Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/GnPOcEQg1J-G1Ia6_OZ6s7xzG_4.roa
File: GnPOcEQg1J-G1Ia6_OZ6s7xzG_4.roa (raw, json)
Hash identifier: itkILxU9muiw5Tft35cdWnYHJ49jdfyd6T2V2lkBI+Q=
Subject key identifier: 1A:73:CE:70:44:20:D4:9F:86:D4:86:BA:FC:E6:7A:B3:BC:73:1B:FE
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 019585401EE387E9C330087A6B2565FD6AD5
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/GnPOcEQg1J-G1Ia6_OZ6s7xzG_4.roa
Signing time: Tue 11 Mar 2025 12:48:46 +0000
ROA not before: Tue 11 Mar 2025 12:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 2a0b:4144:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Mar 2025 13:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:40:1e:e3:87:e9:c3:30:08:7a:6b:25:65:fd:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Mar 11 12:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a73ce704420d49f86d486bafce67ab3bc731bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:78:63:d2:6a:5d:4c:7a:65:cb:16:cc:41:
e5:e8:48:ef:05:3a:1a:36:9e:79:35:97:64:07:3b:
31:ff:4d:4e:0a:20:5b:96:b0:5d:65:6f:a0:f6:92:
08:14:3c:6c:cc:c3:d2:a4:b5:9b:1b:6a:10:96:83:
cb:df:2e:de:90:3d:de:c3:3f:e8:cb:3e:af:f0:92:
f8:b4:08:d6:1a:2c:0c:27:7b:bc:64:fe:15:16:ab:
20:23:38:f2:bc:70:f3:86:dd:1c:0f:70:cb:3d:1f:
11:21:b7:73:ed:6c:8a:17:fa:82:37:64:9e:1d:d3:
d2:50:68:b3:aa:f9:38:f4:bb:f8:1d:dd:d9:1d:df:
02:40:a0:9f:9f:6c:c0:10:91:20:7a:ba:e7:c3:51:
50:04:7b:88:ec:a7:9c:b1:f9:c7:b4:50:bd:4d:c1:
4c:d7:e9:bc:cf:e6:c3:ff:61:1a:34:60:8d:38:f0:
38:4a:83:a9:b7:fd:d5:07:ae:9e:a6:b2:57:16:42:
c0:43:fa:d4:17:25:58:36:50:bb:3f:40:83:7d:47:
03:f8:d8:fe:c2:04:2a:0a:67:c5:b0:91:31:9e:4d:
05:b5:86:e5:6b:0f:d3:4d:34:7c:f7:48:32:11:4e:
07:46:3d:5d:c3:26:ab:6f:37:4e:e6:e2:fb:07:be:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:73:CE:70:44:20:D4:9F:86:D4:86:BA:FC:E6:7A:B3:BC:73:1B:FE
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/GnPOcEQg1J-G1Ia6_OZ6s7xzG_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4144:2::/48
Signature Algorithm: sha256WithRSAEncryption
81:f3:97:c0:02:04:72:37:3d:ee:b1:38:26:c2:e0:35:dc:ce:
81:84:c8:9d:d6:dc:d8:61:4b:36:d9:e1:db:f4:ef:0f:6d:03:
7a:29:6c:bd:64:e3:1e:47:f9:59:ec:8b:e3:da:88:c0:1e:4e:
48:5c:c8:57:ac:fd:c5:6f:65:e3:1b:da:17:48:eb:fc:31:06:
21:cc:f7:68:3e:c2:26:53:94:d8:96:e5:46:a1:3c:20:f8:10:
94:48:c1:9b:5d:3f:12:71:d3:8f:aa:26:90:29:41:3a:a1:6a:
4e:25:64:c2:5d:3b:7a:f0:f0:94:f8:86:6b:0f:f6:63:1c:7e:
ad:72:df:ca:6d:f0:59:21:ca:a7:72:e7:86:3a:98:bc:6b:4d:
40:fb:aa:d2:fe:f9:29:2f:83:47:ca:4a:e9:19:c1:32:05:ec:
ab:2a:23:b3:d0:17:79:1d:53:f7:d9:9f:f8:eb:a6:20:be:7f:
7c:b2:af:1f:41:19:71:08:32:89:24:c5:69:ec:22:2e:36:53:
b9:97:bc:e4:ae:3b:b3:e5:6b:11:5c:03:44:3c:b4:fc:e4:b0:
59:03:ed:9b:b2:bb:3a:61:82:1d:00:dc:47:21:b8:25:18:bc:
7b:17:67:90:78:e4:e1:b1:63:c5:fb:a5:0f:3d:9f:03:f6:3c:
a6:79:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:17:30 2025 by rpki-client