Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DKvVIEwmA_y2mijEiGkBzLDl_3A.roa
File: DKvVIEwmA_y2mijEiGkBzLDl_3A.roa (raw, json)
Hash identifier: G0gQDT6ML8TMgG6MNon7/VLgzFozClK3YVRTWSdh34Q=
Subject key identifier: 0C:AB:D5:20:4C:26:03:FC:B6:9A:28:C4:88:69:01:CC:B0:E5:FF:70
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0196483F9BF08CBE894DED90334359E5C2CB
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DKvVIEwmA_y2mijEiGkBzLDl_3A.roa
Signing time: Fri 18 Apr 2025 09:34:10 +0000
ROA not before: Fri 18 Apr 2025 09:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213771
IP address blocks: 2a14:67c1:80::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 19 Apr 2025 05:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:3f:9b:f0:8c:be:89:4d:ed:90:33:43:59:e5:c2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Apr 18 09:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cabd5204c2603fcb69a28c4886901ccb0e5ff70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:f5:52:c0:89:c9:81:80:e2:eb:00:21:7e:
6a:e5:0c:58:64:23:af:8d:9b:ba:63:6f:c5:7e:e7:
fe:14:9f:4c:44:4d:b8:b2:c5:12:3b:7b:f0:20:69:
4d:ee:4b:0b:f4:ff:0f:a1:73:2f:87:e9:dc:e5:7d:
5d:89:2e:37:0a:89:6b:cb:48:3f:63:29:c1:19:31:
74:b5:93:08:7f:71:45:4f:59:3c:16:5f:aa:72:5e:
57:ab:c3:37:b5:4e:71:3a:de:0b:55:15:20:5e:ab:
17:7d:4a:22:55:ce:44:42:41:37:c9:fe:93:fd:f3:
f3:e6:ca:c1:1c:80:1c:e0:c7:f7:e4:5b:65:b1:78:
c0:0c:2e:1e:b0:b5:9a:47:f5:6e:58:0b:c9:cf:cb:
5f:6a:aa:77:3e:a4:79:fd:84:22:6e:78:fa:5b:5c:
eb:63:57:cb:20:6a:1f:a8:5a:61:0c:c6:88:5e:c5:
ef:20:ff:75:7b:d8:31:0c:f6:fc:52:d5:db:b3:b2:
87:58:ba:91:93:3a:4a:00:5a:30:04:5d:b1:81:0d:
ec:15:cc:7f:1f:6d:3f:69:96:a5:03:49:5d:0f:31:
e4:97:e9:d3:39:b8:f1:a5:54:1f:33:0b:50:23:32:
2e:a0:ce:0c:bb:a8:8f:01:90:0f:7c:86:56:6f:de:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:D5:20:4C:26:03:FC:B6:9A:28:C4:88:69:01:CC:B0:E5:FF:70
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/DKvVIEwmA_y2mijEiGkBzLDl_3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:80::/44
Signature Algorithm: sha256WithRSAEncryption
39:9a:73:c4:b4:a7:21:a3:57:87:3a:82:a8:ba:27:ef:84:c4:
07:a5:82:5d:32:c2:47:4c:a2:2b:0d:f1:23:14:bc:68:e1:5c:
ef:1f:78:77:e2:73:34:91:1c:87:ad:bb:2b:f4:87:09:6c:cd:
07:6d:a9:a7:f0:1d:6e:67:94:5f:28:8a:e3:65:4a:93:df:4d:
e2:54:71:0c:c5:01:fb:e0:ab:4a:0f:60:47:bc:a4:bf:a6:d1:
46:60:3a:67:bc:29:a0:42:95:c6:e4:07:9d:6c:12:7c:a9:47:
5b:04:61:f1:11:34:37:d4:d7:82:c0:fa:ce:ce:bd:c8:4e:3a:
8b:26:f2:bb:5d:cb:f6:e7:1d:64:60:3e:74:ad:a4:27:c4:00:
45:eb:40:72:d7:e5:99:df:94:83:29:c0:b0:b1:be:7c:e5:1f:
59:85:d2:42:88:60:5b:b1:24:f1:99:d5:d1:58:ab:77:15:06:
b8:27:ed:10:3b:40:f6:28:f3:b6:b1:30:b0:24:5c:fd:51:95:
7b:af:17:4b:70:a9:58:79:c6:c7:3e:7f:90:e0:78:a3:03:92:
25:12:6a:97:bc:5f:8c:ed:fd:cb:52:1b:f8:81:ac:50:c3:ed:
fc:73:cd:a5:05:fb:58:2f:ac:8b:58:72:b1:6c:86:ea:a3:bc:
a6:07:17:50
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZZIP5vwjL6JTe2QM0NZ5cLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjUwNDE4MDkzNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2FiZDUyMDRjMjYwM2ZjYjY5YTI4YzQ4ODY5MDFjY2IwZTVmZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoD1UsCJyYGA4usAIX5q5QxYZCOv
jZu6Y2/Ffuf+FJ9MRE24ssUSO3vwIGlN7ksL9P8PoXMvh+nc5X1diS43Colry0g/
YynBGTF0tZMIf3FFT1k8Fl+qcl5Xq8M3tU5xOt4LVRUgXqsXfUoiVc5EQkE3yf6T
/fPz5srBHIAc4Mf35FtlsXjADC4esLWaR/VuWAvJz8tfaqp3PqR5/YQibnj6W1zr
Y1fLIGofqFphDMaIXsXvIP91e9gxDPb8UtXbs7KHWLqRkzpKAFowBF2xgQ3sFcx/
H20/aZalA0ldDzHkl+nTObjxpVQfMwtQIzIuoM4Mu6iPAZAPfIZWb94GEQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAyr1SBMJgP8tpooxIhpAcyw5f9wMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvREt2VklFd21BX3kybWlqRWlHa0J6TERsXzNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwQCA
MA0GCSqGSIb3DQEBCwUAA4IBAQA5mnPEtKcho1eHOoKouifvhMQHpYJdMsJHTKIr
DfEjFLxo4VzvH3h34nM0kRyHrbsr9IcJbM0Hbamn8B1uZ5RfKIrjZUqT303iVHEM
xQH74KtKD2BHvKS/ptFGYDpnvCmgQpXG5AedbBJ8qUdbBGHxETQ31NeCwPrOzr3I
TjqLJvK7Xcv25x1kYD50raQnxABF60By1+WZ35SDKcCwsb585R9ZhdJCiGBbsSTx
mdXRWKt3FQa4J+0QO0D2KPO2sTCwJFz9UZV7rxdLcKlYecbHPn+Q4HijA5IlEmqX
vF+M7f3LUhv4gaxQw+38c82lBftYL6yLWHKxbIbqo7ymBxdQ
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:41:53 2025 by rpki-client