Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i4AY4zqhGXYtJG1QjuBUH2wjSvQ.roa
File: i4AY4zqhGXYtJG1QjuBUH2wjSvQ.roa (raw, json)
Hash identifier: DIbD/YFYzVCI9nDGhkA7AwKezSv0B30RU+VnxhaHgAg=
Subject key identifier: 8B:80:18:E3:3A:A1:19:76:2D:24:6D:50:8E:E0:54:1F:6C:23:4A:F4
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01946F514E21DDD69D9BA40AC32325DA7E6A
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i4AY4zqhGXYtJG1QjuBUH2wjSvQ.roa
Signing time: Thu 16 Jan 2025 13:33:06 +0000
ROA not before: Thu 16 Jan 2025 13:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 546516
IP address blocks: 2a0f:c840::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:51:4e:21:dd:d6:9d:9b:a4:0a:c3:23:25:da:7e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 16 13:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b8018e33aa119762d246d508ee0541f6c234af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:57:48:94:37:2f:b4:26:21:15:84:f8:a7:
eb:c8:bd:b7:e8:3c:1d:5c:86:2f:75:3b:46:d0:7b:
37:64:aa:41:7c:24:5d:68:0b:2f:9e:ea:69:e1:d6:
e4:ae:4b:41:bd:cc:c0:93:4a:da:51:7e:36:56:b9:
d1:1f:4d:ed:6e:99:0c:db:19:43:11:6c:de:a0:52:
ae:bc:95:c1:9f:26:52:1a:1c:68:cb:35:08:5d:50:
46:50:47:97:0e:78:5e:b3:18:f7:3d:ab:dd:27:c2:
37:30:bc:84:68:80:4b:df:29:7d:16:ed:70:44:09:
93:63:48:c1:d2:84:e1:dc:e5:5a:56:12:b4:b2:f7:
c8:1b:97:bd:d8:7a:5a:a9:2f:6c:a3:f5:55:70:5b:
10:0c:05:83:aa:43:b7:9b:0c:5e:48:79:b7:70:05:
0c:da:67:ca:34:14:3e:4d:81:9e:e0:43:02:cb:8c:
86:bf:be:7d:44:29:b3:05:6a:a7:da:5f:56:85:36:
61:07:67:7a:54:84:6d:91:6b:ee:ca:29:fb:1f:cf:
5d:54:c4:e9:6b:ed:f7:cf:6a:49:ee:8b:0d:23:6c:
33:da:4a:c1:a1:ee:20:6c:29:d1:b5:27:e8:79:af:
3e:ac:55:e8:d2:32:cf:70:ea:96:74:60:bd:41:5b:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:80:18:E3:3A:A1:19:76:2D:24:6D:50:8E:E0:54:1F:6C:23:4A:F4
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i4AY4zqhGXYtJG1QjuBUH2wjSvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:c840::/29
Signature Algorithm: sha256WithRSAEncryption
18:10:ff:ee:bf:98:4f:e3:43:5f:04:ef:0c:52:28:38:73:bc:
d3:00:75:ca:67:fd:87:b9:b5:6c:f6:9f:00:69:cd:34:37:2c:
f1:2c:49:65:98:c4:07:8c:79:4d:f2:cb:dd:65:9d:50:8b:da:
d6:db:79:f5:fd:a8:da:91:10:8c:36:22:ad:de:83:cb:d5:82:
60:a2:fa:a5:c6:e2:f4:7e:4a:fa:25:15:0c:4d:93:c5:a2:f7:
03:f6:c9:69:ec:9f:a8:e6:35:31:f7:eb:eb:4d:c6:09:b8:82:
e2:d5:d0:d6:95:bb:7d:9d:71:67:46:0e:9f:01:6f:21:44:85:
9c:aa:72:67:6d:f8:21:55:81:0b:2d:c9:ba:c8:8a:73:17:2e:
9b:fe:d6:0e:73:12:26:ba:06:d9:35:2d:4a:0e:e7:e2:34:a2:
74:cb:fb:52:a1:5c:2f:98:3f:94:93:29:fc:db:f2:29:e1:b9:
1c:7c:16:e4:13:08:34:53:50:34:2d:6c:b0:70:38:b4:c0:c7:
e5:f8:13:ef:60:a0:a5:c3:4c:40:8a:b0:ce:15:58:dc:79:5a:
14:a6:67:2d:e4:cd:08:ab:2b:f7:e2:a7:d0:ce:53:2f:95:dd:
28:02:fb:7d:58:5e:c5:9d:44:48:48:5b:ff:e8:c5:af:45:0a:
b6:15:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:19:19 2025 by rpki-client