Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wATuCb0DVZRPKtEuXxDzMOAH-EU.roa
File: wATuCb0DVZRPKtEuXxDzMOAH-EU.roa (raw, json)
Hash identifier: EEBjuliV9QwdunMKm3P2VWa6cZXFdhxo+sZbXGrI/FY=
Subject key identifier: C0:04:EE:09:BD:03:55:94:4F:2A:D1:2E:5F:10:F3:30:E0:07:F8:45
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019537CAF64C69FEE318030D4F26DD24C361
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wATuCb0DVZRPKtEuXxDzMOAH-EU.roa
Signing time: Mon 24 Feb 2025 11:50:02 +0000
ROA not before: Mon 24 Feb 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:c706::/32 maxlen: 32
2a0a:b385::/32 maxlen: 32
2a0b:9005::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 26 Feb 2025 16:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:ca:f6:4c:69:fe:e3:18:03:0d:4f:26:dd:24:c3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Feb 24 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c004ee09bd0355944f2ad12e5f10f330e007f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:ae:1a:1c:1b:31:45:4b:96:78:f6:f3:06:
21:c3:25:b1:50:b2:c3:20:74:78:9c:57:42:7d:b2:
85:9c:24:ab:f3:58:fa:79:1e:f4:5a:b4:7f:d0:4b:
e9:d8:af:56:f3:19:42:98:d4:c9:83:79:89:8f:57:
15:79:42:45:b5:a2:7c:9d:c8:58:5b:32:43:59:1d:
a6:b8:95:6e:21:74:d6:dc:d3:02:04:d2:8d:c0:fc:
a9:c6:c1:ea:26:12:b2:0f:b5:b7:29:37:27:db:fe:
58:c6:a2:c0:6e:ec:ac:d1:ff:dd:fb:a8:8d:e7:67:
6c:c2:8c:0a:9b:7a:29:b9:d0:9d:e8:da:35:41:20:
5f:d4:a7:5f:cf:5e:f8:c1:19:ff:52:9b:6a:62:19:
87:42:04:a3:bf:1d:83:76:b9:e4:db:aa:fb:48:f7:
42:4f:5a:0a:b7:00:b5:8f:f1:a1:1a:c2:6d:b5:d5:
8e:ce:9f:b6:23:52:99:e0:16:83:85:5f:68:f3:96:
4b:91:a5:a0:17:87:2f:e0:de:da:36:15:16:71:59:
05:81:8d:cb:9a:47:55:d2:3a:67:91:e8:87:db:34:
ed:2c:dc:06:0e:3d:fc:46:6b:20:99:eb:50:5a:6b:
62:da:cc:7d:f9:f9:df:c1:1b:7e:da:66:08:b1:35:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:EE:09:BD:03:55:94:4F:2A:D1:2E:5F:10:F3:30:E0:07:F8:45
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wATuCb0DVZRPKtEuXxDzMOAH-EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:c706::/32
2a0a:b385::/32
2a0b:9005::/32
Signature Algorithm: sha256WithRSAEncryption
c2:3f:08:e1:d2:9c:b1:d0:39:ce:95:6c:c6:a5:a5:86:d6:54:
17:88:64:bb:c1:ca:75:22:fe:87:04:1e:c4:b1:c5:4a:85:1b:
a5:6b:c7:f1:90:c5:e4:90:28:c9:de:78:11:44:dd:00:72:8a:
4c:6c:4a:0a:fe:0d:e6:37:95:a0:35:5c:c5:90:49:f7:45:04:
f9:db:08:fb:97:f3:29:c6:e6:05:f2:55:d4:93:7c:b3:6c:f8:
de:bd:3a:aa:5d:5b:45:32:22:c7:48:a5:05:35:2b:ed:e0:b2:
cc:3d:7d:26:b6:4e:7d:66:8a:b8:9d:18:38:1d:e9:1d:d5:30:
6d:6c:0a:09:d1:45:0b:bc:94:79:ec:61:1f:df:b4:8d:17:8c:
e5:b3:01:00:ed:09:b3:3a:20:f5:9a:76:68:46:df:62:3e:26:
96:27:78:cc:23:9b:44:01:97:2b:a5:05:40:ab:7f:39:e6:81:
d1:9d:42:a1:99:b8:aa:7e:de:bc:95:7f:d5:84:89:01:cf:4c:
50:5c:6b:54:56:8c:d0:c1:0c:7e:90:23:49:c5:90:d3:de:92:
3f:dc:47:a7:4f:cd:a3:50:a8:91:69:f9:96:13:f1:cd:d2:43:
22:cd:21:40:bf:7c:91:04:99:42:53:86:b8:6b:c7:8b:12:a6:
0b:6a:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:30:52 2025 by rpki-client