Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/E_I2O2xrjB4YoBXit4K2lHK4wH4.roa
File: E_I2O2xrjB4YoBXit4K2lHK4wH4.roa (raw, json)
Hash identifier: 3hmS+t4Qr4Q6OW8uaqC8Gj+W3D1L6c5EShfkCOFrgQU=
Subject key identifier: 13:F2:36:3B:6C:6B:8C:1E:18:A0:15:E2:B7:82:B6:94:72:B8:C0:7E
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01951076E73DF97AD9F2767E693D00193E56
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/E_I2O2xrjB4YoBXit4K2lHK4wH4.roa
Signing time: Sun 16 Feb 2025 20:33:02 +0000
ROA not before: Sun 16 Feb 2025 20:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 2a0a:37c0::/29 maxlen: 29
2a0a:37c0::/32 maxlen: 32
2a0a:37c1::/32 maxlen: 32
2a0a:37c2::/32 maxlen: 32
2a0a:37c3::/32 maxlen: 32
2a0a:37c4::/32 maxlen: 32
2a0a:37c5::/32 maxlen: 32
2a0a:37c6::/32 maxlen: 32
2a0a:37c7::/32 maxlen: 32
2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 16 Feb 2025 20:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:76:e7:3d:f9:7a:d9:f2:76:7e:69:3d:00:19:3e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Feb 16 20:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f2363b6c6b8c1e18a015e2b782b69472b8c07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:66:85:6d:45:fd:26:da:5d:b4:5d:69:2b:
97:af:05:3e:fa:9b:74:d7:99:3a:35:db:fd:23:f5:
ac:17:f0:7c:90:af:52:9a:45:6e:19:3e:80:1d:81:
06:17:01:e1:3d:90:ba:6e:33:24:0a:b5:f6:c6:ca:
aa:5c:21:50:62:a4:88:86:bc:d8:28:cc:88:6c:39:
ef:64:ce:17:de:7f:6f:f5:34:10:fc:51:43:3e:dc:
61:73:cc:99:f1:43:51:0f:a7:d5:6a:25:1e:71:d5:
5e:a7:37:b7:bf:5e:62:a8:e9:7e:d0:7a:c7:bf:20:
d1:a6:3c:fe:77:76:0a:da:e4:43:8f:c4:cf:25:f5:
4c:3d:c4:6d:40:70:1b:8d:7e:6a:2f:d3:a2:60:66:
91:77:25:c8:6a:fe:c2:fe:42:53:b5:8e:e6:12:f4:
06:6c:a1:1e:e3:d8:af:c8:03:a8:e1:00:3e:12:c4:
6e:bf:b8:7f:22:aa:61:91:68:ae:4b:a1:c5:7f:53:
95:82:67:d8:b5:49:73:fd:7c:38:ef:80:14:f0:0c:
1c:f8:b6:61:18:04:54:65:8f:ea:0e:67:81:dc:21:
ff:15:b4:c8:eb:a5:95:fb:2e:3c:02:69:b0:79:54:
a3:1c:0d:dd:ad:5d:cb:33:bf:a1:ca:d2:a1:65:b3:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F2:36:3B:6C:6B:8C:1E:18:A0:15:E2:B7:82:B6:94:72:B8:C0:7E
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/E_I2O2xrjB4YoBXit4K2lHK4wH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:37c0::/29
2a0b:9800::/29
2a14:4a80::/29
Signature Algorithm: sha256WithRSAEncryption
77:c2:6d:ef:88:34:3f:04:cf:be:94:c6:56:c3:22:33:fe:fc:
f4:36:db:60:94:a0:79:92:5d:23:45:f4:5c:c0:ce:9d:d6:e9:
7f:a9:de:2e:5b:06:b1:0d:2d:e2:b2:27:b2:25:09:92:52:07:
f5:a6:77:28:12:f3:9a:02:33:a3:b7:aa:70:73:37:9a:9f:84:
a6:c2:b8:a1:29:c6:5b:3c:1e:0c:95:58:8a:05:d5:17:45:23:
d7:7b:92:5a:25:f3:95:29:b2:71:65:b7:3f:d4:bd:df:2b:c8:
75:e3:c3:22:42:cb:f1:15:ef:14:15:fa:22:ec:a2:33:95:e0:
b9:f7:41:8b:06:21:08:37:53:b2:10:1b:ad:64:89:16:90:cb:
2c:06:45:cc:34:1d:8f:2e:92:4d:22:6d:8e:6c:4c:57:49:25:
7c:5a:76:50:dd:36:3e:73:b4:83:10:dc:73:5f:77:59:f4:01:
a3:5c:35:d1:01:57:8d:89:5b:bf:4e:89:b3:bb:d0:5b:eb:bd:
87:00:c3:95:92:0f:ef:bf:33:dc:9a:65:2a:a3:38:ff:de:37:
a0:71:32:28:53:49:15:12:55:b1:5e:c3:44:33:2a:a2:7c:b4:
08:61:90:c7:a0:bb:ba:20:b7:dc:71:db:6b:28:03:cb:32:31:
18:20:40:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:16 2025 by rpki-client