Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CpRPP1X6CLw-xMaBswdZlIduUVw.roa
File: CpRPP1X6CLw-xMaBswdZlIduUVw.roa (raw, json)
Hash identifier: rZ1jVhC+il0e5VJasV79r5YmMyVK1+RJ48sD9SnLJ2U=
Subject key identifier: 0A:94:4F:3F:55:FA:08:BC:3E:C4:C6:81:B3:07:59:94:87:6E:51:5C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01959BBED5835563DCCCA91652298E66A6F1
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CpRPP1X6CLw-xMaBswdZlIduUVw.roa
Signing time: Sat 15 Mar 2025 21:38:49 +0000
ROA not before: Sat 15 Mar 2025 21:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 328957
IP address blocks: 2a10:9600::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 17 Mar 2025 20:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9b:be:d5:83:55:63:dc:cc:a9:16:52:29:8e:66:a6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Mar 15 21:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a944f3f55fa08bc3ec4c681b3075994876e515c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:2f:44:07:ab:3e:52:ec:6c:04:10:98:f2:
c3:26:bd:a5:2f:61:56:96:6a:1c:23:24:15:6b:9e:
c4:d3:26:7c:5a:88:66:5b:c8:d8:04:ee:ca:4a:56:
69:58:1c:de:14:1a:69:cf:2c:7b:85:43:28:ca:3d:
48:bc:d4:47:20:7c:dd:b2:d2:f5:d7:a7:24:e9:47:
fe:03:d9:d0:9d:3f:e3:f4:62:f8:dd:5e:23:aa:63:
e5:ca:9b:73:b8:26:1d:45:40:cd:c2:ad:61:5c:fe:
4e:e3:80:b2:54:e9:65:5b:73:ac:cf:c1:82:1d:ed:
8e:1a:d8:12:00:63:d5:ab:0d:9f:fd:5c:7d:7b:28:
65:62:a7:21:62:05:c2:b6:c9:ad:4a:47:0e:fd:3b:
5e:e8:b9:a2:6b:e1:94:2f:a9:b4:98:ab:e1:58:db:
ae:f0:0c:5e:4d:41:1d:b2:54:94:01:be:ae:ad:9c:
cb:cd:39:93:26:16:25:7b:55:64:8e:14:4d:35:1c:
64:17:a7:27:b2:c4:ef:6f:2f:34:c0:72:d8:37:85:
60:04:1d:58:d0:f1:02:7b:d0:2a:f9:6f:de:89:b4:
4c:50:58:e4:cd:d4:60:b1:0c:e5:4a:26:a3:51:ae:
29:f0:52:7c:79:14:f6:db:56:ab:0f:ca:a6:c4:36:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:4F:3F:55:FA:08:BC:3E:C4:C6:81:B3:07:59:94:87:6E:51:5C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CpRPP1X6CLw-xMaBswdZlIduUVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9600::/29
Signature Algorithm: sha256WithRSAEncryption
a4:e6:be:62:7a:f6:92:b9:19:d9:2f:0d:77:e7:54:68:3c:9e:
3a:ce:16:66:4d:f5:25:83:a3:b7:f2:2f:60:9b:90:eb:fa:2b:
65:04:32:b5:16:e3:8d:8d:6c:87:79:fa:86:99:5d:df:51:4e:
50:0d:7d:fa:53:63:68:27:2b:f3:10:16:53:32:4d:a1:6e:89:
ed:61:43:84:62:f2:56:5f:0d:0f:b3:1c:bc:dd:8c:59:9e:68:
0e:13:c2:76:0c:94:28:0a:e3:65:8e:59:c0:dd:42:f9:55:10:
0b:49:89:b9:3f:ac:23:2e:1f:99:fd:67:d8:bd:71:f7:65:09:
b8:63:f5:53:6e:bb:23:b1:94:b5:1c:0f:17:33:ba:6c:b8:89:
c0:a9:dd:2b:cd:10:3c:3c:75:a8:b1:53:3f:f0:44:5a:8a:24:
f6:04:ea:2f:dc:05:16:ef:23:38:a9:3d:63:9d:10:2b:ed:84:
28:e1:bb:65:70:49:b1:f4:27:b4:06:01:25:fe:a2:a8:fd:a1:
5b:96:db:16:e9:12:6c:38:d0:61:d4:08:aa:ff:18:3e:c6:70:
4e:99:cc:47:03:cd:c6:f0:70:e0:0d:a6:d5:0e:35:4f:91:2c:
c4:ae:e9:d1:5b:9a:a5:fb:01:56:d7:d6:55:28:d1:0a:51:56:
b5:cb:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:24:55 2025 by rpki-client