0:23:93:be:
f5:65:6a:aa:e1:df:ce:9e:e0:f0:ee:ce:29:d2:13:
7e:ff:42:d9:d8:56:77:ef:1e:79:64:9a:7c:dc:49:
34:d5:8e:eb:65:69:0f:45:9f:47:b3:60:60:64:ab:
4b:50:4c:62:a2:a5:93:e0:67:46:0f:32:5a:df:a1:
80:86:f7:6e:88:cc:1d:fb:e3:df:27:bc:06:f1:7b:
f1:cc:d4:49:e0:de:75:8b:1e:64:ee:bc:73:5d:7b:
14:ac:c9:7d:09:18:e5:61:12:12:09:13:53:83:19:
ab:03:f3:fa:2f:96:fd:1c:25:4b:1c:4b:ea:fc:bd:
ff:90:d4:1e:f9:ff:92:17:18:47:65:ad:9a:67:de:
b3:7a:69:30:e7:5b:0c:fb:43:18:fa:c3:06:89:1a:
e7:c9:82:21:d4:85:e2:95:d8:9d:d0:c2:d8:95:e7:
fc:3d:d6:cf:70:57:47:13:17:85:b1:ff:dc:8c:f0:
30:c8:e8:24:c7:e1:b3:54:80:21:39:f4:81:2a:a5:
f6:77:8d:6c:21:7c:f9:22:58:3a:2b:f7:e6:f3:d9:
96:63:6b:43:c3:2c:87:8d:90:e1:6f:de:37:3b:bc:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DD:3D:A2:B2:29:D5:26:85:7A:1A:9A:AA:AD:C4:93:BD:FA:54:F9
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/id09orIp1SaFehqaqq3Ek736VPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3800::/29
Signature Algorithm: sha256WithRSAEncryption
c1:15:b0:09:1d:a9:18:c7:ce:04:57:5d:a2:65:bd:a7:6b:85:
81:35:7d:40:12:29:11:97:bb:84:a6:4a:43:ea:40:a7:20:e7:
ba:11:a3:67:ca:28:1f:40:a8:a7:1b:88:21:97:ba:b1:78:e7:
11:4b:2e:e4:e1:81:ba:39:e9:00:55:35:73:a0:35:eb:98:e0:
15:43:d2:66:00:5d:c4:64:c8:b1:fe:32:93:48:e4:cb:6a:75:
69:2b:a4:92:7d:28:89:dd:25:aa:67:ed:0d:1c:2f:b9:d8:42:
e8:76:4f:dd:b4:04:01:90:2b:2b:13:b6:b0:e8:6f:21:65:73:
b4:8c:ce:96:d8:48:0d:d8:ff:31:30:dd:75:57:ec:2e:60:2e:
bc:da:d5:bb:7e:c8:8e:9f:61:3d:f5:79:fc:12:28:11:6f:55:
cd:a8:f9:44:aa:eb:02:b1:66:b9:67:57:98:39:b8:e2:c9:26:
cf:d6:ad:23:63:e5:06:2e:56:c0:69:5a:b7:30:bf:14:eb:46:
b8:a4:72:d2:18:b0:38:4c:f8:00:a1:60:c0:a7:1b:e3:6a:50:
4e:93:27:6f:a4:e9:39:6b:74:7c:08:27:db:f4:db:d6:bf:f2:
77:22:b0:e8:ce:eb:fa:82:54:b9:95:fe:8f:49:6a:d3:29:e8:
76:04:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:53:18 2025 by rpki-client