Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/I6NGrw9XRx99vHMcxRCyRNuWLfY.roa
File: I6NGrw9XRx99vHMcxRCyRNuWLfY.roa (raw, json)
Hash identifier: 1eSRlhelXPodw6TCSaZkKqifO+FeG50CbwAP0VPi46k=
Subject key identifier: 23:A3:46:AF:0F:57:47:1F:7D:BC:73:1C:C5:10:B2:44:DB:96:2D:F6
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 0196AAEBECE4B51F4059C79A77C8B34F9520
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/I6NGrw9XRx99vHMcxRCyRNuWLfY.roa
Signing time: Wed 07 May 2025 13:25:10 +0000
ROA not before: Wed 07 May 2025 13:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202381
IP address blocks: 2a0e:2300::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 07 May 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:eb:ec:e4:b5:1f:40:59:c7:9a:77:c8:b3:4f:95:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: May 7 13:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23a346af0f57471f7dbc731cc510b244db962df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:bc:fd:eb:7e:62:a0:80:24:23:e8:f2:2e:
0c:39:a4:ac:de:cf:c2:cf:03:17:4a:b2:70:a9:74:
07:17:fa:15:65:50:fe:88:23:c8:4a:19:20:1b:4b:
e0:a2:6d:e2:85:59:62:cf:52:13:50:8e:9f:3b:3f:
85:35:18:43:75:52:e9:26:65:2f:49:c5:91:27:06:
20:f2:29:88:1a:88:30:49:a7:ce:11:47:bf:96:71:
4b:fb:5b:f9:9f:b1:36:a2:58:46:92:a9:7d:f5:f9:
4f:2e:3d:74:80:dc:04:0a:7e:60:bd:04:91:0b:f9:
6b:b2:91:e8:9b:bd:2f:14:5e:cf:c9:c1:38:5f:d1:
1b:f2:d4:e3:41:fc:17:97:d2:b6:ca:8d:c1:24:29:
b0:97:80:c0:be:4d:70:5c:7a:2f:d1:46:6e:da:66:
fa:57:fe:2a:9e:43:48:7a:45:92:a8:ca:92:4d:c5:
51:b9:0a:ce:b4:d3:04:b9:e4:ad:4c:22:c6:fb:f4:
12:80:10:31:91:98:04:51:e9:8e:69:42:cf:85:36:
ca:99:a5:ba:d7:54:5c:3b:a2:e3:54:60:b3:3b:26:
55:15:04:18:df:5a:a3:9e:73:4f:b8:c6:25:88:39:
1b:55:de:fe:25:31:da:bf:10:c1:d0:57:33:69:d2:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:46:AF:0F:57:47:1F:7D:BC:73:1C:C5:10:B2:44:DB:96:2D:F6
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/I6NGrw9XRx99vHMcxRCyRNuWLfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2300::/29
Signature Algorithm: sha256WithRSAEncryption
48:43:10:6e:5d:32:39:41:ca:54:37:c4:13:96:c9:01:5a:a1:
b9:26:27:42:3c:f5:94:07:63:0b:ef:cd:b9:c7:92:4b:a0:c5:
7a:19:6a:f4:53:c8:84:88:8b:d7:db:9b:05:97:3d:a8:bc:d1:
74:31:d6:21:c6:e0:ed:4b:c8:8f:73:ae:9f:fe:f6:01:5a:80:
15:c7:c7:9a:b6:cf:32:0e:58:8c:d3:f9:a3:ce:96:26:c9:ff:
88:1b:fa:fa:a2:7e:a7:2d:75:37:40:2e:d3:37:ff:f5:76:34:
98:50:aa:61:38:2b:e8:4c:b3:5d:70:a2:d5:33:5e:bd:6f:ab:
29:47:24:47:22:f1:a3:27:69:d5:bc:a7:ea:9e:c0:8a:ad:d9:
c2:0c:00:d2:1c:a1:50:df:38:f4:07:f7:48:f3:d5:73:fa:37:
ba:20:7e:47:f6:14:4a:d7:9d:44:14:84:40:d4:3f:e7:01:a6:
57:ca:fc:ed:ca:b8:1a:f2:06:32:58:20:7e:3c:fc:a4:86:bb:
ff:d7:f2:be:b0:a5:8b:85:c9:b1:02:df:2c:78:23:77:26:88:
65:09:55:69:5f:1a:58:6c:36:63:bb:5f:ca:25:ad:78:47:b6:
96:35:44:63:04:41:12:48:4a:be:4a:96:b4:c5:5e:33:41:0c:
44:9e:14:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:34:21 2025 by rpki-client