Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/J0NCSv2IvNukgNCZA0X-PXn8wfQ.roa
File: J0NCSv2IvNukgNCZA0X-PXn8wfQ.roa (raw, json)
Hash identifier: EHGjux0IA3mxi3hwDPxCpgc0Dw7M64kOujWlXMQoNpo=
Subject key identifier: 27:43:42:4A:FD:88:BC:DB:A4:80:D0:99:03:45:FE:3D:79:FC:C1:F4
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0196FD07483C61DDDB3621637F5C14196613
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/J0NCSv2IvNukgNCZA0X-PXn8wfQ.roa
Signing time: Fri 23 May 2025 12:03:55 +0000
ROA not before: Fri 23 May 2025 12:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 2a09:6285::/32 maxlen: 32
2a13:93c2::/32 maxlen: 32
2a13:93c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Jun 2025 10:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:07:48:3c:61:dd:db:36:21:63:7f:5c:14:19:66:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 23 12:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2743424afd88bcdba480d0990345fe3d79fcc1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:f2:09:aa:bf:5c:a5:80:45:1c:83:fe:f5:
47:b1:c7:ad:c0:98:16:46:c6:bb:1d:92:ef:3f:a3:
f6:74:8a:ce:62:67:5a:60:2b:25:6d:ee:05:ef:64:
b8:74:05:f5:f8:2e:49:cc:03:51:e9:93:c8:26:db:
bc:6d:47:f9:cc:58:97:2a:31:30:f0:ba:c3:0c:1a:
55:1c:6b:fa:e8:ef:9d:d0:c0:7a:f5:ba:9e:c4:a4:
8e:62:4f:a0:f0:9e:37:47:ec:eb:47:61:b5:6e:7f:
0e:ab:68:a0:4a:af:94:25:ca:92:21:72:07:76:df:
10:e3:2c:7a:7c:8b:6c:e8:6f:d4:ce:40:3d:d2:5a:
13:1e:b0:db:95:cc:e5:69:50:b4:df:6b:51:85:4f:
d3:92:a8:38:ec:ac:9d:72:21:df:97:4c:27:cb:e2:
cb:0f:71:0a:a6:6f:b9:ea:87:a2:3b:3d:82:af:0c:
36:71:10:bd:39:5f:cf:30:5c:7b:d6:5c:19:16:0a:
7a:79:05:cc:bd:f8:72:f9:14:f1:6f:a7:db:f1:b7:
0e:fa:04:c9:ed:cb:aa:90:28:1b:30:d8:ec:5c:3a:
08:89:b9:b5:64:96:14:c4:c9:7e:cb:62:93:3f:f8:
29:ee:de:e0:2e:e3:ef:09:1b:5e:75:dd:f2:ee:63:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:42:4A:FD:88:BC:DB:A4:80:D0:99:03:45:FE:3D:79:FC:C1:F4
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/J0NCSv2IvNukgNCZA0X-PXn8wfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6285::/32
2a13:93c2::/32
2a13:93c4::/32
Signature Algorithm: sha256WithRSAEncryption
76:45:3f:f8:76:67:ef:3a:00:f3:e8:a8:a1:ea:76:08:bd:fe:
c1:e8:1a:2c:2e:12:ca:79:97:38:7e:a4:9a:ab:fe:d2:6e:d4:
78:2c:67:26:ce:29:4d:47:81:d4:9e:e3:0e:b1:67:9f:a1:1f:
f9:27:c3:47:80:68:a4:2b:b2:8d:2a:95:f5:cb:db:a9:17:12:
0a:90:3e:d2:dc:e7:d2:36:8d:b0:ad:67:1e:17:17:3a:6b:74:
0a:89:77:aa:1a:b1:5d:b4:18:8f:85:72:a7:4e:fc:a8:56:09:
c5:e1:da:28:53:78:7b:bb:43:9e:52:53:19:64:4e:8c:14:ef:
bd:2a:19:48:69:ac:b7:7c:6e:40:53:d8:f6:86:a8:99:0c:87:
0b:1f:1d:14:e4:f9:3d:23:50:8c:0e:fa:b6:32:19:78:bf:b5:
bc:10:23:aa:2a:17:ab:b8:1d:8c:eb:6e:d8:0f:66:c7:b1:70:
8f:b3:97:63:5c:45:4f:ac:9d:a6:c1:af:48:55:73:19:67:f8:
73:6b:c6:53:f0:41:63:95:31:a5:01:c2:b8:c3:1d:8b:ff:78:
bf:63:fb:d7:4f:fd:f7:47:58:24:26:6d:f3:06:d7:8e:fc:2b:
3d:f8:00:27:c7:99:75:73:4e:2a:7d:27:2a:b8:ba:f3:9d:38:
8c:a0:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:42:46 2025 by rpki-client