Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/p6b5EpB9c04G0H9epOzZ502GLYU.roa
File: p6b5EpB9c04G0H9epOzZ502GLYU.roa (raw, json)
Hash identifier: v+k+Z0JEiTZ2gXLB8F8c6K6wI0rlhBKKMatrNLNpk+s=
Subject key identifier: A7:A6:F9:12:90:7D:73:4E:06:D0:7F:5E:A4:EC:D9:E7:4D:86:2D:85
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 01941F8C2394683040FC4858D64F0FDA4EFA
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/p6b5EpB9c04G0H9epOzZ502GLYU.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25521
IP address blocks: 193.0.220.0/23 maxlen: 23
2a13:8f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 13 Feb 2025 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:23:94:68:30:40:fc:48:58:d6:4f:0f:da:4e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7a6f912907d734e06d07f5ea4ecd9e74d862d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:2b:af:dc:c4:8c:47:8c:60:38:ac:82:50:
b0:1d:d4:c7:a5:f7:4c:d2:7f:fd:16:87:8e:02:ac:
75:02:a4:77:99:59:1a:b9:6a:61:a1:ff:bd:82:6a:
36:35:51:67:aa:32:47:53:12:14:82:41:5f:ee:49:
64:df:28:4e:ee:c1:c0:92:d1:8a:2d:9d:37:24:16:
dd:88:1c:5b:5f:df:04:e2:09:03:57:df:c7:54:37:
ae:12:3e:f1:31:b1:5c:96:c5:53:da:4d:78:27:4e:
e8:39:a6:e3:0c:80:20:57:3a:f2:7a:96:78:d6:e0:
15:eb:91:13:22:37:f1:22:c3:3e:6a:d4:bf:78:fc:
4a:c8:c0:49:54:e2:95:9a:61:45:ee:95:7b:9f:53:
ed:4c:94:e3:de:fe:39:b1:bf:4c:e0:bb:85:5a:71:
75:e3:0f:9d:01:71:7a:44:7a:e4:cc:0d:e3:0f:74:
b3:97:37:b0:aa:16:68:cc:33:a0:27:d0:96:a0:bd:
6c:5b:f0:ad:09:90:e6:b1:af:05:ac:ef:9e:c8:27:
0c:a3:65:46:44:db:07:8f:ae:47:1b:f0:f3:d5:a3:
f3:de:ca:6a:6c:9b:48:54:af:5b:60:de:82:29:d8:
69:89:12:17:b3:5d:f8:12:e6:fa:55:b9:92:b9:57:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:F9:12:90:7D:73:4E:06:D0:7F:5E:A4:EC:D9:E7:4D:86:2D:85
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/p6b5EpB9c04G0H9epOzZ502GLYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.220.0/23
IPv6:
2a13:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
1a:04:95:d6:be:38:50:6b:42:c3:96:66:7c:66:64:2c:e9:eb:
1a:53:ba:59:7d:da:74:42:70:89:d2:1f:72:4a:be:42:f1:2e:
91:49:d2:da:a2:d3:56:0b:1c:a5:83:b3:22:6b:34:eb:39:e7:
a4:1b:71:da:07:6d:07:f0:5b:89:8c:b3:86:33:ca:e1:d5:66:
3e:b1:18:09:49:9f:91:e8:c0:88:b5:26:24:ed:9c:09:76:6a:
4d:76:2d:0e:cb:93:f7:43:3d:f2:52:f5:80:cc:f0:df:d5:47:
37:0c:41:a8:1c:70:6c:0b:71:88:15:63:1f:0e:3b:84:e8:22:
a6:95:48:00:ed:bb:8d:76:47:8e:3b:f8:4d:ff:a1:38:3e:7e:
19:d9:d9:9e:eb:ca:ca:94:2b:dd:fe:50:24:eb:e8:4e:03:d6:
ea:5f:1e:3b:25:e5:41:13:4b:7f:fb:08:6f:45:21:99:20:dc:
88:53:2c:88:29:ff:0d:8d:a9:c1:b9:5d:8f:ab:fe:3c:b7:03:
a6:f3:6d:f3:36:e8:bb:59:4b:9a:c7:ae:3f:82:5e:e6:10:2b:
2e:cb:a8:f5:c3:82:d9:bb:e8:64:6d:fc:f7:9a:0a:f1:e4:34:
a7:a2:39:9d:e2:e1:30:d6:78:9b:04:18:13:b0:c9:f5:d3:d1:
93:8a:68:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:32:13 2025 by rpki-client