Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ujCkbyO8kfh3MmDo5UekSQPD5Os.roa
File: ujCkbyO8kfh3MmDo5UekSQPD5Os.roa (raw, json)
Hash identifier: SpfKPDtuyrGdoJbpGOeVjzNCIL678C9LY1FV/RsMWAc=
Subject key identifier: BA:30:A4:6F:23:BC:91:F8:77:32:60:E8:E5:47:A4:49:03:C3:E4:EB
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 01958C6AE22AA955921505F185B66F714425
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ujCkbyO8kfh3MmDo5UekSQPD5Os.roa
Signing time: Wed 12 Mar 2025 22:12:49 +0000
ROA not before: Wed 12 Mar 2025 22:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 2a09:2b80:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Mar 2025 22:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:6a:e2:2a:a9:55:92:15:05:f1:85:b6:6f:71:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 12 22:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba30a46f23bc91f8773260e8e547a44903c3e4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:07:f2:db:1a:6e:d7:fe:88:0c:73:85:d8:
59:ad:10:9a:db:94:e1:17:73:b3:3d:bf:3d:14:30:
cb:54:e4:49:7c:d0:c1:57:b0:d9:67:cb:3f:06:70:
f0:83:79:5e:a3:c4:ad:c8:92:06:e4:8b:ff:e3:5a:
71:1f:68:d0:cf:1a:10:20:24:60:9d:d3:25:2f:1f:
84:5e:c5:c1:b5:3f:6f:b0:ee:44:ca:d5:5d:a9:94:
64:82:00:82:75:47:16:c8:db:94:3e:37:75:31:27:
58:c3:0d:90:f2:af:09:36:47:f1:5e:a2:4c:5b:03:
89:80:12:31:2a:bf:58:10:c4:40:33:ce:d2:e3:91:
31:13:56:e2:f5:8b:ea:23:a3:3a:72:2d:c2:79:12:
4a:a9:1f:18:21:50:26:8f:fc:88:43:03:1d:89:6f:
fc:75:be:6e:8a:d1:25:02:a0:c3:6f:4c:ee:61:fd:
a4:95:5e:82:eb:00:2f:c2:a2:34:66:25:3e:87:0b:
97:fa:55:35:33:52:31:d3:a2:9b:65:17:6a:8f:f6:
32:f8:e4:c6:bb:99:39:89:6d:84:4e:f6:4d:e9:4b:
c6:02:ba:38:6a:de:0b:aa:a8:c1:90:0f:6a:9e:f9:
a6:67:b0:ee:25:5f:f7:6a:17:90:bf:8a:88:bd:50:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:30:A4:6F:23:BC:91:F8:77:32:60:E8:E5:47:A4:49:03:C3:E4:EB
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ujCkbyO8kfh3MmDo5UekSQPD5Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:15::/48
Signature Algorithm: sha256WithRSAEncryption
51:f6:a7:8e:1d:52:b9:5f:09:d7:ca:05:ca:93:9d:5f:bf:b8:
74:1d:c8:a4:ad:a5:75:13:ec:a8:b4:8f:0d:79:87:48:c9:fd:
e2:4d:0c:82:ab:a4:5d:2e:8f:08:21:af:85:e4:c2:8a:16:41:
e5:f0:88:06:85:df:4d:f6:b3:bc:b7:88:3b:ff:6e:44:89:3a:
73:25:ee:54:15:2d:fe:77:35:05:0b:3a:a0:66:73:03:e6:22:
7d:32:ab:4b:ba:5a:66:ff:ea:a9:14:dc:f6:02:42:67:5a:46:
9e:22:9e:6b:84:08:1a:fd:b0:6d:c9:a4:f7:61:16:2c:40:19:
da:e1:26:38:fd:d3:6b:c4:91:77:1c:c7:19:3e:91:eb:fc:79:
3e:7c:0e:f3:28:71:9c:ea:71:c2:39:b4:da:45:53:2e:0a:e7:
38:ad:69:54:76:00:66:ed:40:9a:ad:84:57:e5:4d:ba:9a:d1:
1d:eb:b6:51:6f:1a:ad:85:f9:ee:71:47:fe:5f:ae:7b:cc:0b:
84:28:22:f2:8d:07:d6:e1:53:04:a3:57:92:45:0a:c3:0e:71:
85:98:c8:d8:20:4c:0c:07:28:e2:e8:68:85:98:61:65:b1:75:
95:3c:4c:f1:34:81:69:db:58:05:e2:a6:c2:33:55:9a:c7:e6:
86:93:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:26:20 2025 by rpki-client