Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/8WSzzKoXDQnor2sYKmD-SRWY0a0.roa
File: 8WSzzKoXDQnor2sYKmD-SRWY0a0.roa (raw, json)
Hash identifier: hNDFZyi0uGP+pVKuPiNhehN+TSK/uluoXncg/qx21Dg=
Subject key identifier: F1:64:B3:CC:AA:17:0D:09:E8:AF:6B:18:2A:60:FE:49:15:98:D1:AD
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0193FF28B82BD42BDED35BCB2FA398857E14
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/8WSzzKoXDQnor2sYKmD-SRWY0a0.roa
Signing time: Wed 25 Dec 2024 18:51:18 +0000
ROA not before: Wed 25 Dec 2024 18:51:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 2a0e:4341::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ff:28:b8:2b:d4:2b:de:d3:5b:cb:2f:a3:98:85:7e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Dec 25 18:51:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f164b3ccaa170d09e8af6b182a60fe491598d1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:33:5a:cd:11:fa:d5:e8:8f:9d:b4:77:7a:
4a:aa:56:51:de:d5:ab:4a:04:a6:2e:f4:ba:55:5c:
6a:98:28:6f:8c:6a:36:fa:3c:db:73:e6:6f:68:54:
fb:52:eb:0b:7a:01:20:ba:fc:91:c0:f9:6f:0c:93:
43:4f:e7:c8:95:13:84:0e:9d:ea:9a:97:4f:90:ca:
de:00:7f:26:d0:23:58:b6:0b:7b:54:a0:03:a5:e8:
2a:e4:dc:22:b2:a1:fe:f5:6e:17:22:92:1e:2d:8e:
f9:b3:1d:4e:21:4b:16:2c:77:ad:28:5d:ac:c8:8d:
e9:8b:d8:3d:ee:86:81:e4:c0:78:a3:8f:b3:15:9f:
e0:fa:59:61:82:11:8a:52:de:d8:48:35:68:c5:a1:
eb:18:23:60:d5:cc:db:ed:17:1d:23:a0:0d:f2:a1:
7a:62:21:7c:60:53:2d:1b:0a:71:8c:72:ca:5f:07:
70:3b:1f:bf:be:4c:dd:5c:94:67:f3:f9:d5:0a:76:
99:90:c7:f7:f0:8e:00:8e:fe:52:de:17:f0:fc:53:
96:11:f6:14:ff:c8:d9:23:9f:0a:47:9f:f5:82:e3:
f4:01:1f:10:23:fd:60:26:63:e0:67:77:81:aa:41:
aa:b5:93:e4:e8:6c:7d:84:19:85:79:75:35:22:e3:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:B3:CC:AA:17:0D:09:E8:AF:6B:18:2A:60:FE:49:15:98:D1:AD
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/8WSzzKoXDQnor2sYKmD-SRWY0a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4341::/32
Signature Algorithm: sha256WithRSAEncryption
e8:4d:b8:cb:2b:ee:12:51:3a:b7:05:b3:80:f4:71:ed:3b:05:
1b:4b:b9:49:0d:ef:9b:a1:b3:35:5c:9e:65:39:e5:0b:9a:62:
83:f2:be:34:2a:71:13:e6:8f:c7:b2:50:b9:57:f0:a3:63:cd:
7a:c1:78:ab:eb:fb:e3:15:8f:44:a1:83:cd:8d:20:6d:f2:67:
e4:c4:07:10:2b:87:3e:9d:d9:0b:bf:ea:ff:3d:a3:ee:29:a3:
d9:30:14:92:b1:7c:5f:57:74:7f:15:cc:d2:87:5a:ae:da:a6:
10:38:9b:c7:69:13:fa:3b:e9:cf:1c:24:d5:58:7e:73:83:fb:
57:ae:61:74:96:a9:c4:25:0b:c3:03:a4:6f:1e:51:e6:d4:6d:
fe:c9:7d:36:81:69:61:cb:1d:43:61:2d:99:af:47:b5:09:9f:
91:d2:a3:46:11:04:8f:3c:0a:f9:7a:89:09:c4:5c:9f:b4:06:
ce:07:56:02:42:fb:c6:26:e1:82:94:1a:30:30:ae:23:d7:e8:
a7:2a:fa:7a:2c:06:89:92:3c:38:7b:1a:56:77:cb:57:e2:c3:
6f:2e:c7:e2:89:43:94:57:9f:1c:0d:5b:5d:c9:12:e9:dd:79:
00:b1:85:21:60:27:ea:f5:fb:e3:ba:e4:be:cd:03:59:6f:ba:
53:e5:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:55:55 2025 by rpki-client