Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Cj253YApVBJlaoqYWrf9BMRwylo.roa
File: Cj253YApVBJlaoqYWrf9BMRwylo.roa (raw, json)
Hash identifier: QwX0XTBaFviZkDT3cWWajxd9BD7Lnfh1xHD7eDU6YFg=
Subject key identifier: 0A:3D:B9:DD:80:29:54:12:65:6A:8A:98:5A:B7:FD:04:C4:70:CA:5A
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01961196601A452815CB198F6D20D4701383
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Cj253YApVBJlaoqYWrf9BMRwylo.roa
Signing time: Mon 07 Apr 2025 18:49:49 +0000
ROA not before: Mon 07 Apr 2025 18:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:f01::/32 maxlen: 32
2a0e:13c0::/32 maxlen: 32
2a0e:4342::/32 maxlen: 32
2a0e:67c1::/32 maxlen: 32
2a0e:8541::/32 maxlen: 32
2a0f:bb03::/32 maxlen: 32
2a11:640::/32 maxlen: 32
2a11:1341::/32 maxlen: 32
2a11:3181::/32 maxlen: 32
2a11:6343::/32 maxlen: 32
2a11:7882::/32 maxlen: 32
2a11:8504::/32 maxlen: 32
2a11:b686::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 08 Apr 2025 18:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:96:60:1a:45:28:15:cb:19:8f:6d:20:d4:70:13:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Apr 7 18:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a3db9dd80295412656a8a985ab7fd04c470ca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:e2:14:7d:20:06:43:3b:16:7c:5b:ab:d5:
d8:88:d3:69:18:c5:ce:56:2d:d2:d7:b9:f1:eb:91:
30:1c:e6:8e:2d:09:47:85:e3:a3:98:76:4e:fb:df:
d7:5f:9c:67:9c:5e:90:f8:4c:74:82:a2:c9:fe:a7:
93:b6:67:4c:1e:5a:79:8f:dd:f9:e8:47:7e:0f:dd:
4b:63:f2:51:34:86:5b:f7:77:7b:db:5e:8f:52:11:
c3:34:45:16:29:cb:55:f6:94:39:b6:78:b4:41:73:
8c:12:16:62:e2:6a:ca:55:2d:a1:ab:26:4c:17:aa:
e7:5f:64:8e:50:79:a3:c7:c7:1b:23:47:20:6a:65:
08:23:e2:95:02:8a:7c:e9:fe:27:91:57:1a:9c:c4:
f1:49:11:94:71:33:87:30:6e:09:40:a7:61:45:a2:
08:35:29:93:2a:0b:d0:77:7d:a6:42:08:ea:d4:4f:
2e:d4:79:ab:fb:ef:9b:f3:37:c3:13:0c:52:5b:93:
ed:97:00:70:ee:18:a2:b1:1c:65:f3:0d:53:ed:13:
4f:0c:06:98:b4:3e:79:ed:2b:c6:e9:78:e7:8e:e0:
87:b2:17:72:4f:76:24:88:32:46:f3:71:72:96:f7:
93:19:79:55:46:31:67:a2:38:8a:c1:3e:13:4b:44:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3D:B9:DD:80:29:54:12:65:6A:8A:98:5A:B7:FD:04:C4:70:CA:5A
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Cj253YApVBJlaoqYWrf9BMRwylo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f01::/32
2a0e:13c0::/32
2a0e:4342::/32
2a0e:67c1::/32
2a0e:8541::/32
2a0f:bb03::/32
2a11:640::/32
2a11:1341::/32
2a11:3181::/32
2a11:6343::/32
2a11:7882::/32
2a11:8504::/32
2a11:b686::/32
Signature Algorithm: sha256WithRSAEncryption
13:96:60:37:06:5c:29:5f:04:11:ee:18:63:4c:ba:21:08:21:
d5:30:a4:77:da:fa:f8:38:6a:28:9b:8b:04:81:10:91:cc:a8:
eb:55:ae:36:1f:67:41:be:36:a1:fb:0e:48:a6:ae:94:d9:e4:
fe:f7:29:40:fc:33:e6:ab:af:17:ef:82:65:07:51:a4:d3:99:
4a:26:20:25:a8:33:83:9a:54:62:f0:f8:ef:cf:4e:7e:4a:02:
fd:c2:1e:cd:87:f3:4f:0f:f1:b8:36:46:2d:97:b2:7f:a2:e3:
12:9e:5b:26:68:83:dd:7f:84:9e:f8:b8:f2:e6:a9:61:ea:6f:
94:10:f4:4b:3b:7f:14:b7:53:6c:3e:a3:0b:3a:79:b3:9b:68:
59:2e:43:fb:f6:45:ff:a8:fb:00:b7:48:76:93:b4:63:34:15:
7b:50:2a:a1:21:0a:1a:35:a0:af:fa:19:16:0a:01:3f:61:45:
03:cf:35:b1:12:b0:e3:73:55:7a:ec:2b:67:b3:a9:c7:7c:a7:
5e:da:2f:26:af:47:e1:8f:cb:5b:2a:9e:bc:00:13:92:91:2b:
d1:3a:b5:64:70:a4:9e:b9:35:cc:4f:8f:5b:26:b8:69:e2:ea:
e0:01:fd:a9:32:28:f6:c5:2f:fe:87:a3:06:16:39:97:b7:7f:
36:60:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:38 2025 by rpki-client