Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/1-9NvLkAtV-bsHHqsr-kndrmcouA.roa
File: 1-9NvLkAtV-bsHHqsr-kndrmcouA.roa (raw, json)
Hash identifier: GxXghEvJf3VL8lj5ulkop/yUnfQQWO+YFcjNYMB7Z0k=
Subject key identifier: FB:D3:6F:2E:40:2D:57:E6:EC:1C:7A:AC:AF:E9:27:76:B9:9C:A2:E0
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 0195AC6DC435DB3D2B5F1340B1828AF458B3
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/1-9NvLkAtV-bsHHqsr-kndrmcouA.roa
Signing time: Wed 19 Mar 2025 03:23:49 +0000
ROA not before: Wed 19 Mar 2025 03:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205108
IP address blocks: 2a0c:1f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Mar 2025 03:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ac:6d:c4:35:db:3d:2b:5f:13:40:b1:82:8a:f4:58:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Mar 19 03:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbd36f2e402d57e6ec1c7aacafe92776b99ca2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:50:42:8e:b3:c9:d7:98:1e:d9:32:7e:4c:7f:
79:ab:e6:7e:97:e7:f0:62:71:10:30:f0:19:ad:04:
8e:fc:3a:6f:d6:a8:cd:96:a4:c3:30:56:a5:fc:a3:
0a:d4:b3:49:a7:de:6c:bd:3b:ca:bf:d7:95:f4:8b:
6c:4c:42:df:42:20:34:29:43:e0:c9:33:67:27:0b:
4e:50:ca:00:56:84:0f:40:92:6c:60:1f:74:b0:18:
71:5e:be:ff:ad:ad:c0:dc:f6:bb:78:87:1a:dc:86:
f0:f2:3f:d0:e2:22:35:27:5a:b8:ad:e2:dc:d6:7d:
74:f7:19:4d:d9:0f:a1:83:86:9a:ec:2d:e7:42:40:
54:86:2d:59:1d:71:9b:87:4f:ab:b5:e6:e8:b7:0a:
8c:04:55:37:d9:68:4c:41:25:c0:0d:39:fc:47:9a:
44:67:99:03:05:b9:c2:39:15:29:91:16:21:9a:57:
9c:d3:e7:71:c7:4d:68:3f:ee:f4:9a:76:09:84:b3:
4e:4a:91:b1:6b:b8:ed:cc:41:07:39:e9:4a:82:dd:
66:c8:5e:72:1f:1e:ee:b4:b4:f3:ce:f0:e5:8c:ed:
30:6c:cc:f4:49:10:d7:db:0b:47:54:3d:4d:cb:92:
24:0c:5a:02:58:18:3a:21:a5:a3:fd:5b:42:7e:28:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D3:6F:2E:40:2D:57:E6:EC:1C:7A:AC:AF:E9:27:76:B9:9C:A2:E0
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/1-9NvLkAtV-bsHHqsr-kndrmcouA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:1f00::/29
Signature Algorithm: sha256WithRSAEncryption
1f:f1:42:50:c6:ac:3d:5e:25:0b:d0:cd:1d:98:99:2c:ba:a2:
14:85:1f:51:fb:6e:c8:0f:7b:8c:72:5b:d4:77:45:2c:58:33:
c1:39:b4:f7:75:8b:87:60:2d:2b:43:1a:a3:2a:f6:dd:2c:50:
96:55:6e:5e:49:66:66:f3:63:f9:bb:7e:d5:19:dc:17:d7:71:
36:d6:bd:20:66:b6:e7:66:e3:e8:6a:73:2a:79:98:e7:1d:ea:
46:7e:59:35:25:7c:b3:d5:34:12:4c:a7:53:39:c4:26:1a:d1:
e3:27:be:3f:9b:d3:a1:a8:db:5c:c3:e0:65:a2:1e:ba:36:45:
d6:8b:bd:c7:e0:81:4a:a7:fd:58:48:7a:81:be:bc:71:85:b9:
c8:f4:e0:0a:60:b3:5e:be:2c:70:7d:1e:7e:b0:50:26:82:66:
21:49:af:f1:51:7f:4f:51:39:65:4a:c4:2b:a3:7d:4c:96:ce:
fa:80:68:d0:ba:11:01:50:96:af:54:87:12:ce:5a:20:a5:dc:
e3:90:35:16:10:f4:3a:cf:fc:96:ac:ad:d8:a5:f2:cc:c5:b0:
76:26:be:3f:ed:0b:19:8c:8a:d2:b9:46:1a:cc:b6:34:55:35:
99:d7:d5:bb:30:a4:8c:67:39:82:c9:e4:d0:96:f1:28:35:87:
97:d3:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:39:36 2025 by rpki-client