Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/gKWPv8DSVqX8xVlK9M0uN1iqitk.roa
File: gKWPv8DSVqX8xVlK9M0uN1iqitk.roa (raw, json)
Hash identifier: 14ef2ocgMaQHDYorcCRvKypxdiAuNysQ/l6SYWgG3ps=
Subject key identifier: 80:A5:8F:BF:C0:D2:56:A5:FC:C5:59:4A:F4:CD:2E:37:58:AA:8A:D9
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 0194252154A38C96FA29E687EE1EC3B9EB43
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/gKWPv8DSVqX8xVlK9M0uN1iqitk.roa
Signing time: Thu 02 Jan 2025 03:48:48 +0000
ROA not before: Thu 02 Jan 2025 03:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:3900::/32 maxlen: 32
2a09:3904::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 23 Jan 2025 07:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:54:a3:8c:96:fa:29:e6:87:ee:1e:c3:b9:eb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Jan 2 03:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80a58fbfc0d256a5fcc5594af4cd2e3758aa8ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e6:2d:1f:6b:3b:94:bd:63:30:8c:ef:33:d9:
51:cc:cd:38:27:44:ae:67:96:78:00:fb:04:31:fb:
32:bd:98:70:de:f3:ff:fc:3c:53:bd:2a:61:28:a8:
f1:49:e8:e8:e8:92:bb:76:1b:db:de:ad:1f:49:b9:
a2:87:b1:2d:14:4f:19:a2:2e:a4:c4:83:24:17:69:
e3:9e:30:ff:bd:ca:53:b7:67:d3:b4:f2:45:ff:eb:
72:e7:81:fd:6f:b8:3f:f2:cd:93:5e:c9:79:2f:37:
d9:53:4e:85:15:a4:30:42:ba:f0:0b:ac:49:d2:73:
cc:40:19:51:08:b3:2b:31:15:31:b1:91:7c:69:90:
e3:d3:1c:ed:6d:1c:c9:a3:88:39:0e:38:23:7c:04:
e8:a3:6d:0b:b2:a7:16:5c:5e:11:22:51:12:06:37:
fb:d4:8a:5b:86:45:fa:0c:fd:24:69:51:c6:45:d6:
38:f9:c3:72:b7:d2:a5:84:1a:55:29:11:dd:2d:0b:
72:40:94:f6:8a:21:43:b9:f9:90:cf:c3:bd:19:48:
da:41:e2:69:18:13:81:5e:f3:dc:0f:0b:c4:6f:db:
44:00:fe:5d:55:c1:54:e8:78:db:90:b7:da:fc:d9:
bc:a9:da:c4:c4:f6:84:84:e0:2a:b4:34:3a:78:b1:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:8F:BF:C0:D2:56:A5:FC:C5:59:4A:F4:CD:2E:37:58:AA:8A:D9
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/gKWPv8DSVqX8xVlK9M0uN1iqitk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3900::/32
2a09:3904::/32
Signature Algorithm: sha256WithRSAEncryption
87:c2:48:79:ad:87:4d:a7:2e:8b:4a:7d:fb:9f:a2:77:9a:7d:
4b:79:d9:57:cc:3e:07:2a:ce:d6:63:f3:0b:d9:ba:c0:c9:08:
9d:57:43:df:ad:bd:d0:01:08:82:af:29:75:ac:58:2f:78:08:
14:d7:02:39:68:a2:9a:90:f7:9a:12:73:e7:21:cf:2d:22:c0:
c8:9d:c4:7f:98:72:9d:90:76:e5:87:b1:20:e4:54:ae:89:d3:
ec:2f:78:73:87:2a:61:af:4e:b9:3b:c6:a6:43:f8:ac:e1:14:
ac:97:69:eb:81:57:19:45:a6:e5:d9:d8:42:bf:08:7b:30:c5:
aa:ee:37:7c:da:fb:36:9a:f0:26:47:bb:77:9d:75:94:d0:2c:
6e:63:5d:75:35:d4:dd:79:6e:8a:d2:62:3f:f1:73:14:4c:df:
af:06:55:ae:30:a9:69:ec:56:db:94:aa:33:60:99:23:06:9c:
05:6f:33:f9:9d:ee:c6:48:46:7f:8b:9b:4c:ae:63:9c:56:62:
d4:9e:99:f6:d3:dc:2b:f3:f3:88:eb:c5:30:bc:43:7b:c7:ac:
c8:67:bf:1e:f0:89:20:aa:b8:35:28:85:4e:5f:bf:7f:b9:4f:
68:b0:73:ae:4f:f6:44:d4:6d:67:35:6a:6f:f3:4d:89:89:bd:
b4:d8:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:30 2025 by rpki-client