Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PCShKQvC20UL-4-VgbHjGvTE5xs.roa
File: PCShKQvC20UL-4-VgbHjGvTE5xs.roa (raw, json)
Hash identifier: RAZ/qq4WRD6jhTlWvNVl2u36h4h8H4N0wgpEuehIUBw=
Subject key identifier: 3C:24:A1:29:0B:C2:DB:45:0B:FB:8F:95:81:B1:E3:1A:F4:C4:E7:1B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0197040264539ADE5340E7A04C74F4C9AE1A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PCShKQvC20UL-4-VgbHjGvTE5xs.roa
Signing time: Sat 24 May 2025 20:35:54 +0000
ROA not before: Sat 24 May 2025 20:35:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204872
IP address blocks: 2a05:9a41::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:02:64:53:9a:de:53:40:e7:a0:4c:74:f4:c9:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 20:35:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c24a1290bc2db450bfb8f9581b1e31af4c4e71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:68:75:5e:50:09:6d:84:89:b1:c6:be:c5:
91:4b:e9:26:d6:ba:1b:39:f9:3b:2b:f9:7f:db:7a:
ff:d6:93:3e:eb:b5:1d:a3:de:44:af:1b:66:c0:02:
f1:b7:d6:21:f9:7c:fd:f1:3f:e3:2b:08:b0:70:8e:
a8:16:77:4f:c8:fb:a4:af:b0:a5:cc:30:37:66:a2:
0b:2b:3e:09:72:fd:2a:6b:14:04:c7:e8:e7:05:49:
c9:4d:92:69:93:e7:ea:0d:46:0c:ef:78:f6:25:b3:
a9:52:65:5d:75:7e:7f:b4:bd:8c:ac:1d:e0:a2:ad:
a6:fd:8a:98:1e:42:f0:ed:29:67:77:5a:bb:25:d1:
f0:be:e8:bb:e6:02:aa:ba:94:28:31:0f:8c:ab:9c:
32:d3:1e:03:0c:88:60:3f:ff:a9:3d:1b:5d:e4:13:
86:71:0b:2c:0f:95:5b:fe:7c:aa:a2:a6:b3:1c:ef:
ab:9b:09:00:6a:08:e8:78:bb:86:6f:ba:3e:4d:11:
38:2d:08:34:fe:d3:74:4a:72:f8:84:bd:9e:63:5f:
9b:81:83:42:f6:1f:a3:89:57:74:64:00:59:cb:8d:
2f:7f:77:8f:6e:6e:3f:9f:73:51:eb:e6:b9:58:6e:
70:5c:b8:b7:ac:d4:81:e2:25:76:93:48:4d:84:79:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:A1:29:0B:C2:DB:45:0B:FB:8F:95:81:B1:E3:1A:F4:C4:E7:1B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PCShKQvC20UL-4-VgbHjGvTE5xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a41::/32
Signature Algorithm: sha256WithRSAEncryption
45:2b:18:a8:86:a8:cf:6b:ad:65:6e:eb:bb:f8:26:ca:9b:f2:
2c:b1:93:48:23:16:5d:46:f9:0a:13:27:5f:dd:d9:52:01:b1:
bf:92:fe:ce:9b:65:3e:33:e0:c8:80:98:f7:eb:7b:e3:4b:88:
da:a8:1c:5a:8b:30:56:ba:17:9c:3e:36:d5:ed:b5:af:25:d8:
c4:aa:97:20:3e:40:e2:f7:2d:d5:4f:8c:4b:46:fc:a1:26:6a:
9a:6c:bd:bc:61:99:e5:f0:4a:b7:00:b5:87:d4:a4:b6:2e:62:
f8:2b:c5:9e:77:0f:87:bf:18:3c:60:62:73:17:48:74:c6:88:
11:17:5c:78:fe:2a:25:29:46:51:0e:2f:e0:00:24:7b:16:67:
3a:d7:12:f6:a7:ea:dd:65:f8:51:a4:fd:4d:21:b0:03:3b:fb:
20:0b:58:2a:f5:2d:69:cb:05:ca:d9:2a:0d:6f:e6:d3:1b:63:
2a:64:ed:72:41:27:d4:20:19:9c:20:40:b2:7d:66:0f:d0:62:
a0:24:db:d4:39:d7:dd:40:9a:2e:96:ad:eb:ba:70:5f:6f:e0:
8e:76:8f:94:e0:b2:eb:37:1c:18:2a:c6:4c:b2:1b:6c:1a:ea:
b6:0c:13:d2:ba:99:93:54:26:85:07:b5:0e:2a:88:7b:d3:cd:
82:21:a5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:06:02 2025 by rpki-client