Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/2eEb0AMzSv-f2sHQqKfRjZf6w4Q.roa
File: 2eEb0AMzSv-f2sHQqKfRjZf6w4Q.roa (raw, json)
Hash identifier: LKEUBS057pr7eUEwCFJgIV1n+6iAm9Vx22/P7kKPhXY=
Subject key identifier: D9:E1:1B:D0:03:33:4A:FF:9F:DA:C1:D0:A8:A7:D1:8D:97:FA:C3:84
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0195F4FBFD1C90A381CFDEE3D7D732B6B089
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/2eEb0AMzSv-f2sHQqKfRjZf6w4Q.roa
Signing time: Wed 02 Apr 2025 05:31:49 +0000
ROA not before: Wed 02 Apr 2025 05:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211995
IP address blocks: 130.0.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 06:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f4:fb:fd:1c:90:a3:81:cf:de:e3:d7:d7:32:b6:b0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Apr 2 05:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9e11bd003334aff9fdac1d0a8a7d18d97fac384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:7f:1e:9b:1c:a3:2c:66:17:0b:9d:42:bc:
76:e1:d3:71:e2:95:18:1a:45:72:f2:2b:e1:44:d4:
35:06:df:0f:75:ae:30:6c:c5:ca:e3:a0:34:13:9d:
40:80:e5:14:94:fc:c9:46:a2:f1:9f:a2:98:d4:a5:
19:cc:c7:c0:c1:18:01:a8:3b:cf:04:b4:72:54:0c:
dc:04:e4:e0:a3:03:67:1a:8f:dd:3a:2a:fd:3f:3e:
85:47:2c:42:b8:31:eb:67:bf:41:9b:13:15:59:1b:
90:b1:18:ee:d1:c5:af:69:92:d4:47:9f:75:49:16:
10:a9:67:c8:09:5d:f6:b4:b3:09:83:f0:3a:b2:20:
3e:85:96:ac:ad:cb:f5:b9:01:37:5e:31:bd:45:2f:
62:97:20:69:5d:fa:7b:96:6e:d0:8d:77:18:f4:07:
60:20:9a:0e:49:df:35:06:3f:2f:4a:a6:0e:a2:28:
e4:b7:3c:cf:31:83:63:b6:ca:24:26:db:e8:9e:6f:
0a:16:4a:b7:ef:03:d5:b4:75:d8:65:67:ea:84:7b:
5e:83:06:ae:df:20:32:da:4c:7b:7b:3a:9e:c7:8e:
9e:98:a8:80:d4:fb:6c:6d:77:84:eb:e2:72:66:12:
53:ed:fa:ca:4e:bf:5f:8c:90:7b:ac:ea:94:da:0d:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:1B:D0:03:33:4A:FF:9F:DA:C1:D0:A8:A7:D1:8D:97:FA:C3:84
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/2eEb0AMzSv-f2sHQqKfRjZf6w4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.11.0/24
Signature Algorithm: sha256WithRSAEncryption
15:62:6e:01:d7:09:c3:47:94:de:db:5a:58:e0:65:9f:0c:cc:
94:67:79:53:63:2e:49:2a:48:69:a6:af:ca:6f:9b:c8:44:cf:
6d:95:8c:0b:ea:b2:99:63:27:ed:5a:0a:88:bf:cf:2f:ba:58:
d7:a2:be:45:66:a4:d0:58:e7:87:36:52:09:13:86:87:72:5b:
a1:8b:f7:38:e3:c6:46:f5:08:72:e4:8f:5c:70:c6:e9:df:6d:
ed:a7:fe:89:b2:bd:38:23:13:92:f0:42:b3:30:06:7f:b4:a4:
b0:a8:a2:d8:66:24:e4:9e:eb:cf:80:c4:cc:68:20:e8:d7:97:
88:71:80:96:11:cd:03:3f:85:97:02:78:68:63:6f:2d:cc:20:
d3:9b:84:e3:a9:a9:bf:be:ba:8b:bc:ee:e8:7f:42:95:0e:85:
9e:19:37:72:50:f1:93:2b:8e:c8:98:c9:35:e4:3e:5e:31:7d:
64:ad:28:09:ac:c1:7c:4c:0c:27:ab:15:13:c4:9e:74:d3:59:
3c:3c:15:1a:76:02:86:e8:9f:52:78:a3:90:0b:77:65:3a:cc:
90:bc:ce:a5:3d:6f:13:f1:6f:db:7f:ff:7e:5c:a5:3f:13:17:
dc:18:09:9c:68:1e:5f:e0:dc:02:56:09:01:bd:bd:76:48:57:
20:be:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:45 2025 by rpki-client