Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/54Qk3dr651eMb2vCnrACdghErXc.roa
File: 54Qk3dr651eMb2vCnrACdghErXc.roa (raw, json)
Hash identifier: 4S1mRXAoHJMLQ50+e5kYhskL/YoTA+AuIde5fyCYSUM=
Subject key identifier: E7:84:24:DD:DA:FA:E7:57:8C:6F:6B:C2:9E:B0:02:76:08:44:AD:77
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 01953D4C36AEC2D4B745FBF3438216CD4DF7
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/54Qk3dr651eMb2vCnrACdghErXc.roa
Signing time: Tue 25 Feb 2025 13:29:19 +0000
ROA not before: Tue 25 Feb 2025 13:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a05:bd47:1234::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Feb 2025 16:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:4c:36:ae:c2:d4:b7:45:fb:f3:43:82:16:cd:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Feb 25 13:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e78424dddafae7578c6f6bc29eb002760844ad77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:a7:c3:7e:3d:2b:a0:4d:cc:66:5c:e3:fd:
4f:2b:3d:b8:ef:e6:a2:1c:ee:92:a6:22:4d:e6:41:
74:fb:9a:85:ef:34:7b:32:ea:fa:d4:fa:c5:e9:cd:
a5:a8:8e:bd:f5:7c:3e:15:23:70:17:61:86:40:80:
ec:62:f2:bf:c6:fd:03:a6:a8:ec:23:91:77:a2:5e:
79:9d:c6:f7:66:fc:da:93:b9:0a:89:56:5d:09:c3:
6b:f5:9f:42:a5:cd:c2:e8:72:93:ba:c0:4d:95:a4:
61:10:95:7f:0d:03:95:09:6e:0d:84:81:cf:50:42:
8d:9b:44:ef:e1:f6:dc:3e:2e:b8:40:a0:5a:00:90:
39:70:c9:dc:37:a1:ba:12:76:60:58:4d:21:3d:54:
68:14:db:f0:8f:6a:6c:4e:2e:a3:76:bd:16:c6:23:
61:63:2f:67:f6:3e:36:6c:34:85:ad:f5:90:6a:14:
ff:11:d5:78:85:d1:a1:83:d8:85:6c:bb:06:65:1d:
f2:8f:c9:b3:23:b7:e3:ae:77:f4:16:98:0c:10:4b:
26:0b:67:7c:c2:fc:b7:07:71:9e:56:68:61:bb:19:
33:18:e2:50:c3:0a:90:2a:92:da:61:ac:06:ac:1e:
7f:9e:85:68:90:a7:4e:98:3e:a5:15:dd:35:fe:02:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:84:24:DD:DA:FA:E7:57:8C:6F:6B:C2:9E:B0:02:76:08:44:AD:77
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/54Qk3dr651eMb2vCnrACdghErXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bd47:1234::/48
Signature Algorithm: sha256WithRSAEncryption
03:ae:19:db:28:73:df:58:55:7d:ff:d4:15:a0:51:64:27:9d:
cb:5a:c9:25:68:e2:03:5a:4c:e0:cf:0f:39:89:04:ee:e6:3d:
d1:4c:8b:c8:78:73:a4:87:f4:17:45:05:b9:54:4c:69:b9:96:
e7:17:90:b5:13:2a:6c:44:12:ca:d4:e7:77:bc:19:51:a4:c4:
f4:85:10:3a:03:fb:2d:1c:d6:a9:11:e5:fd:93:e6:d2:8c:83:
e0:78:1a:97:d8:14:38:07:48:2e:ff:a6:bd:7c:9b:15:3e:8d:
a8:1b:33:f7:15:25:74:15:68:97:a2:80:e9:2e:c8:7f:a2:7c:
02:82:35:f7:01:0a:9b:3b:bf:cf:5e:34:6d:e4:e3:e7:1c:eb:
b3:1a:8e:4d:0e:99:09:c0:40:cd:c1:0d:c0:17:5e:05:0c:c5:
8a:3e:3b:d0:60:a3:e9:c6:00:02:4f:95:b5:f8:47:7c:a5:b6:
24:0e:b1:d8:f0:95:34:0d:ca:85:ad:e8:83:58:e5:99:b4:f9:
c7:1c:fe:b3:8d:c1:74:ec:2e:1b:5e:ed:aa:98:0a:06:82:76:
2e:af:0e:09:e6:a1:49:f3:93:3f:b3:ea:29:be:62:0e:f7:59:
de:27:f7:a2:43:fb:61:97:b8:2d:aa:93:bd:3d:67:53:0c:4b:
20:29:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:48:15 2025 by rpki-client