Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jysyZ4J6p1sZjlrIpr8u0BwhL4o.roa
File: jysyZ4J6p1sZjlrIpr8u0BwhL4o.roa (raw, json)
Hash identifier: szYwq81X9r0MzpGn5Lxbxk6QJSjHqwsqO+tP0u8l4G0=
Subject key identifier: 8F:2B:32:67:82:7A:A7:5B:19:8E:5A:C8:A6:BF:2E:D0:1C:21:2F:8A
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01959ACC38561E5ABFDE49E267EA9494045A
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jysyZ4J6p1sZjlrIpr8u0BwhL4o.roa
Signing time: Sat 15 Mar 2025 17:13:49 +0000
ROA not before: Sat 15 Mar 2025 17:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2001:3080::/29 maxlen: 29
2001:3380::/29 maxlen: 29
2a0b:3e00::/29 maxlen: 29
2a0e:a780::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
2a14:5840::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Mar 2025 13:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9a:cc:38:56:1e:5a:bf:de:49:e2:67:ea:94:94:04:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Mar 15 17:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f2b3267827aa75b198e5ac8a6bf2ed01c212f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:22:92:60:06:3d:c9:5c:f5:c7:b9:03:bf:
4c:a9:0d:c6:d1:74:18:cf:d7:06:25:28:84:44:55:
02:64:a9:7c:be:36:d4:80:17:2f:eb:42:1e:09:70:
53:de:b3:45:f6:31:7c:e2:36:71:42:de:70:51:e7:
72:72:ac:15:bc:2c:2a:f6:90:96:65:ab:4b:2d:6c:
d6:82:76:3a:4a:9d:df:c8:cc:e5:3b:6f:29:d2:c3:
83:8e:4a:a2:21:79:0b:2b:e2:67:af:2c:78:95:c3:
85:3d:52:0a:72:2c:d7:6c:09:e0:bb:f3:60:03:03:
ba:ba:8a:0f:27:13:31:e8:bc:84:b4:42:02:31:c8:
ef:09:db:24:82:6c:b9:c1:68:3c:10:6e:82:66:28:
92:0c:ae:da:f8:6f:a3:1d:1e:60:19:46:35:8b:44:
22:b2:6e:68:79:10:36:25:57:9d:48:48:14:0c:d8:
a0:46:28:d3:7b:72:05:1f:2b:b7:c5:c6:2d:2f:bd:
b1:70:a9:ef:e0:bd:dd:d7:db:0c:c2:5d:73:ae:e3:
83:17:11:bc:75:31:b4:4f:70:bd:94:ab:28:80:27:
22:52:d4:65:3f:85:45:76:d5:ec:4a:8d:9e:e9:14:
2f:46:03:24:13:05:82:5e:c3:3f:98:1b:b5:63:06:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:32:67:82:7A:A7:5B:19:8E:5A:C8:A6:BF:2E:D0:1C:21:2F:8A
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jysyZ4J6p1sZjlrIpr8u0BwhL4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2001:3380::/29
2a0b:3e00::/29
2a0e:a780::/29
2a13:b840::/29
2a13:ddc0::/29
2a14:35c0::/29
2a14:5840::/29
Signature Algorithm: sha256WithRSAEncryption
96:2b:90:8b:8f:6e:76:64:a4:cc:e4:05:4c:2e:47:94:ba:6f:
2c:37:2c:86:d0:78:18:2d:75:58:65:c3:b9:57:7a:e3:e2:0f:
db:88:3b:2b:95:53:80:a4:04:64:e0:9a:2f:c0:32:5f:ab:a5:
76:55:7c:bb:7e:c8:9d:95:fd:ca:bd:68:7f:46:ca:c4:84:c5:
2f:8b:75:46:9f:0e:8f:cb:0c:94:cd:08:25:49:30:ea:36:8d:
a3:0c:6b:49:1e:7e:5f:17:24:df:7e:51:3d:dc:11:b2:7f:dd:
f5:e4:4f:20:95:34:c2:b2:53:36:69:51:39:43:24:84:61:00:
48:7d:be:9f:da:11:38:d1:04:4e:2a:9f:7c:d4:5c:ab:f2:75:
c1:04:06:01:1b:e8:64:af:5c:c2:c1:47:1b:b7:96:98:3c:71:
c2:55:23:38:42:9f:13:46:84:0d:4e:76:c8:74:10:bb:78:06:
18:1e:df:7d:11:e4:a5:0c:01:ea:b6:4c:5f:3a:7c:ca:a9:f5:
0d:bd:7e:a4:79:7d:0c:f0:2c:ff:8d:f2:f1:ce:5f:1e:4f:30:
5f:93:98:11:f8:80:8b:e4:e1:79:d2:84:ed:5f:ab:43:c2:4f:
56:7e:35:7c:a9:00:71:6a:d2:48:d7:7c:90:60:65:12:c8:59:
e4:d0:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:29:50 2025 by rpki-client