Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/_rW5VfJ3f6fduYDSFROnI9i1IkY.roa
File: _rW5VfJ3f6fduYDSFROnI9i1IkY.roa (raw, json)
Hash identifier: lqk5wKyLyLTsRKkn0uktr7EZaaU6go/mLOVC8uMlDzA=
Subject key identifier: FE:B5:B9:55:F2:77:7F:A7:DD:B9:80:D2:15:13:A7:23:D8:B5:22:46
Certificate issuer: /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Certificate serial: 0191BC94040753BE39E90664CB8874310A07
Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/_rW5VfJ3f6fduYDSFROnI9i1IkY.roa
Signing time: Wed 04 Sep 2024 10:28:22 +0000
ROA not before: Wed 04 Sep 2024 10:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203226
IP address blocks: 2a14:6980:10::/44 maxlen: 44
2a14:6980:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Sep 2024 10:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:94:04:07:53:be:39:e9:06:64:cb:88:74:31:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Validity
Not Before: Sep 4 10:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feb5b955f2777fa7ddb980d21513a723d8b52246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5a:6e:01:14:03:88:9b:72:89:c2:80:21:76:
06:5e:4c:6f:57:b9:71:eb:ea:7a:27:4d:d6:24:b5:
d5:f4:6c:4a:ba:93:2f:ae:c7:4f:02:cd:f6:36:dc:
70:a6:ea:6c:a7:01:c2:d3:ff:fa:98:21:c8:35:63:
f0:9e:e5:4e:d6:69:79:b3:73:ee:94:10:da:68:a5:
29:f8:6d:a2:4b:26:63:bb:76:91:77:46:2e:bb:e5:
0e:5f:4d:90:17:aa:3f:96:8e:f3:6a:7e:a7:4e:70:
28:75:2d:c5:b9:0c:57:53:fd:5f:41:fe:01:86:95:
68:09:95:3e:08:ea:0b:a2:69:6d:70:d0:64:94:c1:
09:22:06:f0:53:d0:4d:58:c0:0a:85:2e:bd:29:b6:
9e:22:46:a6:09:5f:b6:50:4d:33:ea:06:0c:4b:f9:
a3:8c:2f:f4:15:6e:54:72:3d:42:bd:79:1a:0d:3f:
73:62:ca:9c:3d:c0:68:96:bb:de:1b:50:cd:80:6b:
84:2d:9a:75:71:4d:23:ff:5e:40:22:15:f2:6a:5a:
92:cb:5a:e5:f2:77:56:8f:00:5a:49:fb:66:df:ff:
f2:52:5f:f3:1a:03:48:ca:8a:11:3c:10:18:a5:f2:
f0:be:35:d1:0e:ac:83:af:70:cd:57:ac:50:57:b4:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:B9:55:F2:77:7F:A7:DD:B9:80:D2:15:13:A7:23:D8:B5:22:46
X509v3 Authority Key Identifier:
keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/_rW5VfJ3f6fduYDSFROnI9i1IkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6980:10::/44
Signature Algorithm: sha256WithRSAEncryption
32:38:02:ce:68:bc:ab:03:e0:42:08:86:28:b6:74:0f:80:8b:
c0:60:36:70:74:6b:2b:ce:3b:79:b7:f0:6a:40:3b:1b:50:0d:
da:b3:b5:c1:a7:b5:52:f0:ca:a7:e5:e1:a3:3e:6e:56:84:01:
8b:1b:50:51:42:9c:47:93:03:40:12:80:b6:51:69:3c:e3:80:
76:9d:bb:ec:89:9c:c9:db:bd:53:4c:57:5e:71:0b:1b:4b:56:
c4:6b:0b:84:67:0f:b2:57:61:1e:ee:4d:06:0d:2f:0c:8a:c7:
f7:3d:e1:60:18:aa:52:17:69:e4:95:d8:91:a5:3f:ff:c3:fc:
e2:e2:ff:20:33:51:ba:b7:1c:ee:b9:b1:c6:22:85:39:27:27:
f1:55:05:bc:a2:20:53:d8:d6:0c:73:38:9b:a3:1f:1d:51:3d:
2a:7e:16:87:cd:4d:cd:f5:81:e0:08:60:fa:a2:70:97:a1:64:
b4:7c:e7:d8:b5:25:ca:d6:83:1e:0d:90:d3:d5:79:0f:12:08:
cc:56:d1:72:e7:08:f0:87:e5:91:74:1b:49:b3:13:de:38:36:
45:4b:74:b7:56:18:5e:a1:26:be:60:75:88:04:7e:e5:3a:ae:
6c:2b:7d:72:67:a3:1d:c1:23:73:37:7e:6c:cf:e2:bd:dd:62:
14:5c:aa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:15:42 2025 by rpki-client