Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/URfkcnUR2D1GtOXiMlMKWtlPyRM.roa
File: URfkcnUR2D1GtOXiMlMKWtlPyRM.roa (raw, json)
Hash identifier: SRx7J/VyfXAODWAEjqL6lNUyqOzm0k5lGEoG+T1bwvg=
Subject key identifier: 51:17:E4:72:75:11:D8:3D:46:B4:E5:E2:32:53:0A:5A:D9:4F:C9:13
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01971C40C018724CCF5DF2A291684DAADFC8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/URfkcnUR2D1GtOXiMlMKWtlPyRM.roa
Signing time: Thu 29 May 2025 13:34:54 +0000
ROA not before: Thu 29 May 2025 13:34:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 18:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:40:c0:18:72:4c:cf:5d:f2:a2:91:68:4d:aa:df:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 29 13:34:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5117e4727511d83d46b4e5e232530a5ad94fc913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:6a:c2:cd:3e:08:9c:03:85:e0:5f:a0:ed:
a7:7b:87:69:7f:7b:45:06:a6:2a:4d:23:84:81:7e:
70:c9:79:b4:93:28:ae:00:81:2c:90:65:81:94:2f:
66:6b:4c:cb:eb:ec:1d:98:b6:25:88:7c:f8:8d:7e:
c3:3f:94:3d:6f:94:7b:94:39:3d:87:1c:f1:8e:c4:
6c:45:13:bf:4b:d0:e4:26:99:2e:25:69:b3:01:79:
5d:b1:64:66:0d:31:1e:d8:93:7a:b4:bd:5b:f2:7a:
41:6e:62:fa:53:0b:eb:53:8a:d6:bf:84:4a:91:48:
da:46:d5:10:d0:78:e1:f3:01:cf:b9:22:37:39:ac:
e5:fe:f0:a3:47:bc:d4:e8:2c:07:23:9d:de:84:fa:
65:d5:7c:7e:ae:cb:a1:f6:95:e6:57:0d:ea:f4:fd:
32:43:3a:ea:82:cb:5b:3f:1d:81:c8:22:df:cc:20:
ed:87:04:62:85:ae:54:14:18:9a:71:f6:da:b2:a7:
96:1b:d0:62:0e:1a:34:23:ca:19:09:5b:f2:8d:b0:
6a:0b:94:9f:4c:12:db:4c:f3:83:2c:d3:78:4a:9e:
67:5a:9a:a3:30:b1:02:89:73:5b:70:ba:bb:e1:c3:
82:7d:1b:f4:dc:06:52:06:ea:10:c9:6b:97:60:de:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:E4:72:75:11:D8:3D:46:B4:E5:E2:32:53:0A:5A:D9:4F:C9:13
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/URfkcnUR2D1GtOXiMlMKWtlPyRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:bb:ea:10:61:8b:a9:66:f2:1d:3f:5b:bb:8b:0e:40:e2:ea:
6b:41:42:e5:ab:c2:db:13:c6:61:48:16:a4:21:a0:5b:26:48:
f5:ef:42:36:ed:d1:65:30:09:29:51:fd:d8:ca:d5:e1:db:e7:
9b:f1:c1:c6:ae:b7:db:51:eb:f4:7d:67:dc:02:f4:db:48:20:
3c:9c:a9:3d:c7:ab:09:73:65:1c:c7:ad:0e:9b:1f:d9:74:89:
50:07:91:ec:3c:51:74:fd:13:ad:81:cb:3d:97:e2:31:b9:10:
d5:0e:f8:00:95:18:da:aa:f5:65:01:f3:b8:3d:91:bc:ca:88:
bb:4d:27:fc:99:ff:f5:4d:0e:55:94:57:0f:56:bb:29:a2:29:
18:e0:7d:7e:7e:4b:82:cb:a6:51:9f:96:b5:71:f5:4b:88:2c:
06:3b:1e:f6:58:15:63:ac:18:3a:e3:bc:ae:35:36:84:51:31:
42:1e:2d:d5:70:00:86:50:bc:d0:49:87:5f:8a:db:02:ed:53:
a8:1f:4a:45:df:14:8e:fe:4c:55:ae:ec:b7:b1:f2:27:80:fb:
a7:5c:a3:df:4c:04:ef:32:df:c7:2c:b5:6f:bf:c4:5b:88:78:
de:07:a6:f5:7b:ec:69:bd:90:40:f3:82:1d:9e:3c:90:67:b2:
98:e9:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:34:18 2025 by rpki-client