Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lsyMFrBHiUEQ07z4OaQFO0EddTU.roa
File: lsyMFrBHiUEQ07z4OaQFO0EddTU.roa (raw, json)
Hash identifier: j2ZKEj/efuFQR4xgCrZVYQU4IZ/llpy6GmQO59bDox4=
Subject key identifier: 96:CC:8C:16:B0:47:89:41:10:D3:BC:F8:39:A4:05:3B:41:1D:75:35
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D99088B79A5831EE683FD898EBC31F
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lsyMFrBHiUEQ07z4OaQFO0EddTU.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215245
IP address blocks: 2a14:6780:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 14:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:90:88:b7:9a:58:31:ee:68:3f:d8:98:eb:c3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96cc8c16b047894110d3bcf839a4053b411d7535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:81:f9:70:db:9e:c5:db:35:9d:ce:8a:e2:
ae:09:d0:d0:30:1e:bc:ad:82:60:5c:a1:38:b4:ad:
62:f3:57:a5:08:06:49:29:f0:1b:03:3f:fa:cc:e1:
3c:ca:cd:ab:bf:91:96:51:aa:65:f6:c2:60:8f:fe:
a6:0f:5b:0a:6d:22:71:15:1b:94:89:ba:69:dc:43:
a0:03:bf:15:45:ee:25:b0:6e:da:e5:f0:98:ed:1d:
3d:65:75:c0:ae:2b:9f:65:3a:46:bb:f8:85:42:3b:
b9:ae:63:7c:f4:cd:30:31:ab:e3:05:15:41:f5:79:
c8:17:9e:48:f3:3b:97:cf:b3:9b:17:7d:48:25:be:
97:ec:7f:fa:6e:f0:4c:eb:f7:d7:40:7e:f6:e6:7e:
61:28:b2:67:f2:e1:3a:19:4c:08:42:06:06:b6:94:
46:f8:52:6c:2f:e3:51:46:de:9d:7e:a8:21:44:f8:
18:b8:69:d3:dd:cd:14:ce:1d:b0:4a:00:f3:df:a3:
d1:87:9a:5f:00:d1:96:13:fa:a1:d4:93:fc:be:a1:
83:96:14:4f:cc:1d:54:a6:1b:32:9c:80:2e:0f:41:
fd:8e:72:db:8f:dd:2d:8e:f2:03:c0:41:a0:29:42:
cd:a5:1a:72:01:e1:53:51:da:e7:46:7a:4d:05:bc:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CC:8C:16:B0:47:89:41:10:D3:BC:F8:39:A4:05:3B:41:1D:75:35
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/lsyMFrBHiUEQ07z4OaQFO0EddTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
4c:ea:a0:7c:3c:f9:68:31:f9:7e:5a:9c:b9:18:17:5f:6b:9a:
27:6d:93:f5:42:19:08:37:3b:8a:01:d0:be:b4:e3:d9:54:00:
7b:77:26:5c:8f:65:6b:fe:2c:86:d1:3c:b8:c4:fe:07:99:20:
65:46:ac:df:85:3e:7f:f4:ce:dd:09:34:7c:36:f1:df:2c:20:
cb:dd:b5:38:01:55:b3:94:5b:9c:30:d8:11:c9:61:03:db:4f:
94:b7:fb:b9:8c:b1:5f:d7:98:15:27:45:08:3e:3b:a6:8d:62:
78:ff:e7:90:fe:48:41:49:3c:a1:82:90:09:14:3c:3c:2e:c8:
c1:38:b0:b9:d7:ad:8a:e4:19:ec:85:97:11:8d:75:c3:e1:5a:
62:8a:95:34:7c:dc:25:a0:7b:41:46:32:f3:fb:a6:92:de:6a:
90:86:e9:01:7e:93:a6:65:3c:21:92:a2:82:8e:24:9a:72:dc:
e9:14:d2:d9:18:33:6a:d6:a7:6b:2e:25:38:40:30:b0:94:5f:
d3:b6:b9:d7:cf:67:28:30:1c:a3:04:e5:d5:7f:e8:f8:bc:61:
9e:a1:64:45:bd:a9:f9:47:f9:ef:6a:cd:8a:37:6c:54:72:cd:
23:1f:c5:fd:ed:c5:95:b7:d7:15:5f:cf:98:c6:1d:4f:ab:1f:
b0:22:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:40:18 2025 by rpki-client