Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/USGvh-y9tnQZ6sjByV1GDHT5vWY.roa
File: USGvh-y9tnQZ6sjByV1GDHT5vWY.roa (raw, json)
Hash identifier: +yPYhQi+CEEqm4OuoM41G9KYmRtgsfytUVMTXuTlbFk=
Subject key identifier: 51:21:AF:87:EC:BD:B6:74:19:EA:C8:C1:C9:5D:46:0C:74:F9:BD:66
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0194DC5D8ECE6B311E6AB0B093B3EDB1DEE5
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/USGvh-y9tnQZ6sjByV1GDHT5vWY.roa
Signing time: Thu 06 Feb 2025 17:45:06 +0000
ROA not before: Thu 06 Feb 2025 17:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:e306::/32 maxlen: 32
2a09:ef07::/32 maxlen: 32
2a0a:b385::/32 maxlen: 32
2a0b:9001::/32 maxlen: 32
2a0b:9005::/32 maxlen: 32
2a0d:afc6::/32 maxlen: 32
2a0f:3105::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:5d:8e:ce:6b:31:1e:6a:b0:b0:93:b3:ed:b1:de:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Feb 6 17:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5121af87ecbdb67419eac8c1c95d460c74f9bd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:13:af:e7:96:42:ee:ab:f0:de:d8:36:e8:
f9:41:07:6f:6a:78:f4:32:a7:e9:5d:c8:0d:55:49:
50:40:66:bb:19:7d:bf:f0:ff:98:ea:d6:43:84:03:
9a:57:89:83:e8:a0:e0:2f:56:16:f2:c9:39:a2:89:
3d:c7:bc:10:02:14:23:a8:c7:f4:07:d7:a0:f3:dd:
fb:d7:f1:c7:15:18:71:13:3c:82:9c:27:79:d8:eb:
ee:6f:48:74:41:37:bd:20:bf:41:fb:65:4f:ee:ab:
9f:d7:1b:e1:a6:73:35:fd:1e:e0:91:ab:31:53:42:
f6:06:95:2f:9f:44:59:3a:a4:79:46:06:0f:61:77:
fb:dc:e6:ca:a8:e1:c5:1d:b3:bc:51:2c:b3:9f:a8:
9f:a9:4a:f0:3b:6e:3f:0a:c7:b2:d4:a1:ce:de:59:
05:8c:26:e9:74:cd:1e:9a:4c:32:87:d0:4e:c3:3d:
01:e7:12:f8:ea:af:df:fc:22:8b:7a:f1:ae:bc:74:
ea:2b:db:38:8d:af:ed:d3:61:aa:97:b5:4d:7a:b9:
8d:1b:00:8f:09:d0:98:c7:f2:3f:fb:af:74:98:38:
07:e1:b7:fd:35:48:46:e9:61:5b:d3:b9:25:0a:a3:
44:9c:68:49:21:0e:92:f2:f7:6c:05:72:41:5d:99:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:21:AF:87:EC:BD:B6:74:19:EA:C8:C1:C9:5D:46:0C:74:F9:BD:66
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/USGvh-y9tnQZ6sjByV1GDHT5vWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e306::/32
2a09:ef07::/32
2a0a:b385::/32
2a0b:9001::/32
2a0b:9005::/32
2a0d:afc6::/32
2a0f:3105::/32
Signature Algorithm: sha256WithRSAEncryption
ab:19:11:5b:8a:0f:88:81:78:4b:ec:57:15:c8:0a:c1:e2:f9:
13:ad:5b:57:99:1b:9a:24:b1:ff:9b:37:97:a2:d5:f5:8b:b6:
ed:db:d0:7c:43:68:80:11:8f:30:dd:b1:12:bc:0d:84:23:02:
8d:ce:a7:ec:4d:76:da:0e:ae:db:12:b6:79:a3:fe:7e:0d:8f:
fb:ae:f8:86:36:cf:c4:1c:a9:73:06:ea:5c:91:6c:ae:9b:4d:
68:bb:16:20:80:2a:c2:c5:07:7a:92:37:75:92:17:11:cd:02:
2d:03:c2:97:a9:26:80:a2:f3:47:90:ed:f6:ed:38:9e:55:a5:
d5:31:3e:bb:08:fc:15:79:a6:11:82:e1:9f:b9:d7:a5:64:97:
53:d0:29:00:f5:a9:0c:33:f7:22:73:5a:db:d7:75:14:d7:d1:
28:90:81:e0:37:eb:b1:01:64:b2:a7:c8:70:88:3c:eb:41:fd:
38:31:d2:5d:08:b2:47:5f:0f:05:8c:66:fb:05:0b:1a:52:d9:
07:32:c5:c0:a4:06:68:ce:a5:45:67:81:f1:1f:87:a6:b0:17:
58:a4:09:11:53:a5:f2:89:b0:e5:16:30:d1:f0:a4:a4:7d:1d:
bc:ad:16:aa:05:e0:4b:53:ca:96:d8:c8:1a:81:90:3d:dd:86:
d6:05:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:13:02 2025 by rpki-client