Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/DVwerUr9ahU8kEczWHrOsi_s7XQ.roa
File: DVwerUr9ahU8kEczWHrOsi_s7XQ.roa (raw, json)
Hash identifier: BUTFEZo/G+5rkRezkiqmrG/i5ubNnKKv1OUKSL7AFFA=
Subject key identifier: 0D:5C:1E:AD:4A:FD:6A:15:3C:90:47:33:58:7A:CE:B2:2F:EC:ED:74
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019510707E08104BD13589BF89507E673A19
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/DVwerUr9ahU8kEczWHrOsi_s7XQ.roa
Signing time: Sun 16 Feb 2025 20:26:02 +0000
ROA not before: Sun 16 Feb 2025 20:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:63c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Feb 2025 11:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:70:7e:08:10:4b:d1:35:89:bf:89:50:7e:67:3a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Feb 16 20:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d5c1ead4afd6a153c904733587aceb22feced74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:e5:60:90:c4:88:44:d3:e7:5c:52:da:6b:
9d:5f:e8:d0:67:41:8c:72:a8:18:36:0a:8f:8f:c8:
c9:09:c6:fc:3c:9f:a8:1d:c5:b1:8f:0d:12:f2:22:
d5:78:45:ec:3e:66:fc:93:89:8d:3e:0d:69:69:70:
2d:fe:29:a6:26:97:6e:bd:4e:41:f1:05:99:84:f0:
dc:9d:40:b0:a8:b0:9d:93:1a:43:31:fa:90:93:28:
01:7e:ee:86:e9:be:7b:b0:ed:8c:60:31:f9:c2:a7:
ca:df:d6:31:e6:5f:f9:33:79:28:13:c5:d4:10:ae:
6e:cf:8c:9c:b5:64:50:da:a0:26:6d:79:c1:65:45:
ff:62:83:c1:e2:38:ef:c5:a8:50:64:8c:fb:17:f9:
ce:da:16:30:47:40:11:93:71:81:f4:77:4b:a4:75:
6b:bf:64:5b:89:3d:ad:ff:d9:8b:7b:c2:85:66:ba:
c0:5b:b2:21:e7:84:4e:76:f2:3c:19:b3:6c:2f:fd:
b4:52:da:4b:da:48:ad:bf:ab:bd:4b:b7:ec:e4:1c:
5d:d8:6a:ce:24:97:20:be:19:51:ae:e4:a5:1b:8e:
08:81:97:54:38:0a:15:31:d3:7c:a4:3b:ea:26:24:
e6:ae:be:e1:eb:c9:2f:c9:77:d1:79:4e:d1:ce:8d:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5C:1E:AD:4A:FD:6A:15:3C:90:47:33:58:7A:CE:B2:2F:EC:ED:74
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/DVwerUr9ahU8kEczWHrOsi_s7XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:a8:de:e1:4a:95:98:75:29:92:5d:73:4d:8a:b2:0a:ae:93:
61:d7:8e:88:ca:4d:33:d5:a8:21:16:05:3e:87:d7:1c:fc:37:
32:e0:60:8d:ff:76:56:ec:1f:a2:28:ae:f8:d8:b6:db:c8:07:
85:7c:fb:e8:11:14:8d:1e:ad:9a:71:05:8a:1f:ea:33:56:ab:
27:ad:bb:91:a5:59:6c:19:2e:49:5d:ad:20:f5:91:3b:33:c4:
2d:e5:89:d3:b5:1f:55:44:30:2e:dd:b8:ea:47:f4:89:60:03:
cc:60:f3:8a:e8:de:3d:e5:e6:28:f1:f2:68:a3:bb:84:b5:75:
3e:09:76:c0:25:50:f1:7d:90:51:d2:5f:a8:82:7e:be:9a:3a:
69:a5:0b:6d:6c:09:19:08:44:9c:58:bf:0d:00:94:aa:55:ab:
5e:7a:c5:90:d3:0d:6a:b5:08:9e:47:6e:71:6d:31:ea:ad:9c:
0e:60:60:da:35:86:cf:f2:7c:26:ee:37:33:7e:2c:b5:c3:c7:
14:19:27:63:28:46:67:10:67:2f:c5:76:65:be:09:98:29:25:
ab:34:48:e1:e8:b5:42:ae:b3:44:43:51:5b:26:4f:f2:43:08:
f6:79:de:bd:4e:fa:bf:85:ce:a6:56:02:1a:02:f5:71:42:f3:
ff:35:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:50 2025 by rpki-client