Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/asAg5Q-mD6tZHidl6JBC6NS63Yw.roa
File: asAg5Q-mD6tZHidl6JBC6NS63Yw.roa (raw, json)
Hash identifier: ENS5+P4+Weoqo1ahhlD3w33OTNsj5kYPrGNoFLqcVXE=
Subject key identifier: 6A:C0:20:E5:0F:A6:0F:AB:59:1E:27:65:E8:90:42:E8:D4:BA:DD:8C
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0193F80F7F2EC4BB5C158B3DB3A73E98E31B
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/asAg5Q-mD6tZHidl6JBC6NS63Yw.roa
Signing time: Tue 24 Dec 2024 09:46:25 +0000
ROA not before: Tue 24 Dec 2024 09:46:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a0f:3380::/32 maxlen: 32
2a0f:3381::/32 maxlen: 32
2a0f:3382::/32 maxlen: 32
2a0f:3383::/32 maxlen: 32
2a0f:3384::/32 maxlen: 32
2a0f:3385::/32 maxlen: 32
2a0f:3386::/32 maxlen: 32
2a0f:3387::/32 maxlen: 32
2a14:4080::/29 maxlen: 29
2a14:4080::/32 maxlen: 32
2a14:4081::/32 maxlen: 32
2a14:4082::/32 maxlen: 32
2a14:4083::/32 maxlen: 32
2a14:4084::/32 maxlen: 32
2a14:4085::/32 maxlen: 32
2a14:4086::/32 maxlen: 32
2a14:4087::/32 maxlen: 32
2a14:4380::/29 maxlen: 29
2a14:4380::/32 maxlen: 32
2a14:4381::/32 maxlen: 32
2a14:4382::/32 maxlen: 32
2a14:4383::/32 maxlen: 32
2a14:4384::/32 maxlen: 32
2a14:4385::/32 maxlen: 32
2a14:4386::/32 maxlen: 32
2a14:4387::/32 maxlen: 32
2a14:4480::/29 maxlen: 29
2a14:4480::/32 maxlen: 32
2a14:4481::/32 maxlen: 32
2a14:4482::/32 maxlen: 32
2a14:4483::/32 maxlen: 32
2a14:4484::/32 maxlen: 32
2a14:4485::/32 maxlen: 32
2a14:4486::/32 maxlen: 32
2a14:4487::/32 maxlen: 32
2a14:4980::/29 maxlen: 29
2a14:4980::/32 maxlen: 32
2a14:4981::/32 maxlen: 32
2a14:4982::/32 maxlen: 32
2a14:4983::/32 maxlen: 32
2a14:4984::/32 maxlen: 32
2a14:4985::/32 maxlen: 32
2a14:4986::/32 maxlen: 32
2a14:4987::/32 maxlen: 32
2a14:4a80::/29 maxlen: 29
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
2a14:4b80::/29 maxlen: 29
2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:0f:7f:2e:c4:bb:5c:15:8b:3d:b3:a7:3e:98:e3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Dec 24 09:46:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ac020e50fa60fab591e2765e89042e8d4badd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:8e:3f:36:2f:aa:f6:75:d8:60:d9:5b:f3:
00:79:85:a7:3c:77:31:96:19:fa:4e:bc:8e:7b:4f:
0b:aa:2f:cd:f4:c0:48:a8:10:9f:d8:9d:81:be:7f:
4a:36:b1:6a:07:99:e2:56:3d:fb:d6:60:02:68:6f:
53:ce:df:2c:8f:5f:07:5d:5a:89:e9:35:6f:a8:f0:
bc:62:36:9b:33:e1:98:8e:3a:b2:55:5b:28:73:4f:
96:5e:bf:0b:d0:45:e0:3f:44:ee:d6:6d:48:20:b6:
72:ba:4e:f5:04:8a:25:56:81:7a:cc:da:26:ef:bc:
10:8d:60:04:df:85:f9:5d:42:c3:16:62:b2:86:93:
76:18:4f:c8:f3:23:e9:59:05:20:cb:14:c3:30:e5:
44:43:db:97:8f:a1:ed:7d:3b:85:18:6d:1c:51:64:
68:aa:8c:cb:0d:75:b5:60:36:2d:a4:8d:63:c7:df:
1d:ee:1e:d5:6f:1e:2b:c6:10:35:c7:65:3b:13:37:
c4:43:b8:dd:c0:73:2f:eb:e5:76:ad:ae:dd:62:10:
a4:12:46:6c:04:51:04:18:24:ca:b7:d1:1e:31:db:
b9:56:61:3f:c8:f0:91:7e:d5:8a:4d:f6:63:6c:25:
63:b4:ad:ab:a6:1f:5f:2c:84:df:46:58:fc:52:c1:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:20:E5:0F:A6:0F:AB:59:1E:27:65:E8:90:42:E8:D4:BA:DD:8C
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/asAg5Q-mD6tZHidl6JBC6NS63Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
2a0f:3380::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
82:17:55:c2:23:7a:73:13:57:cf:80:8e:a5:89:a9:f0:ec:b6:
f0:86:00:8b:97:ee:90:7c:40:31:81:d8:28:5c:0d:73:e8:00:
b5:75:c7:71:d0:67:a8:75:c2:a5:a9:05:9b:15:67:ad:95:d6:
83:ac:72:dc:d4:d9:e9:74:0e:53:dd:ad:5c:64:b2:54:79:2f:
03:38:6d:41:08:1e:81:df:d7:f3:9a:0b:0f:e8:77:c2:6a:97:
ca:c9:93:fb:57:5b:f3:0f:76:34:16:6d:0a:24:c8:8c:a4:f1:
a3:4e:f2:cd:48:42:65:90:00:82:79:31:cf:1d:0c:1f:a9:2a:
cc:14:f1:a1:b7:32:11:e6:c5:23:cd:1e:1c:06:08:19:4b:90:
30:c9:f9:25:bb:3e:a2:fc:f6:c4:bf:1c:f4:a5:8b:6f:35:3b:
dd:ce:b4:a0:b7:0f:ec:36:6e:77:24:a9:2c:8a:21:04:28:6a:
b8:5d:9f:49:22:51:73:64:86:9f:69:54:27:06:f9:c2:05:71:
05:46:1a:db:eb:67:a7:14:eb:bb:2a:91:84:8b:7c:96:0c:a9:
39:c2:23:c5:44:be:00:60:d9:fd:cd:a9:20:9c:30:f6:2d:a9:
58:2f:c5:a0:33:b9:c4:21:5c:03:d8:5f:d8:33:08:35:24:91:
e5:9e:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:11 2025 by rpki-client