Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xaw7_AWp5fvjyiLfDVkl5sMLUww.roa
File: xaw7_AWp5fvjyiLfDVkl5sMLUww.roa (raw, json)
Hash identifier: x2q8zKtjBM4XTrORasnw2jZEAVVSnrekJsHpbCcw560=
Subject key identifier: C5:AC:3B:FC:05:A9:E5:FB:E3:CA:22:DF:0D:59:25:E6:C3:0B:53:0C
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019424B26B98C0ADF775496FE1E2687FFA4E
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xaw7_AWp5fvjyiLfDVkl5sMLUww.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210107
IP address blocks: 2a05:d740::/32 maxlen: 32
2a05:d741::/32 maxlen: 32
2a05:d742::/32 maxlen: 32
2a05:d743::/32 maxlen: 32
2a05:d744::/32 maxlen: 32
2a05:d745::/32 maxlen: 32
2a05:d746::/32 maxlen: 32
2a05:d747::/32 maxlen: 32
2a06:e900::/32 maxlen: 32
2a06:e901::/32 maxlen: 32
2a06:e902::/32 maxlen: 32
2a06:e903::/32 maxlen: 32
2a06:e904::/32 maxlen: 32
2a06:e905::/32 maxlen: 32
2a06:e906::/32 maxlen: 32
2a06:e907::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 23 Mar 2025 09:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6b:98:c0:ad:f7:75:49:6f:e1:e2:68:7f:fa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5ac3bfc05a9e5fbe3ca22df0d5925e6c30b530c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:8c:d2:c4:74:56:26:2b:f2:e1:92:bc:87:
cb:31:53:31:e7:95:07:60:e1:69:7c:5d:7b:09:1c:
2c:ec:a9:a8:91:6d:8f:1f:53:89:3a:4c:14:c0:0b:
ea:88:92:f1:bd:aa:98:89:ca:bb:81:29:5d:39:f0:
f3:5b:7d:fb:09:6e:32:b3:33:91:51:b9:74:32:d6:
1d:56:d5:1c:5a:df:1c:e5:8e:c0:36:d6:f8:87:82:
1b:97:55:95:5c:3f:ba:02:bb:b8:17:b1:77:e3:d8:
91:2f:93:20:59:d9:c6:4e:03:3a:81:65:12:74:bc:
64:69:e6:3e:f8:ec:5c:c7:cc:c8:33:6d:83:39:a4:
67:43:89:7d:97:16:78:c8:87:02:27:cd:dc:d9:3c:
94:55:e5:4f:c7:1d:d7:ee:af:99:75:f5:25:70:db:
16:61:d6:66:7d:ac:8b:ea:7a:a6:01:a9:5c:4b:88:
8c:87:7d:a6:ab:63:37:ed:ff:98:f2:56:d9:a6:97:
5e:c1:95:a0:b2:22:ae:f3:be:ce:c4:dd:c8:55:19:
a7:df:0a:46:ae:96:7d:26:ec:b4:97:39:b7:13:38:
b1:28:f0:3a:a9:8c:e6:c4:9f:46:e7:5b:f3:f2:a2:
b7:43:f6:6f:64:ef:44:e3:96:19:50:ac:34:c6:a8:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:3B:FC:05:A9:E5:FB:E3:CA:22:DF:0D:59:25:E6:C3:0B:53:0C
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/xaw7_AWp5fvjyiLfDVkl5sMLUww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d740::/29
2a06:e900::/29
Signature Algorithm: sha256WithRSAEncryption
8b:31:c5:69:b1:e2:c4:d1:0d:08:03:e2:fc:60:4e:14:01:0b:
1f:c0:d6:63:80:62:b3:57:61:4e:62:b8:42:d5:57:9c:f2:9d:
5c:b1:80:de:db:fa:11:ef:9d:da:20:b4:fc:71:61:16:e4:f6:
ba:a4:d3:69:ce:b4:9b:f4:6e:1c:fc:42:51:27:e3:49:4c:a3:
df:c2:45:61:2e:7e:bd:9f:a9:51:33:08:02:b5:d0:88:a4:c4:
7a:c0:c5:64:43:09:56:fa:d1:77:62:fd:58:d7:2c:51:94:22:
4a:e1:0c:a8:ed:80:78:22:27:c0:e2:e1:af:24:b0:69:bc:37:
36:df:44:b3:02:47:af:9b:de:4c:b4:f1:85:e8:9d:fa:be:49:
a7:17:a6:06:67:94:3f:3d:52:31:82:a7:9e:06:cf:c3:5a:35:
e6:7d:79:d7:9d:ca:98:f0:00:3f:7f:07:6e:1d:6e:50:0c:d9:
e1:ae:50:b1:e7:8c:d5:a0:7a:88:c3:35:75:64:2a:04:b4:b7:
b4:98:43:d6:0f:c9:a0:62:79:23:f7:cb:36:7b:db:d7:58:be:
77:51:8a:2f:bb:fb:75:4f:e3:29:62:37:80:c4:d1:0e:8b:87:
eb:e6:07:e1:2f:22:36:73:c4:8f:e2:c0:ae:52:b8:b4:a5:fa:
47:34:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:11:02 2025 by rpki-client