Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/lXDiDI_2UAd6TWziMdNHxcNwy6A.roa
File: lXDiDI_2UAd6TWziMdNHxcNwy6A.roa (raw, json)
Hash identifier: HrPZ98ZBLYKnNenBOPcj8j1Jpak5Lioda7nd8fCjQ/c=
Subject key identifier: 95:70:E2:0C:8F:F6:50:07:7A:4D:6C:E2:31:D3:47:C5:C3:70:CB:A0
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019704043A23D58B80829120C9BA7BA8052A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/lXDiDI_2UAd6TWziMdNHxcNwy6A.roa
Signing time: Sat 24 May 2025 20:37:54 +0000
ROA not before: Sat 24 May 2025 20:37:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206644
IP address blocks: 2a05:9a47::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:04:3a:23:d5:8b:80:82:91:20:c9:ba:7b:a8:05:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 20:37:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9570e20c8ff650077a4d6ce231d347c5c370cba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:e7:82:4c:c7:70:67:ff:9f:e7:f3:9c:18:
2f:91:6d:b2:8d:b2:b2:b9:b0:a6:93:90:ce:52:d2:
de:d9:d3:bf:45:9f:f3:5f:37:e5:c1:99:7e:d5:49:
b4:b3:1b:a6:82:92:eb:ab:6f:51:29:db:79:04:15:
fc:45:9a:da:10:d9:a7:0c:45:47:32:15:7f:c7:ef:
a3:0f:8e:6d:89:13:0c:ad:96:9a:57:5f:50:43:67:
c8:b5:06:6a:58:ab:92:8c:49:d8:2a:8b:e5:ec:ba:
d6:d8:6c:f2:2c:52:8c:61:44:c7:05:fe:7a:a6:8b:
eb:ae:98:fd:94:d7:1c:3d:a1:68:e1:b5:ab:4f:51:
b9:ff:49:73:3d:ee:7a:90:9b:96:ff:42:cd:f7:18:
b1:f8:7e:bb:8a:a5:60:a6:0e:f1:8b:3a:d6:90:20:
e6:72:41:76:31:55:1d:03:88:72:a2:fa:36:3e:7b:
66:1f:1d:ae:52:31:eb:44:7d:34:9a:ff:b8:65:d0:
bf:76:81:5d:18:a3:ef:8c:08:4d:45:db:6a:fc:ca:
59:6f:b4:64:74:b1:6c:c1:6b:e8:26:8a:19:cb:1d:
3f:2b:8b:6f:89:ca:f9:39:8e:51:f5:f9:9d:0a:e7:
da:d5:32:d8:3d:11:c3:81:8d:22:51:7f:cf:7e:50:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:70:E2:0C:8F:F6:50:07:7A:4D:6C:E2:31:D3:47:C5:C3:70:CB:A0
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/lXDiDI_2UAd6TWziMdNHxcNwy6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a47::/32
Signature Algorithm: sha256WithRSAEncryption
24:c0:66:f8:c0:66:f7:36:65:a2:cf:13:fa:30:93:eb:63:78:
99:83:6b:71:a7:dc:d0:f4:f4:2c:96:45:80:c9:fa:74:7a:df:
22:30:50:81:2a:45:b2:fa:ff:58:0e:95:1c:de:c1:17:ef:13:
e9:93:17:51:de:80:d7:83:94:20:93:ea:a2:8a:78:08:eb:bf:
f4:70:17:0f:24:fd:8a:5f:a9:a6:4e:e6:43:29:ba:ba:e3:ec:
c0:f9:20:70:60:ac:6c:d9:07:61:c8:ec:cf:c0:b2:85:89:fe:
5c:1b:c9:0f:4d:3c:00:72:0f:39:03:07:8a:bc:95:bb:d2:77:
54:9a:35:23:5f:3f:62:12:8c:30:91:0f:0c:62:f8:48:cb:af:
ef:8b:ae:c9:3d:a8:fe:ae:f7:1d:84:21:f3:bb:d9:7b:1e:50:
9f:3b:5d:53:31:8a:1f:65:04:4b:4b:d3:75:ac:6c:a6:fb:03:
ea:02:62:5b:cb:5d:7d:c9:4c:01:9b:db:70:f9:9d:28:d2:c8:
26:a0:2a:12:96:8d:97:bb:0d:5c:57:94:9f:61:93:20:4b:34:
41:d1:de:99:d3:af:59:a7:c8:b0:76:8f:01:e8:46:ec:bc:53:
f5:29:f8:55:f5:1c:9c:4a:03:60:8e:61:5b:44:63:1d:d2:59:
8e:b8:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:48:02 2025 by rpki-client