Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wk9CEUQUN09ucIAUeJDVBtSZsaE.roa
File: wk9CEUQUN09ucIAUeJDVBtSZsaE.roa (raw, json)
Hash identifier: MLe6Fa44tpl64SVVkrm4c/O9BKxy7eXKNUNTH45qq0I=
Subject key identifier: C2:4F:42:11:44:14:37:4F:6E:70:80:14:78:90:D5:06:D4:99:B1:A1
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01955D7B48D48610676ACAC8ED280F5273B4
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wk9CEUQUN09ucIAUeJDVBtSZsaE.roa
Signing time: Mon 03 Mar 2025 19:28:35 +0000
ROA not before: Mon 03 Mar 2025 19:28:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:5903::/32 maxlen: 32
2a0e:8080::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 12 Mar 2025 15:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:7b:48:d4:86:10:67:6a:ca:c8:ed:28:0f:52:73:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Mar 3 19:28:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c24f42114414374f6e7080147890d506d499b1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:9c:a8:af:ed:37:ad:92:c0:c9:67:5d:20:
4e:85:d8:f1:8b:a4:95:4f:5a:d3:59:54:f0:67:77:
65:7d:ff:81:c2:c7:47:41:92:59:8e:d4:e8:43:f9:
97:e4:05:5e:01:0a:0a:18:39:9a:f0:b8:eb:91:f0:
23:b4:4b:53:bd:b9:e2:71:10:0e:c9:8c:a5:ec:28:
e7:af:03:81:6b:cc:19:e3:79:d0:3a:80:c4:aa:d7:
f5:9b:eb:b0:d4:ef:28:43:f0:f2:19:a4:6f:e2:1f:
99:27:56:16:25:89:37:6e:00:9c:e9:d6:23:09:52:
cd:87:8a:e0:ac:c5:c8:c0:25:a4:3c:94:bc:7d:b6:
3b:21:42:32:5d:67:15:fd:21:52:ad:c3:e5:43:0f:
70:94:79:55:99:3f:17:d7:bc:03:22:fd:49:5b:6e:
95:00:18:e1:bf:2b:64:13:4e:41:01:b7:a6:0a:f2:
c2:7e:91:a3:70:cd:16:e3:97:4c:d9:7c:6b:6b:60:
d4:32:3e:8c:3a:82:fd:e3:e8:13:3f:85:47:bb:4b:
8c:8d:dc:18:b4:bb:d9:9d:3e:1c:48:60:03:bc:89:
92:cd:ea:b6:68:2b:53:f7:b7:fa:15:cd:81:73:4d:
79:37:45:b0:4f:44:90:a2:c0:14:ab:d9:dc:6f:94:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:42:11:44:14:37:4F:6E:70:80:14:78:90:D5:06:D4:99:B1:A1
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/wk9CEUQUN09ucIAUeJDVBtSZsaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5903::/32
2a0e:8080::/32
Signature Algorithm: sha256WithRSAEncryption
6d:aa:d8:34:c2:42:12:34:d0:7d:7d:e7:8e:46:f0:7a:25:a0:
e5:45:bc:e7:47:ca:1e:99:48:19:21:97:34:40:2f:19:55:10:
98:02:ac:15:01:5a:3e:63:1e:1a:6f:30:83:a7:b2:bf:fb:c6:
aa:f2:cd:7c:f4:ce:89:04:a9:1c:cf:b3:53:35:eb:70:c3:b3:
a4:a7:12:55:c9:89:45:b2:c3:44:8c:bb:ff:d5:f8:d7:3b:bb:
08:ab:81:fd:c7:e7:f5:f6:52:3f:cc:a3:83:87:83:ef:b4:1d:
2d:7e:a8:ea:f9:95:ad:de:f4:5e:09:29:b1:65:26:39:69:01:
19:7a:c4:a5:b4:0a:bc:7b:c9:9d:70:ee:95:5a:2d:70:0d:af:
ba:79:51:52:4b:53:a9:4a:9a:7e:bb:6e:bf:0e:38:1f:1e:fa:
93:3b:e5:3c:aa:36:81:03:fe:ff:da:23:0a:30:19:b7:0a:1b:
e7:7a:35:1a:b1:27:b1:74:d8:70:52:86:66:b8:75:40:30:be:
0f:3c:0e:3a:b4:04:c2:49:61:c7:14:b5:95:29:6c:40:49:77:
05:ae:34:cf:26:26:7b:8f:36:a6:a3:da:cf:00:73:ef:20:1c:
f1:16:e7:91:f8:f2:7b:2b:38:53:e5:cc:bd:63:c0:f3:08:17:
b5:cb:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:17 2025 by rpki-client