Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/TEFQMgtHg9RTsWRseBt7myl4HEk.roa
File: TEFQMgtHg9RTsWRseBt7myl4HEk.roa (raw, json)
Hash identifier: 1yDGpkosbmf5mEdihtO5P1uqNBE94zUImbLE+IxULoo=
Subject key identifier: 4C:41:50:32:0B:47:83:D4:53:B1:64:6C:78:1B:7B:9B:29:78:1C:49
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 0195C96CDE4081FE74A642FF876A7CA8001D
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/TEFQMgtHg9RTsWRseBt7myl4HEk.roa
Signing time: Mon 24 Mar 2025 18:31:49 +0000
ROA not before: Mon 24 Mar 2025 18:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 2a12:3b43::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Apr 2025 20:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:6c:de:40:81:fe:74:a6:42:ff:87:6a:7c:a8:00:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: Mar 24 18:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c4150320b4783d453b1646c781b7b9b29781c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:57:a2:ae:22:6d:67:1d:c5:03:62:27:00:
e8:9a:96:c5:d5:d1:0d:8e:27:99:76:18:77:a3:38:
46:b0:1f:f5:15:53:a1:09:6f:b0:e5:4b:d1:53:e2:
82:ce:0c:65:ce:5d:b8:74:5e:ba:ac:5d:28:96:a0:
ec:f4:11:14:81:59:a1:3a:34:7c:ff:12:00:89:70:
2c:1a:43:f7:f2:cf:46:e1:6b:fa:f3:97:a3:3e:81:
b0:af:71:03:3d:db:2d:54:54:4e:db:14:9d:0d:fd:
59:57:d1:44:dd:2c:79:55:11:42:21:cf:b0:13:da:
cb:e1:75:89:09:6b:16:bb:18:eb:18:93:63:3e:fe:
ee:31:75:58:cc:42:8c:c8:a7:55:cc:a7:af:8c:d2:
2b:29:ef:38:e8:3e:ed:64:52:62:e5:32:6d:a2:b0:
3a:82:c5:a4:47:e8:fa:80:c5:fc:36:4a:7f:c6:c8:
7d:34:87:fd:5e:54:52:59:e9:1e:dc:d5:5e:f2:ef:
8b:76:4c:c3:06:01:a5:e8:7b:19:a1:07:47:55:2c:
59:5d:f4:66:11:8c:08:6f:9d:f1:b6:8f:22:1d:6f:
8c:5b:e0:ca:81:56:7e:27:80:07:69:94:41:3d:fd:
82:c5:8a:60:70:ce:2b:6e:0e:fc:40:f7:8d:7a:52:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:50:32:0B:47:83:D4:53:B1:64:6C:78:1B:7B:9B:29:78:1C:49
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/TEFQMgtHg9RTsWRseBt7myl4HEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3b43::/32
Signature Algorithm: sha256WithRSAEncryption
52:06:a4:5c:48:1c:02:19:94:bf:4d:26:3b:9f:75:7b:38:b9:
f9:2e:2c:95:3a:98:d6:3c:6c:b1:db:2c:c7:56:dd:ff:e9:6d:
38:36:e0:02:48:39:2b:c5:e1:90:52:31:2a:88:dd:4b:79:9b:
33:11:e8:96:82:78:e3:3c:ee:c9:8c:a6:86:fd:65:ea:e2:bd:
13:71:30:d3:8c:71:00:f8:c6:16:8c:36:4c:dc:4b:68:52:fb:
f7:d6:e3:ef:42:45:e9:a1:73:cd:d7:da:72:17:a3:3c:f8:12:
82:96:6a:b0:9e:fc:39:c2:2d:85:02:68:29:fd:d3:20:3c:3c:
86:d5:6d:80:26:1a:c2:d6:de:9e:8a:ee:83:64:25:75:1a:11:
39:cc:12:db:e5:01:03:09:c0:84:9b:12:0c:c0:9e:2c:95:f6:
1f:b2:8c:2a:85:57:32:4d:60:ed:a4:a4:f4:88:be:f2:67:29:
fd:3e:3d:21:cd:3f:35:11:f8:d6:d3:4f:89:a0:63:12:17:ba:
77:73:20:66:20:3c:99:e5:b3:ce:be:9f:ed:03:6f:ec:97:97:
e6:e6:3d:68:dc:8e:b3:55:4e:3f:a9:1b:72:b2:b4:12:6f:aa:
7e:52:18:17:ab:4d:34:a7:7c:60:64:c7:08:f6:66:e6:c5:bf:
ef:ac:3d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:33 2025 by rpki-client