Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SP7hgnDcSw2fMyVDT9C7egEkfNo.roa
File: SP7hgnDcSw2fMyVDT9C7egEkfNo.roa (raw, json)
Hash identifier: PQV9VRAGwstprCPDK1rwkVwtADBwdGxIo1eipBDQDkc=
Subject key identifier: 48:FE:E1:82:70:DC:4B:0D:9F:33:25:43:4F:D0:BB:7A:01:24:7C:DA
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0194F8A83CFECBC0C5E10584DBA6D9A50B62
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SP7hgnDcSw2fMyVDT9C7egEkfNo.roa
Signing time: Wed 12 Feb 2025 05:36:02 +0000
ROA not before: Wed 12 Feb 2025 05:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:6284::/32 maxlen: 32
2a09:e5c0::/32 maxlen: 32
2a09:e5c1::/32 maxlen: 32
2a09:e5c2::/32 maxlen: 32
2a09:e5c3::/32 maxlen: 32
2a09:e5c4::/32 maxlen: 32
2a09:e5c5::/32 maxlen: 32
2a09:e5c6::/32 maxlen: 32
2a0e:b140::/29 maxlen: 29
2a10:4103::/32 maxlen: 32
2a10:4104::/32 maxlen: 32
2a11:4b47::/32 maxlen: 32
2a12:a343::/32 maxlen: 32
2a12:a344::/32 maxlen: 32
2a12:a346::/32 maxlen: 32
2a13:93c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 28 Feb 2025 11:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:a8:3c:fe:cb:c0:c5:e1:05:84:db:a6:d9:a5:0b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 12 05:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48fee18270dc4b0d9f3325434fd0bb7a01247cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:f8:e4:0a:f6:44:fd:de:60:95:cc:2f:f9:
88:d5:b2:e9:95:45:4b:1f:36:04:7d:fe:22:01:d1:
cc:e6:a9:43:ce:b3:f2:0a:39:63:33:fe:42:7a:72:
e5:84:99:3c:11:d6:75:a5:a5:35:84:4f:db:4c:a2:
67:26:d1:f8:04:1a:b0:00:62:67:b4:4b:06:00:47:
ba:d0:73:16:47:1a:0d:ac:57:02:f6:13:3c:69:bf:
42:6a:fe:6f:b7:c0:a1:ee:3c:6c:b0:a7:f9:55:2a:
86:1e:3a:46:76:c7:a2:76:71:df:22:38:c1:20:09:
c2:95:ab:42:00:44:1a:9a:46:2c:87:28:2b:e0:bd:
09:b4:16:f4:a5:34:9d:47:11:53:38:29:b1:d5:23:
67:a7:24:06:d8:4e:fb:94:ed:45:2e:10:a1:bc:a5:
9e:8f:06:d1:36:50:b6:56:ac:5a:82:23:43:b0:d4:
99:4f:4c:a6:d3:d2:c3:4b:89:66:c4:49:cb:b0:33:
56:dc:d7:61:56:1d:26:08:fe:ab:1d:be:7b:90:35:
e5:4d:2e:23:c7:74:18:99:1a:4a:00:f6:5d:3a:0c:
4b:55:c7:eb:8c:29:ce:80:ce:c7:32:de:bc:37:0b:
c4:e6:32:96:d1:c3:86:25:d7:7a:4e:39:57:d7:2f:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FE:E1:82:70:DC:4B:0D:9F:33:25:43:4F:D0:BB:7A:01:24:7C:DA
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SP7hgnDcSw2fMyVDT9C7egEkfNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6284::/32
2a09:e5c0::-2a09:e5c6:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:b140::/29
2a10:4103::-2a10:4104:ffff:ffff:ffff:ffff:ffff:ffff
2a11:4b47::/32
2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
2a12:a346::/32
2a13:93c0::/32
Signature Algorithm: sha256WithRSAEncryption
45:c8:f3:16:b0:c7:55:21:f6:86:59:6c:91:43:21:c0:d1:75:
91:24:26:f3:64:2c:df:9f:17:68:19:d2:1c:00:e9:04:51:5d:
e4:13:dc:96:24:50:47:36:6e:5e:10:00:17:f3:86:1b:4a:77:
60:c5:13:a4:98:5f:19:3e:e1:4d:13:0e:8c:ce:e1:6d:f0:70:
b8:b8:19:98:cb:42:21:dc:69:3f:21:5a:2e:0e:a2:72:de:3c:
59:ed:cc:db:c8:03:06:2a:71:84:4a:4c:ce:04:f1:44:57:21:
b0:2e:48:01:4d:f5:3b:68:3d:b6:a4:d4:5d:6d:85:b4:0d:1e:
3f:63:94:5b:f4:9b:5a:95:3d:f0:2f:f6:81:6b:ab:69:21:3e:
12:23:d8:74:02:4d:69:97:ee:04:fb:e6:58:9a:f3:39:42:a6:
84:66:4d:b2:2d:0a:fc:d5:1c:9a:c6:6b:fe:cf:a6:80:49:50:
d2:22:4a:48:49:d1:0b:c2:97:2c:39:3c:b6:b2:f3:3b:50:4e:
bd:f7:4e:18:e1:a7:94:f3:72:48:a1:2b:2b:24:42:37:1c:94:
f0:06:d0:b7:1d:7b:1a:ee:b0:15:c2:cd:e3:2b:b7:34:19:17:
ec:7d:20:62:f9:ff:d2:8a:d2:8e:8c:5c:2a:b5:d4:59:42:e3:
fb:77:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:32 2025 by rpki-client