Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/kklHayPzk_GYsmS83xdc4ds086E.roa
File: kklHayPzk_GYsmS83xdc4ds086E.roa (raw, json)
Hash identifier: 0pdh+3uB+4MzMAO0W848+SI8MuWG149k8AmZXn/AFng=
Subject key identifier: 92:49:47:6B:23:F3:93:F1:98:B2:64:BC:DF:17:5C:E1:DB:34:F3:A1
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019424B26C6D47C6CD90667F615BDA1E1C59
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/kklHayPzk_GYsmS83xdc4ds086E.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211318
IP address blocks: 2a07:4a00::/29 maxlen: 29
2a0b:a280::/29 maxlen: 29
2a0b:a300::/29 maxlen: 29
2a0c:7440::/29 maxlen: 29
2a0c:74c0::/29 maxlen: 29
2a0c:7540::/29 maxlen: 29
2a0d:2cc0::/29 maxlen: 29
2a0d:88c0::/29 maxlen: 29
2a0f:1180::/29 maxlen: 29
2a0f:2380::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 09 Jan 2025 22:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6c:6d:47:c6:cd:90:66:7f:61:5b:da:1e:1c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9249476b23f393f198b264bcdf175ce1db34f3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:d2:20:20:e5:91:bf:6d:43:25:6c:2a:93:
48:1b:a0:06:8f:01:6d:d5:e3:e9:d9:7c:c6:96:af:
8e:73:7b:77:30:2e:1f:70:8e:03:c4:35:0e:54:d7:
72:ea:4a:b5:25:d7:ec:d6:74:f2:53:9c:ee:dc:d9:
2f:4e:4e:75:be:25:e4:3d:7c:7d:0f:02:6e:82:5b:
5a:2a:79:59:1d:d9:71:9b:31:2e:db:08:ca:d2:aa:
84:65:24:b3:c2:9f:53:1a:d6:f3:fe:e9:80:ea:4d:
45:cd:5e:35:a9:6a:11:c9:0c:5d:e4:46:79:d7:d5:
f8:99:e4:e3:3f:a6:70:cb:83:6a:a1:ec:4b:8b:6a:
8f:0e:f4:af:14:18:89:a1:3b:de:9e:0a:3e:bb:68:
87:4d:e4:df:a7:d2:9a:2b:6e:de:2f:04:09:14:b8:
47:c9:a9:c3:25:76:f5:42:12:b8:10:03:cc:71:fe:
ae:e8:b1:d4:0f:35:07:d2:bf:14:3e:ac:55:79:de:
dd:fd:57:c4:5e:82:30:22:21:5c:4f:a5:a4:2f:11:
34:fa:8d:b6:4e:87:37:11:aa:9c:bc:c9:29:f9:9f:
d0:df:cf:ba:4c:71:8f:ad:f2:5c:d6:32:c4:49:07:
74:76:1a:35:ee:3f:b7:c2:1a:48:88:2c:97:6c:c3:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:49:47:6B:23:F3:93:F1:98:B2:64:BC:DF:17:5C:E1:DB:34:F3:A1
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/kklHayPzk_GYsmS83xdc4ds086E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4a00::/29
2a0b:a280::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
Signature Algorithm: sha256WithRSAEncryption
3b:9e:bb:fe:b6:04:86:58:f2:f0:05:dd:f8:c2:e9:48:b5:9e:
53:84:4c:d0:1a:99:b0:7c:ee:9c:42:d2:a4:0b:45:db:ba:2d:
50:2e:ec:da:79:28:b2:0b:27:14:c7:f0:74:2d:75:84:f2:96:
6b:85:52:b1:22:e0:03:49:54:62:0d:84:ba:33:57:cf:5b:d7:
dd:c8:37:96:0c:95:29:16:18:97:32:e8:14:70:8e:da:61:9a:
2f:e5:ed:4f:55:44:ee:c7:3f:4f:bf:f1:2d:a2:2b:0f:86:fb:
9e:da:cc:83:bf:4b:fa:63:41:42:cd:06:98:c6:71:e6:9d:29:
4d:81:ff:57:a3:0e:5d:5a:02:d9:b8:56:61:7d:0a:33:a1:30:
e7:ee:fa:e6:27:f8:5a:21:e9:83:a3:09:38:3e:7c:47:c8:75:
84:a1:b5:c1:7f:08:8c:c7:d7:01:28:7c:74:e3:b4:bd:87:85:
0c:4e:c9:4c:1e:b5:4f:9b:a9:a5:7e:bf:70:42:46:61:e7:f3:
99:6c:ed:41:39:1e:4e:de:91:41:f5:56:7e:d1:5f:24:e1:55:
7f:a9:ca:ca:4e:15:fb:c7:28:65:da:23:5b:bb:81:1e:b4:4a:
6b:8e:f8:a5:c1:e4:fc:82:e2:42:54:00:84:5b:bf:4d:2f:d4:
c9:5c:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:03 2025 by rpki-client