Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/EaKKVppd2MVCi9WrrbEGuGUYToc.roa
File: EaKKVppd2MVCi9WrrbEGuGUYToc.roa (raw, json)
Hash identifier: tGtMmvJHD95lTAe8o/O54Tv2L1B1XdGCSikmP+ITnyo=
Subject key identifier: 11:A2:8A:56:9A:5D:D8:C5:42:8B:D5:AB:AD:B1:06:B8:65:18:4E:87
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 0195D2850CBEDD27CF3A4093FEFB5815FD48
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/EaKKVppd2MVCi9WrrbEGuGUYToc.roa
Signing time: Wed 26 Mar 2025 12:54:49 +0000
ROA not before: Wed 26 Mar 2025 12:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 2a09:a702:6::/48 maxlen: 48
2a09:a702:7::/48 maxlen: 48
2a09:a702:8::/48 maxlen: 48
2a09:a702:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:85:0c:be:dd:27:cf:3a:40:93:fe:fb:58:15:fd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Mar 26 12:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11a28a569a5dd8c5428bd5abadb106b865184e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:7d:7c:b0:f8:4f:b7:3e:84:36:d1:d3:cd:
17:d4:87:d0:85:8b:50:73:ac:fa:e0:76:08:00:21:
80:95:ab:27:45:5b:ed:3e:bf:00:ca:e4:5f:8b:1a:
15:66:f0:43:ee:ff:b2:96:77:c7:a7:8d:1c:e0:36:
70:33:64:0e:e5:24:0b:e2:c3:c7:d4:ea:93:5e:95:
aa:c5:2e:94:ed:f5:8c:3c:0f:d3:68:f1:87:e8:ef:
2a:58:47:b0:a4:82:5d:c2:aa:c6:7c:b6:52:dc:16:
6d:50:75:c8:20:64:26:14:7e:7a:f3:7a:1a:a3:4f:
88:b0:08:6d:ab:83:4b:73:08:81:cb:b8:a8:19:c7:
e0:ca:77:62:e2:2b:a7:01:50:9e:12:8c:d4:9a:80:
4c:c3:58:98:9a:c5:d4:7b:af:0a:98:0c:75:c3:4b:
84:a3:e8:f3:4c:fc:10:f7:d3:b7:9c:a6:7f:c2:db:
d8:6c:54:12:cc:ea:ec:aa:16:9a:c5:46:fe:2b:73:
4f:26:5c:55:b4:93:97:40:a2:0f:c4:64:f9:8b:a1:
43:a6:99:15:26:68:48:f5:bf:db:ad:4d:31:7b:65:
f7:ac:4f:7c:51:fd:38:38:40:0c:cb:92:0a:04:87:
85:62:c4:aa:08:b7:39:07:fc:2e:cf:2a:8c:39:e0:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:8A:56:9A:5D:D8:C5:42:8B:D5:AB:AD:B1:06:B8:65:18:4E:87
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/EaKKVppd2MVCi9WrrbEGuGUYToc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a702:6::-2a09:a702:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:b3:86:09:6b:f6:cf:4e:33:21:0d:cc:fb:d6:e3:aa:aa:5e:
af:c4:a4:6c:20:08:f0:38:d1:b7:74:52:c1:27:21:37:85:ce:
b5:e5:89:c7:6d:c6:c6:ac:1e:71:87:0d:3d:34:e8:a9:73:e1:
01:8a:36:03:4c:96:4b:eb:64:78:ac:d9:f6:b5:03:21:5c:ed:
33:4d:d8:eb:63:ca:5a:8c:82:8f:7f:6f:ba:73:f6:77:37:f8:
3e:25:be:5a:11:58:04:93:cb:4b:79:d3:d1:c8:1f:01:19:52:
79:c0:07:06:95:12:26:2a:35:f9:42:12:5e:bd:08:76:c3:54:
0b:16:f4:6e:74:66:6b:2a:78:57:d6:f0:3d:b9:55:b3:5a:63:
12:08:f3:aa:6d:9e:10:07:e4:68:bc:be:6d:1e:8d:24:40:22:
2d:64:fd:14:58:e7:3e:41:ce:c8:e4:bc:fe:02:93:cc:b9:85:
16:4c:80:6e:57:a5:99:77:d9:57:8c:ad:2f:41:94:51:d4:f0:
29:e4:b5:4f:3b:cb:bc:cc:73:02:8f:c4:40:ce:dc:3a:76:8b:
83:23:9a:f6:66:53:74:12:67:dc:bf:b3:c2:7d:9d:2f:2a:06:
3b:7c:d4:79:8a:94:8d:c9:86:00:dd:cc:07:7d:2a:a6:03:fb:
82:63:78:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:12 2025 by rpki-client