Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5KFEGY2d2RI4xzHJ8Dfs21RY6aY.roa
File: 5KFEGY2d2RI4xzHJ8Dfs21RY6aY.roa (raw, json)
Hash identifier: 5s6v881wR09nmg0igyzJgHqr0U5F3cgpcKurup6xTGE=
Subject key identifier: E4:A1:44:19:8D:9D:D9:12:38:C7:31:C9:F0:37:EC:DB:54:58:E9:A6
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01970CA73825799C91A2195808015C19A731
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5KFEGY2d2RI4xzHJ8Dfs21RY6aY.roa
Signing time: Mon 26 May 2025 12:52:54 +0000
ROA not before: Mon 26 May 2025 12:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 2a09:3b04::/32 maxlen: 32
2a0f:c583::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:a7:38:25:79:9c:91:a2:19:58:08:01:5c:19:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: May 26 12:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4a144198d9dd91238c731c9f037ecdb5458e9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:5e:fa:fa:32:31:77:f3:84:00:bb:ac:99:
3a:1d:9c:44:85:8d:7e:7c:2e:38:63:bd:0e:a2:3c:
de:37:98:ec:79:fc:f7:68:d1:50:06:00:0d:fe:05:
1d:a1:92:37:d8:13:b5:23:71:99:2f:d3:c7:77:2c:
6d:4c:dc:93:ea:20:32:f2:a5:10:66:fe:36:18:13:
4c:7a:37:1b:d0:5a:4f:08:fb:ef:61:6e:32:1f:0a:
74:76:48:13:05:18:8a:c7:f9:d8:a0:10:20:3e:6c:
80:69:e2:c3:43:77:bb:35:26:72:a5:0f:27:14:cb:
03:50:35:f5:f5:b3:ae:dd:1b:14:9a:38:86:a0:30:
6f:a1:d0:6e:6d:be:70:17:09:2b:b2:50:9b:c3:f4:
13:ef:e7:08:73:e9:93:d8:96:b1:4b:81:7d:5f:e4:
cd:0d:28:ba:63:4d:8e:45:8c:63:3a:0a:b5:79:9a:
0a:87:91:2a:2f:4d:87:95:ca:a9:36:3d:b0:92:f0:
ae:d3:51:9e:b4:08:89:aa:8f:e8:e9:9c:af:a6:09:
5c:7b:be:9a:b6:4a:e2:bc:4a:97:f9:10:1f:2b:b4:
37:2c:45:c1:0c:72:ec:18:84:a3:dc:a5:7e:e6:ff:
c4:75:41:a6:f4:f2:24:05:af:9f:9e:73:39:d0:72:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A1:44:19:8D:9D:D9:12:38:C7:31:C9:F0:37:EC:DB:54:58:E9:A6
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/5KFEGY2d2RI4xzHJ8Dfs21RY6aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3b04::/32
2a0f:c583::/32
Signature Algorithm: sha256WithRSAEncryption
ac:18:7c:f4:ab:09:58:85:93:43:05:8b:2a:f3:ea:79:6e:08:
dc:1d:e3:69:9d:25:24:60:0d:09:d0:3d:1d:3c:27:f6:95:9c:
bc:1f:8c:94:aa:69:66:f8:d9:4d:23:15:97:2e:80:ce:72:3a:
00:53:6e:06:80:ca:b0:be:d9:a7:4c:3c:7e:42:47:58:45:77:
d2:9a:0b:5a:80:0b:40:70:da:22:e5:29:51:3e:fc:f8:ae:ca:
99:ca:49:37:29:4c:27:a7:b7:79:5d:a2:07:f2:eb:92:8d:36:
d3:4b:17:7e:33:3a:c1:b2:2a:2f:99:95:51:ec:37:d5:94:80:
05:ba:e7:0e:65:b1:3a:57:1d:74:81:17:39:05:54:96:fa:0c:
cc:58:35:16:03:7d:fc:91:46:30:cf:6e:a6:3e:7d:5f:71:a2:
ca:04:9c:ae:5b:c8:47:b2:87:70:e9:09:db:ea:a4:a7:1f:e8:
cf:8d:4c:8b:77:c4:ea:38:f6:83:ed:3a:39:b1:25:28:b4:61:
7d:88:d8:3e:75:0d:63:0d:0a:4e:cb:b5:8d:c7:7d:2c:81:43:
98:95:ce:d7:be:f7:53:d7:1e:bc:7b:92:af:e4:81:22:7b:7f:
78:28:2a:e1:57:b6:91:80:3a:fe:b1:25:8b:98:4c:d5:fe:bb:
b7:8a:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:10 2025 by rpki-client