Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/1-dPgKhE7jWr74cYOonpW9n7s520.roa
File: 1-dPgKhE7jWr74cYOonpW9n7s520.roa (raw, json)
Hash identifier: bukMCZksVVtanVjDSyKymtXRnbFAEW7h9rfCMk1qknw=
Subject key identifier: F9:D3:E0:2A:11:3B:8D:6A:FB:E1:C6:0E:A2:7A:56:F6:7E:EC:E7:6D
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0195D4285EFA254ABBD35126B3BCCA83E273
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/1-dPgKhE7jWr74cYOonpW9n7s520.roa
Signing time: Wed 26 Mar 2025 20:32:50 +0000
ROA not before: Wed 26 Mar 2025 20:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 2a13:bec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 30 Mar 2025 19:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:28:5e:fa:25:4a:bb:d3:51:26:b3:bc:ca:83:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 26 20:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9d3e02a113b8d6afbe1c60ea27a56f67eece76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:4c:59:ba:18:87:f0:e9:7e:cb:1c:1e:f2:
19:5d:bd:3d:dd:99:32:5e:2c:b2:c7:3d:fe:e4:6e:
0b:0c:b6:d6:68:78:74:19:3a:a9:38:30:96:18:f4:
7f:a0:d1:a7:dc:8a:5b:5c:fc:ec:6b:26:21:1f:7c:
b2:23:5f:96:5d:14:68:a7:8b:f3:ad:6d:49:b3:56:
83:18:06:2c:02:6a:a3:06:be:f0:91:73:4a:51:53:
c6:f2:25:10:96:87:df:aa:db:0f:7b:a5:02:b2:a4:
d1:f0:53:f7:43:7e:0e:81:a9:c6:8a:eb:3e:d6:82:
65:2c:b9:e8:6a:cc:95:31:58:4b:84:76:99:67:b4:
49:94:e1:34:83:5e:12:43:29:33:7a:58:68:90:b0:
5c:e6:87:c1:47:fd:f9:0a:b9:1b:e1:31:2c:fa:e4:
8e:1d:54:dd:ba:93:53:97:59:59:13:66:04:ef:58:
74:3a:8d:4d:c1:53:f2:15:d8:04:29:42:32:60:5a:
92:17:76:55:af:0a:bc:30:fc:b4:ed:ae:d8:c2:1c:
dd:b8:ac:68:93:1e:01:d0:06:13:d7:e6:9f:c8:9c:
6e:66:b9:24:46:c3:be:3e:36:a3:8b:f4:5c:fb:a0:
0c:74:bd:e9:3e:f8:e4:ab:a1:0f:cd:33:8e:15:f3:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:E0:2A:11:3B:8D:6A:FB:E1:C6:0E:A2:7A:56:F6:7E:EC:E7:6D
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/1-dPgKhE7jWr74cYOonpW9n7s520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
32:cd:ac:c8:72:a6:6c:14:21:57:ef:e4:98:fa:20:dc:60:15:
e0:b0:59:0d:b2:68:ec:b5:34:b0:ed:54:10:ac:7d:ee:b8:97:
ef:98:ca:54:e6:72:ea:c8:a4:34:ec:f7:d7:4e:4a:1f:98:25:
73:6e:90:9c:46:1c:e5:64:c4:cb:23:39:3c:53:49:46:93:db:
d2:65:a2:c4:ec:57:68:c0:5f:3d:c2:f3:f1:f8:a7:bd:39:9a:
05:92:6c:96:d2:2b:9a:b6:41:44:47:ab:cf:9e:22:00:1e:0c:
20:20:01:7b:98:cc:e4:fa:43:5f:a3:ec:bc:04:ee:92:f5:83:
b8:be:1a:f1:22:25:86:79:1b:25:1e:60:4e:e8:a5:a5:26:d0:
77:f7:4b:12:5a:b3:a4:2e:16:77:16:99:41:2f:ac:ae:3f:ab:
62:8c:f6:82:9f:71:c4:0e:a6:c1:6a:ed:d0:de:63:75:43:75:
9a:29:da:73:f4:ea:38:65:e5:e0:99:ed:8a:89:68:ef:f3:78:
bc:bf:9a:5a:d6:01:30:4b:ef:0e:d8:f4:b1:34:ea:f2:27:a7:
19:f6:22:6f:2f:7f:e5:52:59:4e:07:25:8b:84:01:27:2d:aa:
8e:2c:16:7a:43:e5:51:e2:f0:3e:a2:8c:a4:b5:b5:8c:58:74:
45:b3:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:04:28 2025 by rpki-client