Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/iFzaZh7wD0s4pht45I0KivtJvtI.roa
File: iFzaZh7wD0s4pht45I0KivtJvtI.roa (raw, json)
Hash identifier: g2S3noi4ZOrLz571qgShpor8RUR5vZxrq0PIxPmI1io=
Subject key identifier: 88:5C:DA:66:1E:F0:0F:4B:38:A6:1B:78:E4:8D:0A:8A:FB:49:BE:D2
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 0195CDE546D5651E938A9710112F9FC12AAB
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/iFzaZh7wD0s4pht45I0KivtJvtI.roa
Signing time: Tue 25 Mar 2025 15:21:50 +0000
ROA not before: Tue 25 Mar 2025 15:21:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12776
IP address blocks: 2a05:8140::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 28 Mar 2025 15:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:e5:46:d5:65:1e:93:8a:97:10:11:2f:9f:c1:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Mar 25 15:21:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=885cda661ef00f4b38a61b78e48d0a8afb49bed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:22:9f:b7:26:de:43:43:00:19:3f:cf:3f:
db:1b:b0:13:5e:f7:8f:5f:93:14:71:5e:ce:f0:3c:
a7:7b:c5:fa:f7:a1:7f:14:29:20:9d:8e:40:28:94:
c7:a7:57:88:d8:42:15:c1:6e:26:41:ba:f2:37:0b:
12:f8:3f:56:bc:19:ac:b2:23:3c:8f:a5:9b:6b:4b:
78:9d:93:66:26:19:58:74:08:33:fc:48:85:ff:e2:
e5:99:f0:ea:b5:3f:e1:e8:a3:6f:c6:a4:be:cd:a1:
74:25:62:06:0c:da:ea:33:58:bc:29:0a:d7:9b:52:
e3:f6:55:5a:eb:a4:b9:e2:72:a1:9c:90:7c:e8:c2:
6d:01:f7:a8:d2:f7:0b:9d:88:72:86:c3:54:c8:55:
1a:d6:46:48:13:e0:3f:c4:ee:e4:11:a6:2e:1a:04:
bc:bc:47:95:b1:3f:96:14:ae:56:b5:1a:cb:4a:cf:
27:24:16:4b:d9:de:e2:38:c8:ec:55:6c:53:fc:25:
66:fd:1d:b1:c0:54:c9:07:eb:83:05:d8:4f:76:99:
6f:80:72:d6:17:91:77:ed:b1:09:e0:78:d7:cd:0a:
87:de:41:a5:c4:95:0a:58:a8:80:e6:63:98:6f:a0:
f8:21:95:7e:d9:b1:e4:47:b7:b5:86:91:1f:26:70:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:DA:66:1E:F0:0F:4B:38:A6:1B:78:E4:8D:0A:8A:FB:49:BE:D2
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/iFzaZh7wD0s4pht45I0KivtJvtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:8140::/29
Signature Algorithm: sha256WithRSAEncryption
23:0a:29:bb:a4:77:06:ac:af:18:13:20:88:b8:0d:ee:2f:d9:
f4:c6:be:95:0b:ba:5c:0f:43:55:51:d8:a4:d9:8e:e0:ed:bb:
63:00:c1:cf:05:2d:e3:d6:46:08:fd:1d:72:65:3e:21:d8:b7:
b7:74:96:94:27:53:0a:a1:f8:19:1c:82:c2:e7:89:16:27:41:
42:2a:fd:fe:09:32:04:4c:bd:75:9f:35:f5:6e:7a:17:77:cc:
c7:5f:63:b2:a8:c6:07:5b:d4:92:7e:f0:c1:74:d1:52:e6:d7:
2f:f4:43:ff:7a:64:a3:ca:2f:91:05:41:3a:fe:cf:60:49:50:
cc:0a:cd:63:29:dc:5d:ae:b2:aa:c2:20:67:a5:22:3b:85:77:
b9:2f:f5:ae:a8:5f:12:ca:92:00:d9:43:11:07:3a:5f:be:81:
7d:2f:36:2c:37:8c:86:bc:38:4e:6f:a1:a7:6a:bd:42:6c:7e:
05:32:02:2e:0d:6c:62:f9:ce:5c:29:2e:ed:03:15:c4:b7:ec:
1d:4f:6b:34:bc:aa:4f:ed:3f:3e:db:55:3f:c7:32:5d:cb:fd:
f3:83:2d:64:da:74:a0:17:05:19:63:37:3a:02:1c:3b:f2:2b:
54:fc:cf:72:25:9e:55:87:3a:21:2e:7a:d3:7d:92:0c:36:be:
a4:83:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:03 2025 by rpki-client