Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/4Y6yHAuyISb3IImKpqalZ_95mB4.roa
File: 4Y6yHAuyISb3IImKpqalZ_95mB4.roa (raw, json)
Hash identifier: iFNSHw3R4eSVZz7ULs/I4XytnGE1AqoiuCzpNKOOvCo=
Subject key identifier: E1:8E:B2:1C:0B:B2:21:26:F7:20:89:8A:A6:A6:A5:67:FF:79:98:1E
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 0196104A09E81E2BF9A98EE05BA561A2E7E1
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/4Y6yHAuyISb3IImKpqalZ_95mB4.roa
Signing time: Mon 07 Apr 2025 12:46:49 +0000
ROA not before: Mon 07 Apr 2025 12:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212615
IP address blocks: 2a0b:7c80::/48 maxlen: 48
2a0b:7c80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 08 Apr 2025 06:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:4a:09:e8:1e:2b:f9:a9:8e:e0:5b:a5:61:a2:e7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Apr 7 12:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e18eb21c0bb22126f720898aa6a6a567ff79981e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:83:c3:f4:7f:40:5f:bf:e8:19:a9:d8:8e:
ba:29:b4:e5:9d:a4:7b:97:d7:53:d7:46:94:d8:85:
3b:ca:dd:90:2b:23:ad:56:2b:e9:b9:37:39:68:a0:
8a:ac:ff:e3:47:c0:1c:23:49:84:7b:3c:1d:ea:38:
8f:4f:b7:f8:ff:fd:6c:2c:92:4b:03:02:d9:f6:0d:
7f:d8:fb:21:b4:8b:77:b1:25:c7:86:fc:6d:b5:18:
33:3c:53:d5:8a:91:fb:77:5b:11:d1:60:08:f2:f1:
3d:56:9d:9d:45:bd:81:80:49:10:3e:3f:98:cf:3e:
bc:3c:23:a6:24:26:36:a1:ee:27:5d:91:ce:67:a8:
06:6a:29:ea:d5:78:12:e4:ad:04:65:79:0c:44:06:
55:7c:5c:d9:81:a5:e7:44:fa:18:4a:f9:60:d9:c4:
1e:87:8f:ca:02:2e:7d:a1:59:a5:f9:53:6d:12:b2:
e7:66:0d:3e:27:39:93:c1:eb:6f:fd:b1:9b:17:15:
e5:04:e5:3d:27:a1:2a:08:5a:09:da:33:30:ec:79:
e3:06:fb:65:3b:04:97:e8:43:20:b6:ce:38:16:7a:
46:a7:b3:6e:8c:66:8f:06:7b:d7:4e:c7:b9:f8:cc:
20:f5:d6:f9:b2:13:de:35:bb:3b:c9:c0:c5:6a:3c:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8E:B2:1C:0B:B2:21:26:F7:20:89:8A:A6:A6:A5:67:FF:79:98:1E
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/4Y6yHAuyISb3IImKpqalZ_95mB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7c80::/47
Signature Algorithm: sha256WithRSAEncryption
27:6a:5e:08:9d:d7:16:e3:9e:1f:82:35:74:be:39:47:71:3b:
56:2a:0e:fe:bb:3d:d6:29:3c:71:b4:8b:67:98:74:9a:6c:8c:
fe:ea:fe:75:8d:c2:7d:92:e4:49:88:c0:fe:ca:c7:e9:f3:79:
67:d5:46:d4:a5:58:e5:47:12:dd:e6:f6:e4:f0:dd:17:7c:f9:
d8:c4:77:d2:3a:00:9e:7c:69:66:9f:91:a6:e1:0c:72:70:a6:
c8:ab:20:62:86:9a:e8:18:f5:ba:4a:89:25:cf:ce:32:74:93:
04:67:80:5e:b9:f7:e1:32:c5:3c:4c:8e:2f:e2:6a:12:a4:d9:
21:bc:98:d9:8f:4d:9f:77:d3:03:46:c7:9b:1c:3d:d1:a6:ed:
7c:11:81:7d:1f:c2:b9:fe:59:63:34:cb:82:7d:62:63:87:7a:
75:8e:e6:08:88:5e:ac:0f:3d:8a:71:d9:0a:a4:b7:b7:5c:10:
c2:f2:a2:c7:8b:a9:b2:cc:a4:e3:43:3d:3d:5f:30:74:f5:1e:
6f:24:74:f7:43:3b:07:22:5c:ef:f8:d4:35:13:d2:71:c2:0a:
f9:af:49:d9:80:c2:61:4f:37:0f:5a:82:3a:ed:11:36:ff:c0:
68:e4:1e:5d:9a:b5:47:c8:c8:27:6b:7a:9e:78:3c:b4:eb:f9:
5c:58:0a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:42 2025 by rpki-client