Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/PlSqnlYyOqQrwWgO093ptmBuTk8.roa
File: PlSqnlYyOqQrwWgO093ptmBuTk8.roa (raw, json)
Hash identifier: B/4NVIpImgw0M4LtZjS53XokU+bvy+fnegDKhebYqyI=
Subject key identifier: 3E:54:AA:9E:56:32:3A:A4:2B:C1:68:0E:D3:DD:E9:B6:60:6E:4E:4F
Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial: 019424B2CFE2291C3B7104D865AAA3BE24C6
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/PlSqnlYyOqQrwWgO093ptmBuTk8.roa
Signing time: Thu 02 Jan 2025 01:48:05 +0000
ROA not before: Thu 02 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 2a13:7e40:1::/48 maxlen: 48
2a13:7e40:2::/48 maxlen: 48
2a13:7e40:3::/48 maxlen: 48
2a13:7e40:4::/48 maxlen: 48
2a13:7e40:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Feb 2025 12:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:cf:e2:29:1c:3b:71:04:d8:65:aa:a3:be:24:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Validity
Not Before: Jan 2 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e54aa9e56323aa42bc1680ed3dde9b6606e4e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:f4:2a:00:34:55:2f:38:8c:34:4d:1e:52:
67:04:b9:4f:4a:bd:0e:fb:32:7d:02:b5:57:36:83:
e9:c2:cb:54:42:5c:66:da:7d:69:fc:07:04:21:99:
ec:38:23:05:cc:db:3d:d6:b9:ba:d3:b6:c7:b1:af:
f4:e0:e9:ec:53:56:94:d9:9d:3f:88:3c:97:36:2b:
32:3a:99:40:16:81:42:c1:98:97:5b:42:93:fe:d7:
7f:c7:a8:41:7e:4d:3c:33:50:fa:c4:a2:c5:d8:56:
2d:1b:fb:bf:1c:ff:c1:be:07:8b:26:de:29:fc:f4:
f7:06:3e:af:5e:a0:d6:e4:49:42:33:21:be:35:92:
87:1a:c2:bc:0e:4e:33:8d:28:21:82:da:a3:77:f0:
15:34:1a:a9:af:71:80:bd:0a:07:b2:d9:02:49:21:
c3:9f:7a:61:e3:a6:09:ec:d1:66:25:e7:88:f1:cb:
22:90:2a:c0:24:9f:34:85:e1:ea:2a:20:76:a2:72:
bd:1a:b3:5a:5b:c3:a4:26:da:0b:d0:38:34:7c:45:
5d:e4:ec:4d:b0:10:21:62:25:72:4e:07:ff:4a:39:
c7:7e:7c:56:aa:84:57:6c:25:98:3b:b5:b8:7d:0b:
92:62:64:6c:50:50:4c:05:18:a9:62:da:f9:39:99:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:54:AA:9E:56:32:3A:A4:2B:C1:68:0E:D3:DD:E9:B6:60:6E:4E:4F
X509v3 Authority Key Identifier:
keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/PlSqnlYyOqQrwWgO093ptmBuTk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7e40:1::-2a13:7e40:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:1c:d3:8e:4f:ff:a9:36:e4:81:c9:02:47:07:6f:12:b8:43:
0a:d9:f7:38:db:1f:7d:ac:ff:a6:1d:d3:bd:02:8a:51:0b:e0:
15:98:43:4e:9a:a1:f4:37:bd:8b:f5:af:d5:df:70:2f:dd:d6:
53:42:1d:23:7f:03:2c:ee:c1:f4:9c:b4:b2:7d:e8:38:8c:8f:
27:25:43:dc:81:a8:19:25:93:2d:5c:35:44:48:7a:10:f2:97:
a8:c7:84:dc:3b:05:5a:05:9b:ae:ff:1d:c0:b7:1b:db:12:5e:
e8:8d:1b:ff:26:9c:69:0b:b6:6d:fb:35:22:89:50:4d:1c:62:
56:3a:ef:b0:dc:9c:98:cf:d4:06:22:5d:44:a1:f7:d0:eb:99:
00:e3:b6:f7:29:75:c8:3b:8d:29:e5:0b:3e:25:d9:52:29:e6:
4f:a3:14:c2:35:3d:7f:1e:54:44:78:8a:5b:a8:6d:de:7b:1f:
4e:5c:92:42:c7:e5:32:d2:af:74:cf:b0:58:4f:c5:5e:4c:76:
07:f5:39:75:19:b1:c3:4b:85:f6:e6:16:0a:41:d2:c3:9e:b0:
d1:0e:e5:ab:49:ab:47:a0:9b:ae:53:b3:39:3d:7c:e7:f5:6d:
fc:0c:c3:57:8c:c0:e7:6d:e5:64:b0:01:81:8f:31:08:4a:9e:
2a:d1:20:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:34 2025 by rpki-client