Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jRavc_zPoHLL5Bl-s5Pr7jpTNtQ.roa
File: jRavc_zPoHLL5Bl-s5Pr7jpTNtQ.roa (raw, json)
Hash identifier: CYF7z+wfMIGv9JW65tc7aBFRgXTvC7q04JCL+c6fpNQ=
Subject key identifier: 8D:16:AF:73:FC:CF:A0:72:CB:E4:19:7E:B3:93:EB:EE:3A:53:36:D4
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB78F761C6C3E1938467B2B8D82BB8
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jRavc_zPoHLL5Bl-s5Pr7jpTNtQ.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a09:2983::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 Jan 2025 17:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:78:f7:61:c6:c3:e1:93:84:67:b2:b8:d8:2b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d16af73fccfa072cbe4197eb393ebee3a5336d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:26:ad:dd:75:d5:c5:9d:c3:1f:ac:29:e6:
da:93:70:76:56:1f:b4:e9:33:af:7b:1c:2b:31:80:
cd:5d:fe:ed:f1:f2:64:73:c4:f9:50:34:a1:6b:5e:
b2:bb:16:c5:5f:86:37:e7:87:9f:4c:e7:60:62:1e:
6f:03:09:e0:df:0c:01:4b:94:7b:51:5c:bf:b4:f1:
8e:4e:02:c4:bf:54:14:cd:b0:b2:e6:d3:d3:c3:a0:
ed:80:df:b5:97:95:ac:09:b2:08:fb:1a:13:35:05:
98:ac:8a:d1:4c:8d:97:e4:27:b6:f7:21:26:7e:1a:
f3:8e:c9:78:c1:a9:e6:cf:4b:66:d3:15:62:18:a5:
39:b9:09:bd:f8:76:5e:f6:dc:56:93:c4:eb:f7:fe:
14:7e:5f:02:67:a1:97:12:b0:47:ad:b0:c5:5a:ea:
76:05:dc:bd:f8:dc:21:c5:2b:70:c3:8e:f1:0a:fd:
f2:83:90:d2:42:40:12:37:91:47:cd:45:2a:94:23:
a2:2f:d7:9e:df:7e:3a:5a:57:81:7f:73:9a:0b:82:
00:41:79:26:53:6e:03:b5:61:8e:e2:0e:10:ea:f9:
52:5a:62:4b:0b:00:e6:df:82:8c:44:b7:06:f3:f3:
1b:9d:87:93:c6:3e:b7:b7:d6:df:a7:05:1e:f6:ae:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:AF:73:FC:CF:A0:72:CB:E4:19:7E:B3:93:EB:EE:3A:53:36:D4
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jRavc_zPoHLL5Bl-s5Pr7jpTNtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2983::/32
Signature Algorithm: sha256WithRSAEncryption
77:51:3e:01:bd:4a:d1:b8:4d:ac:81:fd:da:1b:10:73:e0:bb:
fc:3a:50:65:50:2b:73:d4:de:d9:5b:f8:7c:02:8d:f5:65:05:
00:13:1d:c1:43:87:bb:6b:73:33:3d:3a:f4:e0:9d:94:48:d6:
27:52:b1:98:00:3d:ce:2d:30:b8:43:81:20:c9:19:af:c9:49:
9d:07:43:a7:ac:66:63:99:96:87:a2:43:cb:d7:a0:db:4f:04:
5a:f0:a7:60:b8:32:91:1f:eb:61:9f:ec:70:97:90:f4:43:65:
41:c2:a9:3e:32:d0:40:ef:ad:9c:68:de:ae:d0:53:18:5e:20:
35:8b:df:32:93:25:cd:52:6d:ef:8e:f8:84:51:f1:4c:69:a8:
04:31:1e:e4:62:e8:41:85:41:09:92:e3:c1:ef:00:e2:1a:da:
92:3b:11:4a:1c:2b:ce:c9:b2:84:16:3b:bf:95:47:79:a2:a9:
23:4d:69:bb:82:76:c2:0b:65:3e:62:19:03:99:23:e7:6c:39:
b4:a0:98:7b:ee:e1:7b:f8:30:3c:27:05:0b:ce:91:b8:77:0c:
57:a1:a7:9e:02:58:ff:35:69:58:15:e5:da:9e:ff:16:05:41:
1a:62:b5:75:10:29:31:34:54:ed:bc:d7:15:47:40:d8:78:2a:
77:67:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:21:48 2025 by rpki-client