Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/_-5bygvPNF33agrYIqmn3XvPqWU.roa
File: _-5bygvPNF33agrYIqmn3XvPqWU.roa (raw, json)
Hash identifier: PlEtwE64j51VLU9XYghSPTRY7Oei95biVvMlcah+qTI=
Subject key identifier: FF:EE:5B:CA:0B:CF:34:5D:F7:6A:0A:D8:22:A9:A7:DD:7B:CF:A9:65
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 01905AD490F30CF084616EAC84C56B8A0E33
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/_-5bygvPNF33agrYIqmn3XvPqWU.roa
Signing time: Thu 27 Jun 2024 17:53:18 +0000
ROA not before: Thu 27 Jun 2024 17:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215002
IP address blocks: 2a13:75c1:201::/48 maxlen: 48
2a13:75c1:400::/40 maxlen: 48
2a13:75c1:4b3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 29 Jun 2024 07:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5a:d4:90:f3:0c:f0:84:61:6e:ac:84:c5:6b:8a:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Jun 27 17:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffee5bca0bcf345df76a0ad822a9a7dd7bcfa965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:1f:13:4f:cf:9d:7b:2a:22:c1:64:16:20:
b7:18:f6:ff:11:12:13:30:94:a3:2e:4a:3a:2b:36:
23:d2:1b:6c:7f:a0:fd:73:ed:6f:6c:d7:b4:1c:c5:
5b:46:0e:de:d1:96:31:59:55:86:51:42:a5:2f:32:
03:d7:1e:6c:5d:ca:fc:42:e0:58:a7:fe:fa:ac:5d:
7b:df:f8:87:2b:96:4f:00:4c:40:ef:65:64:6b:97:
8d:74:e4:4e:7d:15:70:4d:8f:e5:ed:e7:07:e6:17:
ab:16:85:3c:ad:d6:ac:39:59:9f:a0:50:ec:35:bf:
96:17:40:55:4e:b6:34:c6:3a:b7:89:39:56:e2:4d:
5d:46:62:d9:54:72:30:76:1b:96:c8:f2:96:01:1a:
5c:68:2a:b2:a0:7d:a9:95:8f:b9:9b:ee:28:4c:ba:
c7:6b:f3:9a:31:e0:8e:7d:0d:5c:c3:6e:65:7b:11:
85:04:9f:8f:6e:f1:0f:63:62:43:06:54:7e:12:66:
41:08:52:34:20:45:10:1b:e2:be:4d:5e:23:8d:46:
26:15:e6:4e:be:aa:d6:06:45:c0:1a:66:a2:e3:09:
c7:2d:60:c1:6b:63:c3:37:2b:14:04:6e:cb:a6:1b:
e5:9b:54:e5:ea:e0:05:ac:3a:3c:77:e3:24:a9:c7:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:5B:CA:0B:CF:34:5D:F7:6A:0A:D8:22:A9:A7:DD:7B:CF:A9:65
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/_-5bygvPNF33agrYIqmn3XvPqWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:75c1:201::/48
2a13:75c1:400::/40
Signature Algorithm: sha256WithRSAEncryption
25:c6:f5:07:34:db:c8:c2:68:02:be:b9:11:06:0b:52:35:8b:
be:57:c4:0d:cd:6f:ef:aa:98:cb:dc:ec:5f:0c:9c:73:66:7c:
d1:c2:4f:47:b7:c5:3e:b6:ec:9d:d8:8a:07:97:07:ce:98:03:
3f:84:a7:85:43:bc:25:32:c5:38:5c:40:3c:f2:8b:6d:39:67:
51:a8:79:5e:ac:25:aa:6d:79:a5:2c:21:65:54:93:7e:1f:42:
07:b1:16:49:58:b5:60:b5:f3:db:26:a5:0c:eb:fb:d4:5b:b9:
57:5a:d5:5c:8c:a3:ae:c7:e0:c5:e4:56:98:79:63:75:76:c5:
47:da:1a:c1:c6:6f:9c:5c:12:3d:b6:8f:ab:ae:3d:5b:22:5c:
51:9a:ed:2b:b9:b5:bd:a5:a5:6f:1a:f8:df:88:a2:3a:95:0b:
96:38:98:ab:d5:71:19:f2:c0:6d:2b:f8:db:c6:0c:25:87:30:
94:0c:1d:51:a2:64:12:de:58:b2:31:11:0b:25:ac:ac:a7:dc:
48:09:0d:fb:8d:14:96:a8:46:97:3c:0c:c5:e2:59:f9:f6:09:
5b:40:b1:c0:d0:db:c3:4e:a1:19:3d:aa:cc:b5:06:f0:dd:cb:
d3:2a:07:a1:a2:ce:d4:ee:03:2c:a6:25:aa:5b:d9:c3:20:1a:
b1:fa:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:55:53 2025 by rpki-client