Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/ITzXVayxPFDUGCAYqXw0_X7NcjA.roa
File: ITzXVayxPFDUGCAYqXw0_X7NcjA.roa (raw, json)
Hash identifier: rRwfwfy/TjMMWidT3w7a2XZ3Kns1DLjfyPeVCHfTByM=
Subject key identifier: 21:3C:D7:55:AC:B1:3C:50:D4:18:20:18:A9:7C:34:FD:7E:CD:72:30
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 019718805C3837B81E1B9A72B169A0FD8315
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/ITzXVayxPFDUGCAYqXw0_X7NcjA.roa
Signing time: Wed 28 May 2025 20:05:54 +0000
ROA not before: Wed 28 May 2025 20:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a01:ef40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 05 Jun 2025 10:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:80:5c:38:37:b8:1e:1b:9a:72:b1:69:a0:fd:83:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: May 28 20:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=213cd755acb13c50d4182018a97c34fd7ecd7230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:c0:f3:7c:a0:43:c0:21:aa:bb:2b:e8:f1:
a1:b6:92:95:1e:64:63:5b:36:d7:09:57:57:f7:ec:
e2:a7:12:6e:94:d7:c2:60:3c:34:97:00:7a:76:70:
02:06:27:39:9d:03:be:18:ab:5b:fe:83:a7:a6:0e:
cf:f7:1d:2f:be:7d:91:d1:1d:6a:89:74:31:2b:79:
98:3d:35:36:38:4a:df:8a:15:ae:7f:2b:c0:cb:32:
8a:34:5b:22:df:1c:1c:54:91:65:a9:d6:d2:c3:02:
8f:10:60:b7:88:13:58:7e:61:22:5f:c0:c7:28:42:
22:02:29:77:e8:00:16:96:10:9a:10:50:50:fc:ab:
3f:41:f8:4c:d6:07:70:a9:58:59:f8:a6:37:94:f0:
54:45:9d:93:53:75:cb:ea:39:97:c1:da:b7:14:ae:
89:38:ca:39:ec:4a:53:33:96:59:b6:2a:bc:a0:15:
c4:e2:12:22:1f:25:aa:85:fd:48:ce:38:47:f9:58:
b4:94:ab:84:76:f4:47:55:c6:f3:2d:62:10:80:a6:
7d:5c:af:ff:c5:16:47:f9:bb:8b:0f:88:a7:e9:ba:
85:c8:33:41:57:63:d6:bd:e0:b0:0f:e8:5d:4b:71:
12:a2:b7:a5:ec:92:1e:ff:2a:8b:ec:78:fe:73:b9:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:D7:55:AC:B1:3C:50:D4:18:20:18:A9:7C:34:FD:7E:CD:72:30
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/ITzXVayxPFDUGCAYqXw0_X7NcjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
a6:22:d4:fb:95:32:17:5c:13:7a:0e:23:71:9b:9b:5a:a7:96:
e4:5e:d5:ed:ef:6f:be:df:48:1f:a2:a6:2a:2f:76:2c:89:ca:
c1:b8:4e:7d:be:7f:c1:88:40:e0:1f:e9:97:49:ae:6d:c2:60:
74:d6:62:1a:e5:30:ff:2e:37:cc:4c:62:ff:6d:cd:e9:8b:cd:
e8:53:3c:49:cf:83:15:15:2e:73:b3:e4:fa:a4:a2:22:ec:ae:
7c:9a:72:d3:c9:06:34:c6:3e:8a:bc:95:32:28:9b:fd:4b:02:
3b:ff:59:05:8f:85:bd:13:f2:24:e7:14:d0:b6:49:1f:e1:d5:
5f:ac:75:93:2d:f2:e0:45:24:28:03:80:e1:be:7f:a6:1d:d9:
5f:19:ca:87:e2:47:4a:86:4c:f5:56:64:10:65:49:d6:c5:dc:
8f:69:3d:42:1e:dc:0b:c3:94:cb:57:f0:6e:0d:a3:76:c1:84:
57:65:5c:ab:53:5b:6b:03:5b:71:73:5a:06:2b:c4:05:00:4f:
50:10:be:16:b8:30:dd:20:7e:bb:5d:86:dd:a2:b5:0f:67:03:
37:4f:4f:0d:16:af:9f:3a:9f:b8:e8:19:eb:97:67:ee:a2:9d:
39:94:6a:21:da:e5:e1:68:57:4b:d1:41:48:80:ce:36:4f:77:
33:50:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:53:10 2025 by rpki-client