Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/svz4mS48PRjiUYNdyUhqjLh9vG8.roa
File: svz4mS48PRjiUYNdyUhqjLh9vG8.roa (raw, json)
Hash identifier: ZzGX5lSjqxAJy/8FJ6pzVlJ6Opsxfj2VNpR0Sz9oJ60=
Subject key identifier: B2:FC:F8:99:2E:3C:3D:18:E2:51:83:5D:C9:48:6A:8C:B8:7D:BC:6F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01971877358109C0ACDD0ABEE48F852C4117
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/svz4mS48PRjiUYNdyUhqjLh9vG8.roa
Signing time: Wed 28 May 2025 19:55:54 +0000
ROA not before: Wed 28 May 2025 19:55:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a13:c340::/29 maxlen: 29
2a13:c3c0::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 04 Jun 2025 19:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:77:35:81:09:c0:ac:dd:0a:be:e4:8f:85:2c:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 28 19:55:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2fcf8992e3c3d18e251835dc9486a8cb87dbc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:06:5e:cf:bf:9e:9e:5c:72:8c:e2:44:bb:
27:e4:e9:52:03:d6:da:06:aa:8c:f8:3a:f1:16:96:
3a:80:fa:25:5a:f1:51:5e:47:cf:0e:2c:54:69:72:
45:a3:12:44:08:0a:c8:32:82:b0:d2:06:3b:2b:20:
e8:2e:c6:50:b8:bd:0b:be:0f:d4:3c:9b:ed:93:8b:
56:dc:d4:59:93:91:58:9b:a4:7b:f6:93:0e:2e:1a:
89:89:96:76:ca:3b:31:8e:91:11:59:c7:11:f6:3f:
1d:57:8d:5e:05:d4:21:b0:56:b3:52:da:d8:60:39:
df:ec:62:a1:7b:21:35:1d:3e:6d:1e:a7:0e:c3:52:
34:ec:65:37:b2:d8:c2:57:74:e2:ff:39:27:e3:a8:
02:31:c3:41:10:b7:29:15:df:e6:cc:a6:d6:0b:d6:
f7:c8:a6:f4:0b:3d:d8:a2:d6:d4:21:3b:03:03:87:
62:24:ce:96:1b:aa:dc:48:ad:33:bd:6a:0b:df:44:
6e:64:b7:87:29:51:ae:91:d8:34:bf:20:f2:83:6b:
0c:d8:19:ae:63:ea:1e:e1:7c:ca:24:61:43:b7:cf:
30:3e:78:f4:76:9b:dd:23:93:28:b0:3e:8c:be:1c:
ed:4b:c1:c1:fa:89:56:d3:02:69:f2:cd:b1:0b:02:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FC:F8:99:2E:3C:3D:18:E2:51:83:5D:C9:48:6A:8C:B8:7D:BC:6F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/svz4mS48PRjiUYNdyUhqjLh9vG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c340::/29
2a13:c3c0::/29
2a14:42c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:6f:cb:5e:d3:d6:d3:0a:53:8c:14:04:52:51:de:d0:1a:9b:
8e:b4:82:2f:16:13:af:b8:af:d9:72:70:0c:00:ae:ea:ad:ca:
cf:e1:f8:4d:1d:04:c1:b0:be:7d:46:b2:2d:bd:35:09:94:37:
36:3c:d1:28:e8:c6:9a:3e:03:a5:19:0a:2c:c5:9b:a3:af:8c:
b1:50:af:22:f1:4c:dd:8e:f0:ca:23:5d:d2:89:32:18:18:b6:
ea:60:31:13:ac:19:62:ed:b6:76:66:11:0b:61:a8:b2:ad:29:
8d:16:55:c2:09:85:29:e5:08:28:e2:5f:3b:87:62:6b:ed:c7:
89:cf:a6:24:4d:c2:7c:c9:e2:bd:ec:f0:ff:f7:89:4c:e1:3d:
55:c7:39:cd:c8:99:ea:88:91:02:11:56:de:27:43:51:ea:c7:
2d:63:d2:8a:62:47:a1:6e:52:b4:33:87:a0:c9:6a:65:a5:0d:
55:ea:78:9f:db:d7:2e:a7:82:4b:b9:b9:75:0d:80:a5:96:3e:
63:36:4b:4f:18:8b:87:5e:92:61:03:78:4b:5e:a6:02:f8:df:
01:9c:7f:8a:c3:bd:1e:01:03:75:4b:d9:d8:71:ff:36:ff:0d:
16:1c:9d:80:e7:d9:12:35:61:ba:0b:6a:d4:38:e5:55:4e:78:
5e:fd:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:44 2025 by rpki-client