Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/bDTHVjItPEUGSj0loex-ijvTWDU.roa
File: bDTHVjItPEUGSj0loex-ijvTWDU.roa (raw, json)
Hash identifier: SqtBR9XPpd4px+kegMERAH+AMWpE1ok+ed5X4A1A4H4=
Subject key identifier: 6C:34:C7:56:32:2D:3C:45:06:4A:3D:25:A1:EC:7E:8A:3B:D3:58:35
Certificate issuer: /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial: 0196FC3FB176D446965800ED81F82359CDCA
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/bDTHVjItPEUGSj0loex-ijvTWDU.roa
Signing time: Fri 23 May 2025 08:25:54 +0000
ROA not before: Fri 23 May 2025 08:25:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214917
IP address blocks: 2a12:ff00::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 May 2025 09:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:3f:b1:76:d4:46:96:58:00:ed:81:f8:23:59:cd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
Validity
Not Before: May 23 08:25:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c34c756322d3c45064a3d25a1ec7e8a3bd35835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:00:6f:3d:b4:48:31:b6:4f:72:ae:d0:bb:
f4:4d:02:e9:81:63:26:ec:42:c4:0a:af:6e:ed:c8:
57:4a:82:ad:ba:51:13:7b:d6:74:46:41:90:32:1f:
f4:51:a9:1c:f4:e3:52:a1:3c:f8:40:79:f7:75:3d:
bf:e1:b8:17:00:a9:8f:c6:2c:5d:6f:14:88:1e:7c:
22:55:d2:20:0f:7b:67:3f:38:a6:cd:81:03:71:8d:
36:e8:4a:99:f2:ab:54:0d:40:0e:7e:f8:ec:65:27:
ec:67:49:df:06:ca:86:3b:95:03:d2:18:f1:aa:20:
6b:61:11:f2:e3:c4:18:4c:2f:af:aa:42:e2:72:15:
70:73:7e:e2:c3:de:73:40:16:20:37:8c:dd:01:b8:
77:00:ca:2b:45:86:4e:e0:dc:1c:0a:66:cc:33:46:
41:70:06:e3:12:cc:5e:c9:10:ba:a4:3a:54:2e:1a:
b7:da:e1:04:2c:41:0b:d0:13:e7:3f:7a:a0:7f:da:
3c:d8:45:de:0a:f5:66:e9:4e:d4:69:6a:03:33:e8:
9d:ea:e2:53:a0:d9:60:7b:98:3b:a0:a2:f2:4e:f4:
d9:5b:7c:47:dc:08:20:70:f2:cf:e5:c9:81:9e:3b:
03:07:b0:b3:82:f1:4c:da:b5:a4:79:c0:cf:dc:94:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:C7:56:32:2D:3C:45:06:4A:3D:25:A1:EC:7E:8A:3B:D3:58:35
X509v3 Authority Key Identifier:
keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/bDTHVjItPEUGSj0loex-ijvTWDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
be:12:ab:b7:73:97:ca:c7:93:16:d9:96:bf:f6:15:e6:73:3e:
08:12:cd:a5:1c:15:42:1b:30:50:6d:3e:5f:df:2d:a8:a9:2c:
21:94:5e:7a:3f:2e:9d:11:f6:3f:5d:3d:6a:df:a7:2a:6e:07:
fd:a1:23:23:89:65:75:91:6a:1b:19:1b:bd:15:70:e3:85:24:
48:c7:5b:f8:46:74:f2:73:87:40:2c:6f:92:5d:ec:cf:58:11:
56:cf:e3:0a:f0:3f:be:11:60:ea:08:3c:fe:78:ad:7b:a4:43:
98:91:b4:d7:c1:5c:1d:13:a6:6f:6d:16:0c:91:73:42:d0:be:
84:3b:db:f4:b3:9e:58:51:da:07:e9:54:cd:d6:de:81:52:07:
30:aa:a5:37:e0:0f:1a:8b:4c:b7:75:9b:c3:72:dc:d4:e2:52:
16:ff:46:68:53:88:8a:b9:79:d8:fe:70:d7:c7:c1:43:8f:87:
0a:4d:02:c9:1a:21:9b:3c:02:27:5f:33:cb:1b:2d:1c:99:16:
da:b6:b7:34:c2:67:15:14:7e:81:e9:d1:38:68:53:bd:a3:d2:
06:c6:0c:8a:9e:41:1d:71:0f:f6:50:08:aa:ba:e6:72:c8:22:
48:d4:fa:a9:fd:d3:10:79:57:8c:29:5c:44:64:1c:5b:d3:e3:
e7:ad:0e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:34 2025 by rpki-client