Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/9SV0-QFrnlR7wwTPXIbj5iTgnuk.roa
File: 9SV0-QFrnlR7wwTPXIbj5iTgnuk.roa (raw, json)
Hash identifier: xcCk+XLKZYbegl3nnNL3of9fK+ioggHWjP7246XO3Lo=
Subject key identifier: F5:25:74:F9:01:6B:9E:54:7B:C3:04:CF:5C:86:E3:E6:24:E0:9E:E9
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0194DB29F1064D3E8B3357A0F81D364F5EA3
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/9SV0-QFrnlR7wwTPXIbj5iTgnuk.roa
Signing time: Thu 06 Feb 2025 12:09:06 +0000
ROA not before: Thu 06 Feb 2025 12:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a11:b785::/32 maxlen: 32
2a12:4c06::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 17:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:29:f1:06:4d:3e:8b:33:57:a0:f8:1d:36:4f:5e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Feb 6 12:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f52574f9016b9e547bc304cf5c86e3e624e09ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:85:45:0a:9b:11:61:14:c8:26:30:a4:f5:
39:13:a9:16:70:4d:8b:dc:aa:33:bf:8a:9d:e4:00:
c6:0f:3e:12:b9:06:48:16:cb:2e:e3:4c:d0:a8:05:
0e:6b:7f:03:73:bc:17:a7:07:1c:ae:ae:f5:6f:42:
26:24:a6:a6:34:c5:18:31:85:1a:2d:71:b3:da:d8:
93:ad:5d:6b:55:f0:9d:f1:78:20:2f:45:d8:f5:1d:
0f:e8:1a:ea:6e:be:18:8d:13:2d:d9:c8:2a:6d:81:
08:e3:1e:50:70:de:51:21:bb:a7:07:c1:cd:60:89:
83:ef:0f:49:b1:d2:3d:ff:bb:ac:65:dc:dc:f3:e8:
ec:c3:68:06:c2:be:a8:4e:d7:20:cd:2f:7c:e3:84:
9a:b6:8c:eb:fe:31:09:34:48:cf:97:81:92:44:05:
0d:4b:c6:d4:c1:c9:57:40:fa:7f:0f:1d:0e:d6:a5:
df:24:a9:e3:8d:52:fa:e7:71:d0:19:32:5c:2d:7b:
f7:2e:0d:17:31:7f:5a:d0:65:ff:28:aa:70:44:ec:
89:93:76:b2:eb:ab:4d:ca:87:f3:e8:09:e8:1a:ae:
62:c3:cc:a7:95:18:eb:4d:58:ae:5f:6b:85:cd:81:
b9:39:54:cd:6b:01:35:5a:aa:d7:1b:47:32:4b:94:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:25:74:F9:01:6B:9E:54:7B:C3:04:CF:5C:86:E3:E6:24:E0:9E:E9
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/9SV0-QFrnlR7wwTPXIbj5iTgnuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b785::/32
2a12:4c06::/32
Signature Algorithm: sha256WithRSAEncryption
48:72:10:9a:c3:8e:60:1e:75:27:35:f4:fe:8e:48:3b:6a:af:
68:7a:4c:8a:5f:88:a4:5a:4d:35:58:b2:cd:49:d5:a5:8c:d5:
4c:5c:38:93:6b:e2:3b:c3:60:e3:1f:40:97:88:b1:1e:25:af:
ec:12:69:4f:0a:bc:32:79:59:6a:77:64:d6:86:eb:29:e5:a3:
24:6f:dd:7f:16:98:e3:03:d6:78:85:e4:72:83:60:03:0f:27:
a9:ff:49:ce:ee:74:d5:41:00:d0:47:e3:ff:f1:fb:e3:31:6a:
f8:bf:c4:43:72:a9:87:f1:a2:14:61:8d:10:95:2a:6f:a7:12:
e6:37:bf:16:14:37:3d:60:c8:ba:44:d0:2b:a7:ab:6d:a0:52:
14:f6:55:09:6f:f0:1a:b0:b1:1d:6f:93:fa:05:8b:c7:b4:c7:
e6:83:38:00:7c:e1:b0:2d:84:59:f2:0c:c6:b0:87:c7:08:2b:
42:27:ac:d5:66:a1:f9:1a:27:9e:83:1a:7d:2b:e8:6f:31:67:
84:0f:4b:06:cd:a2:84:53:c4:e7:bf:f9:c7:c7:60:a4:f7:1c:
72:d1:9c:b8:94:98:3b:e5:40:c1:ad:1f:63:09:37:65:7f:c4:
1b:9a:cc:91:ee:3d:fe:bb:73:43:82:59:fa:41:a8:d9:a5:8b:
47:eb:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:46:18 2025 by rpki-client