Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/u7Z0FGVgvtNtWRcvR-H13L8BpuQ.roa
File: u7Z0FGVgvtNtWRcvR-H13L8BpuQ.roa (raw, json)
Hash identifier: Xu4B8PBYuJSPdxaX7zPqbUMefx6LyH0qkA4sT1A4tcc=
Subject key identifier: BB:B6:74:14:65:60:BE:D3:6D:59:17:2F:47:E1:F5:DC:BF:01:A6:E4
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 0194C2AD536A784CA799911A59359AEA60A8
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/u7Z0FGVgvtNtWRcvR-H13L8BpuQ.roa
Signing time: Sat 01 Feb 2025 18:02:06 +0000
ROA not before: Sat 01 Feb 2025 18:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57027
IP address blocks: 2a09:2b80:2::/48 maxlen: 48
2a09:2b80:3::/48 maxlen: 48
2a09:2b80:4::/48 maxlen: 48
2a09:2b80:5::/48 maxlen: 48
2a09:2b80:6::/48 maxlen: 48
2a09:2b80:7::/48 maxlen: 48
2a09:2b80:8::/48 maxlen: 48
2a09:2b80:9::/48 maxlen: 48
2a09:2b80:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 17:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c2:ad:53:6a:78:4c:a7:99:91:1a:59:35:9a:ea:60:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Feb 1 18:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbb674146560bed36d59172f47e1f5dcbf01a6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f8:b3:40:08:5b:e4:5a:2a:23:9c:db:d1:6f:
e5:94:eb:63:e9:4b:88:7f:6b:19:b7:af:28:fe:9a:
a6:05:b6:c3:1e:86:ce:65:6b:fe:4d:38:b7:6c:ef:
5b:26:bd:5a:a9:2e:42:e5:30:e3:cd:e7:f2:ff:c8:
9d:62:96:cd:16:4d:e2:76:29:8e:0e:25:f5:44:2b:
52:90:23:f5:9c:d1:d6:27:18:16:b1:47:97:e9:fd:
1d:65:34:80:aa:5b:8c:d5:6d:1e:20:fc:5e:47:d5:
55:27:cd:31:1b:23:a1:e1:b6:b4:81:b3:00:7d:db:
7d:94:b7:e4:91:ea:89:23:33:6b:0c:04:e7:99:5d:
d4:cd:fa:ca:5c:b2:d2:d1:48:0b:a7:60:4d:d6:dc:
75:f1:af:92:c3:5a:c4:70:36:1f:9a:dd:12:5b:80:
4f:4a:6c:f4:04:99:f1:b0:99:eb:15:5f:d7:16:f7:
ec:93:d9:dc:f3:05:76:ec:9a:29:89:f5:fb:77:7b:
fb:03:0f:d9:38:f9:51:0f:39:39:40:69:cd:55:9a:
3b:6b:db:e1:2d:62:2a:83:ca:2b:d5:b4:86:c3:7c:
f7:4c:b2:0c:4e:8e:47:29:91:32:73:e6:56:5f:da:
c0:24:a1:99:e9:da:01:96:1e:9e:ac:7b:27:43:d5:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:74:14:65:60:BE:D3:6D:59:17:2F:47:E1:F5:DC:BF:01:A6:E4
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/u7Z0FGVgvtNtWRcvR-H13L8BpuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:2::-2a09:2b80:9:ffff:ffff:ffff:ffff:ffff
2a09:2b80:10::/48
Signature Algorithm: sha256WithRSAEncryption
40:f6:e8:fb:68:2d:d6:c4:32:92:70:a2:18:a8:7b:94:9f:de:
5c:4f:ce:4c:fa:08:cd:6f:52:05:7d:2f:03:a4:cb:b4:45:47:
2d:c8:4e:80:ad:9d:91:a4:6c:6e:73:b5:53:86:0f:2a:cc:ff:
57:7b:bd:d5:7d:90:7f:80:19:62:88:b3:84:f6:69:be:ff:f5:
66:22:7f:35:37:35:69:f0:de:cf:be:bb:9b:03:c8:ab:a3:b8:
cb:7b:d1:e0:64:ea:83:b3:34:ea:08:21:b6:ba:1a:c6:3c:b2:
16:b0:6e:d7:83:53:0f:d0:0a:3c:aa:0c:d4:40:7a:fc:a9:34:
2b:23:39:f5:0a:e6:a0:de:3c:df:19:66:49:58:c8:2e:e4:4f:
f7:16:10:bc:9c:42:8b:53:bc:9d:52:75:73:28:d9:ab:78:b9:
5c:e1:ab:e7:a0:99:97:fe:e3:25:e6:84:8f:ff:2f:51:e2:23:
b3:5c:59:22:76:39:91:b9:9f:96:d8:b5:57:ff:3d:28:29:d6:
1c:95:0b:7a:f6:3e:93:be:cd:20:09:8f:12:66:45:cf:73:c2:
82:f3:5b:54:74:70:5f:1f:ae:1d:6b:58:34:4f:f7:a1:43:08:
63:4e:63:26:1b:f5:c8:d4:73:37:26:f7:7a:8f:1e:79:35:25:
bd:3e:12:b3
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZTCrVNqeEynmZEaWTWa6mCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy
NjllMzkwHhcNMjUwMjAxMTgwMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmI2NzQxNDY1NjBiZWQzNmQ1OTE3MmY0N2UxZjVkY2JmMDFhNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vizQAhb5FoqI5zb0W/llOtj6UuI
f2sZt68o/pqmBbbDHobOZWv+TTi3bO9bJr1aqS5C5TDjzefy/8idYpbNFk3idimO
DiX1RCtSkCP1nNHWJxgWsUeX6f0dZTSAqluM1W0eIPxeR9VVJ80xGyOh4ba0gbMA
fdt9lLfkkeqJIzNrDATnmV3UzfrKXLLS0UgLp2BN1tx18a+Sw1rEcDYfmt0SW4BP
Smz0BJnxsJnrFV/XFvfsk9nc8wV27JopifX7d3v7Aw/ZOPlRDzk5QGnNVZo7a9vh
LWIqg8or1bSGw3z3TLIMTo5HKZEyc+ZWX9rAJKGZ6doBlh6erHsnQ9XRXQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLu2dBRlYL7TbVkXL0fh9dy/AabkMB8GA1UdIwQY
MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct
Yzk0NTdlYzgxMTUxLzEvdTdaMEZHVmd2dE50V1JjdlItSDEzTDhCcHVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx
LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwEqCSuA
AAIDBwEqCSuAAAgDBwAqCSuAABAwDQYJKoZIhvcNAQELBQADggEBAED26PtoLdbE
MpJwohioe5Sf3lxPzkz6CM1vUgV9LwOky7RFRy3IToCtnZGkbG5ztVOGDyrM/1d7
vdV9kH+AGWKIs4T2ab7/9WYifzU3NWnw3s++u5sDyKujuMt70eBk6oOzNOoIIba6
GsY8shawbteDUw/QCjyqDNRAevypNCsjOfUK5qDePN8ZZklYyC7kT/cWELycQotT
vJ1SdXMo2at4uVzhq+egmZf+4yXmhI//L1HiI7NcWSJ2OZG5n5bYtVf/PSgp1hyV
C3r2PpO+zSAJjxJmRc9zwoLzW1R0cF8frh1rWDRP96FDCGNOYyYb9cjUczcm93qP
Hnk1Jb0+ErM=
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:33:39 2025 by rpki-client