Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/5DV0aZ7AtvMZuOv-JngIgMqj-4M.roa
File: 5DV0aZ7AtvMZuOv-JngIgMqj-4M.roa (raw, json)
Hash identifier: N904KsgWxpKBl5vs3/XAuJz0if4iaSX8RcYFUi0frcs=
Subject key identifier: E4:35:74:69:9E:C0:B6:F3:19:B8:EB:FE:26:78:08:80:CA:A3:FB:83
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01958B138FCC4E57DF4B24186C96E785F178
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/5DV0aZ7AtvMZuOv-JngIgMqj-4M.roa
Signing time: Wed 12 Mar 2025 15:57:49 +0000
ROA not before: Wed 12 Mar 2025 15:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a05:1e42::/32 maxlen: 32
2a09:a804::/32 maxlen: 32
2a09:bc01::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Mar 2025 17:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:13:8f:cc:4e:57:df:4b:24:18:6c:96:e7:85:f1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 12 15:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e43574699ec0b6f319b8ebfe26780880caa3fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:b5:51:d3:4c:7d:26:0b:bb:ad:b4:77:7b:
71:94:37:54:11:89:1c:19:d7:30:9f:4c:93:15:61:
52:9b:3e:b8:90:2a:cf:70:bb:0c:08:47:45:37:f1:
b2:08:fd:1a:b2:4d:4b:fa:c4:63:2a:ad:c9:30:3b:
54:1e:f9:e7:be:c6:29:df:a8:43:bf:bb:15:87:08:
b2:8c:92:8a:85:df:a5:34:c0:08:04:00:f1:2b:93:
b0:2c:8e:ea:e2:4a:03:e9:81:86:f1:7f:81:ff:0d:
be:95:e9:a7:97:02:5f:b7:ab:ba:9b:5a:2a:3d:7b:
0d:9d:e6:8f:87:40:99:63:55:a9:5c:01:cf:bc:a1:
6a:fb:85:dc:7e:13:b4:3d:04:b0:51:7d:a8:99:7b:
12:03:e1:f7:de:8a:d4:d9:61:0e:83:d6:44:62:2f:
89:83:03:50:59:a2:eb:da:c1:07:5f:7e:3a:b1:2e:
02:28:27:d5:8d:ec:a6:d6:40:43:35:69:2b:91:fb:
c5:9f:ae:00:65:f7:bd:d1:86:6d:10:ab:08:10:68:
af:29:47:ed:b5:a8:7c:fa:94:a1:2f:dc:55:a2:aa:
47:8e:c8:7c:ad:08:31:bd:aa:81:d4:51:4b:84:72:
1b:df:4d:52:22:cf:9c:d3:f4:3d:72:b9:b6:8d:55:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:74:69:9E:C0:B6:F3:19:B8:EB:FE:26:78:08:80:CA:A3:FB:83
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/5DV0aZ7AtvMZuOv-JngIgMqj-4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1e42::/32
2a09:a804::/32
2a09:bc01::/32
Signature Algorithm: sha256WithRSAEncryption
4a:2c:a0:1e:d2:cc:d1:f8:7a:ee:6c:7c:8a:bb:56:1b:a5:04:
f8:47:e8:81:52:a1:75:63:e8:83:0e:02:bb:1c:94:6a:5f:2b:
ba:aa:a1:33:1f:b8:3b:d7:da:5f:70:af:10:e4:ff:9e:e7:03:
65:4e:3c:cb:e3:ad:04:7e:9c:3d:8e:1c:83:6d:72:6f:0c:e5:
ef:30:fe:8e:e2:a7:69:41:f3:0b:70:ea:ac:b8:6d:37:47:5b:
7c:8d:3d:b4:53:54:72:d4:86:51:d8:f1:39:8f:b6:c9:40:a6:
cd:3c:eb:ac:0e:2c:86:33:9d:ab:8d:44:9c:eb:21:94:b2:a3:
9d:00:3a:10:06:42:23:8c:e3:b3:41:20:92:6e:1e:95:eb:68:
7f:a8:6e:2c:8d:e5:95:e8:45:94:82:62:b3:53:50:95:70:33:
8d:f5:09:09:2c:7f:b6:a5:c1:38:b6:77:27:45:24:17:0b:36:
29:65:fe:9a:8d:20:91:8e:dd:b6:de:e2:ac:36:1f:c8:79:5c:
7d:3b:82:c4:9f:fc:af:c1:01:20:16:7b:38:86:e7:af:29:be:
c4:cf:72:74:4f:87:0e:54:c1:75:5f:3b:aa:04:b2:cd:22:ae:
0b:c5:32:e4:27:13:e7:72:95:03:aa:e5:c4:5a:e9:17:24:03:
3d:e9:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:06:04 2025 by rpki-client