Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/HJwXoJ53bbwmwnYigxQMNuL3HZ4.roa
File: HJwXoJ53bbwmwnYigxQMNuL3HZ4.roa (raw, json)
Hash identifier: eJxUPs4nk8VfazqkXzbeq27wfNns2VxeDZYJ10E4oPY=
Subject key identifier: 1C:9C:17:A0:9E:77:6D:BC:26:C2:76:22:83:14:0C:36:E2:F7:1D:9E
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 0196CA122CC7B899E70AF0D78EA73EA8C508
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/HJwXoJ53bbwmwnYigxQMNuL3HZ4.roa
Signing time: Tue 13 May 2025 14:35:10 +0000
ROA not before: Tue 13 May 2025 14:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396253
IP address blocks: 2a03:b8c0:15::/48 maxlen: 48
2a03:b8c0:19::/48 maxlen: 48
2a03:b8c0:1a::/48 maxlen: 48
2a03:b8c0:1b::/48 maxlen: 48
2a03:b8c0:1c::/48 maxlen: 48
2a03:b8c0:1d::/48 maxlen: 48
2a03:b8c0:1e::/48 maxlen: 48
2a03:b8c0:20::/48 maxlen: 48
2a03:b8c0:21::/48 maxlen: 48
2a03:b8c0:22::/48 maxlen: 48
2a03:b8c0:23::/48 maxlen: 48
2a03:b8c0:24::/48 maxlen: 48
2a03:b8c0:25::/48 maxlen: 48
2a03:b8c0:28::/48 maxlen: 48
2a03:b8c0:29::/48 maxlen: 48
2a03:b8c0:2a::/48 maxlen: 48
2a03:b8c0:2b::/48 maxlen: 48
2a03:b8c0:2c::/48 maxlen: 48
2a03:b8c0:2d::/48 maxlen: 48
2a03:b8c0:2e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 May 2025 17:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:12:2c:c7:b8:99:e7:0a:f0:d7:8e:a7:3e:a8:c5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: May 13 14:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c9c17a09e776dbc26c2762283140c36e2f71d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:07:27:b9:65:0c:1b:60:b9:aa:d9:bf:d8:
b5:14:cf:ed:4d:f5:6c:de:74:25:9d:27:7b:ab:dd:
93:59:54:10:d9:09:ed:5b:92:d7:f8:91:52:35:63:
1d:8d:88:e8:97:3e:b5:4c:c8:2b:b8:03:b6:73:e0:
5f:33:5e:08:ec:f0:9e:00:ec:6e:0e:58:a6:1f:d9:
4f:8a:a0:dd:0d:7f:60:c2:53:df:0a:76:01:a1:b9:
3d:53:e4:e2:19:3d:59:00:00:fe:0e:68:ad:8d:51:
fc:d4:4e:cf:35:b3:3d:f9:dc:e0:d4:74:ad:a4:2d:
6e:c9:42:8d:8a:85:c7:d8:3d:7f:94:59:88:4d:5f:
91:43:43:9f:18:c2:70:19:6f:46:d4:35:31:74:02:
41:5f:89:12:7a:f1:a5:2f:bc:9f:c7:3d:60:09:8a:
3f:00:ed:ae:2e:70:f3:56:62:e5:cd:ff:46:47:5d:
ac:29:60:0f:2e:bb:89:0b:eb:ed:e0:1a:c0:e3:fb:
d2:2a:aa:85:79:e0:7d:09:56:db:04:9d:97:15:15:
00:d6:03:d2:17:74:82:e1:33:4c:f8:6a:17:a0:63:
7e:35:f1:1f:d9:14:cc:ed:95:d6:c6:32:47:73:a5:
0a:0d:d1:33:40:02:75:a3:db:db:94:e4:94:98:6c:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:17:A0:9E:77:6D:BC:26:C2:76:22:83:14:0C:36:E2:F7:1D:9E
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/HJwXoJ53bbwmwnYigxQMNuL3HZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b8c0:15::/48
2a03:b8c0:19::-2a03:b8c0:1e:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:20::-2a03:b8c0:25:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:28::-2a03:b8c0:2e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:71:57:f7:3a:ff:a4:a1:3d:ef:0b:13:fc:83:3e:2d:bc:6f:
82:27:8e:1f:d2:29:02:9f:45:9f:47:1c:cf:93:3f:09:08:f0:
31:cb:97:40:29:c3:e6:77:f3:cd:ae:7c:c5:49:33:b3:fb:63:
b7:0b:5c:3e:19:fd:29:df:13:13:6a:40:42:eb:33:62:ba:48:
1f:0d:81:bb:34:43:e6:bc:f1:5b:b0:85:0b:d8:b1:e8:90:92:
f5:92:f2:44:f5:67:2a:3a:91:f2:9a:f9:cb:c9:31:17:63:c3:
b9:04:6f:a4:f6:ce:de:0f:14:c1:57:1f:c0:17:f9:3e:c6:99:
b8:78:89:e2:55:f0:a9:ed:db:91:e2:11:88:3f:a8:9a:5c:2a:
12:44:45:3b:ad:09:1a:e9:60:de:ff:23:46:77:fd:2a:93:a7:
65:f4:f1:80:40:46:75:28:ae:c7:75:ff:d9:2e:96:7b:fa:ca:
fa:3a:ff:b4:7c:4b:66:a7:ac:35:0a:11:a9:cf:83:30:8d:9a:
cd:09:26:3a:9d:69:f5:e8:28:65:a4:41:a0:50:a3:14:b2:5a:
85:6f:ad:c6:e8:ee:72:30:a7:61:37:a9:c5:4a:48:25:e4:5c:
bc:40:a3:36:1f:39:f2:d2:b5:0c:09:70:df:d3:31:52:e4:60:
f7:ba:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:25:17 2025 by rpki-client