Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/LVlzmRuj4rJVBOELQjBYYMsRzDk.roa
File: LVlzmRuj4rJVBOELQjBYYMsRzDk.roa (raw, json)
Hash identifier: n1/eWuZfFFIKZSSZA5QXSQdWLgomrG517QAkGYsq4BE=
Subject key identifier: 2D:59:73:99:1B:A3:E2:B2:55:04:E1:0B:42:30:58:60:CB:11:CC:39
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 01961410D6FDB39F41866F72BC912CF8D58D
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/LVlzmRuj4rJVBOELQjBYYMsRzDk.roa
Signing time: Tue 08 Apr 2025 06:22:49 +0000
ROA not before: Tue 08 Apr 2025 06:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212615
IP address blocks: 2a0b:7c80::/48 maxlen: 48
2a0b:7c80:1::/48 maxlen: 48
2a0b:7c80:2::/48 maxlen: 48
2a0b:7c80:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 09 Apr 2025 10:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:10:d6:fd:b3:9f:41:86:6f:72:bc:91:2c:f8:d5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Apr 8 06:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d5973991ba3e2b25504e10b42305860cb11cc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:94:c0:10:bc:2b:17:6b:9c:f3:de:ed:ec:
24:18:c4:94:47:1a:e1:65:6d:2f:a1:ed:b9:2e:15:
d8:3b:7f:7a:6f:fe:72:7b:be:d5:0b:5d:2c:60:98:
7f:10:5e:d6:49:c7:a0:e5:6e:aa:bb:49:bb:4a:8f:
9a:94:fb:d2:d6:da:b4:0c:7e:26:d0:dc:a4:03:53:
c9:5b:ba:6b:4b:35:95:13:9c:47:8e:41:33:ec:ce:
a5:93:55:3e:f5:04:6a:9b:8d:fd:85:41:a8:04:96:
d2:56:2b:0f:8e:38:30:fe:b9:14:2d:40:c6:dc:db:
fa:a2:aa:4b:98:a9:a4:f8:78:ec:7e:b9:9f:71:ab:
5b:a9:09:86:ff:3a:90:4b:6b:7a:70:d2:66:76:d7:
1e:11:fc:4b:e7:e2:e0:4f:9e:5e:a9:c8:e1:2b:e5:
a9:3b:cf:9d:27:87:4c:61:db:e5:f5:aa:0d:fc:be:
73:12:07:a0:08:67:76:47:5f:3b:8f:23:65:ba:d3:
44:72:99:07:e4:cc:fb:c8:0a:a2:e7:0b:fe:e2:c7:
a2:ce:8b:d9:f4:c2:b8:7c:55:c7:e5:58:56:f1:84:
c6:47:de:08:82:4a:12:b2:4c:dc:0d:3d:78:67:0f:
6d:ab:1e:9c:4f:b1:00:e8:0b:ac:74:ad:f6:80:5b:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:59:73:99:1B:A3:E2:B2:55:04:E1:0B:42:30:58:60:CB:11:CC:39
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/LVlzmRuj4rJVBOELQjBYYMsRzDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7c80::/46
Signature Algorithm: sha256WithRSAEncryption
8d:ef:2b:9d:68:60:92:ee:7e:41:8a:cd:93:ec:6f:ce:d8:02:
94:2d:65:df:78:d8:c0:d1:b7:6e:92:b1:b3:b3:c2:9d:5f:42:
db:18:0a:26:b8:b4:93:83:c4:fb:a6:ce:a8:8a:9c:8e:7d:b9:
c8:95:ef:d6:d6:8b:24:46:82:9a:fc:15:c0:1e:3c:4d:44:eb:
e8:6c:73:06:a7:ee:3d:0e:8e:28:f1:69:e7:f7:60:c4:28:ef:
69:b6:f5:cb:9c:f0:97:94:36:8a:6e:34:6a:27:f3:1c:08:d3:
ec:ae:e4:9c:90:6e:5b:f6:e2:7a:2b:0c:8d:d8:b7:95:63:75:
07:76:91:20:dd:7f:df:3d:33:55:1a:00:9c:c5:f2:30:a1:e1:
23:a8:86:ab:2b:f2:75:de:8b:cb:58:0f:d2:55:cf:e9:9e:5b:
c0:20:e5:75:23:e5:b8:ec:b9:cc:98:a7:38:9f:2f:16:85:b8:
65:ee:58:4b:bb:0d:02:38:be:1f:7e:61:dc:aa:fe:c6:47:03:
f5:e6:51:b1:69:c8:38:2d:50:86:d0:c5:08:4c:04:e5:9b:02:
da:a0:31:01:21:40:24:21:f6:47:10:7b:f5:a5:f8:95:18:56:
c0:23:9e:cd:08:e5:dc:0b:c7:77:48:be:f2:6f:e6:59:fc:92:
b7:20:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:35:59 2025 by rpki-client