Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Fq1OKRmJol4ZqwCtjRhMem33GuU.roa
File: Fq1OKRmJol4ZqwCtjRhMem33GuU.roa (raw, json)
Hash identifier: hTi2vhbUYBu/uNB+47cr8HOTVEIWGd33iJGNm1ocfI4=
Subject key identifier: 16:AD:4E:29:19:89:A2:5E:19:AB:00:AD:8D:18:4C:7A:6D:F7:1A:E5
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0195868178847E8BFFE9B71980403BBE55FB
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Fq1OKRmJol4ZqwCtjRhMem33GuU.roa
Signing time: Tue 11 Mar 2025 18:39:46 +0000
ROA not before: Tue 11 Mar 2025 18:39:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:cf06::/32 maxlen: 32
2a09:dd05::/32 maxlen: 32
2a0a:b385::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 13 Mar 2025 17:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:81:78:84:7e:8b:ff:e9:b7:19:80:40:3b:be:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 11 18:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ad4e291989a25e19ab00ad8d184c7a6df71ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4a:3b:3a:fd:84:d9:b2:77:02:ed:79:7f:0b:
a1:f6:5b:2a:ab:ed:18:e3:8b:aa:d4:8c:e0:51:70:
0e:5f:12:ec:03:15:55:44:79:37:b2:57:60:2f:28:
8e:85:7a:6c:7e:ce:a9:39:eb:c3:8d:9f:2a:20:c3:
2d:35:8b:50:c3:03:2f:ab:f2:ea:d2:61:f7:b0:0e:
49:23:12:58:33:0c:6d:8f:d1:d3:63:fc:e2:18:30:
95:4b:7a:66:71:a8:3f:45:50:44:ba:51:aa:3e:57:
cc:10:06:cb:c6:8d:47:99:23:48:2e:a7:cc:c5:57:
de:15:21:54:02:88:b1:1f:fc:fb:10:c3:ba:c6:b8:
98:dd:b0:a4:15:59:ec:aa:86:64:65:a2:6b:42:96:
c2:6d:99:8c:3c:46:6c:73:4b:3f:1b:53:5e:a7:e4:
49:7f:00:65:5f:1b:22:af:f6:db:c9:2d:9e:6b:f8:
ff:29:1a:12:2f:88:f2:9a:86:5f:ec:59:8e:f5:da:
c2:25:09:f2:60:6e:20:bf:39:2c:e2:9e:9a:f0:34:
d6:1e:a8:88:6d:96:d6:26:a5:31:3b:ed:71:1e:67:
ab:77:e4:74:f0:75:2e:75:40:38:00:9b:6b:be:ac:
b1:0e:c6:d6:12:77:62:7c:1a:33:1d:9a:ad:86:b6:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:4E:29:19:89:A2:5E:19:AB:00:AD:8D:18:4C:7A:6D:F7:1A:E5
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Fq1OKRmJol4ZqwCtjRhMem33GuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:cf06::/32
2a09:dd05::/32
2a0a:b385::/32
Signature Algorithm: sha256WithRSAEncryption
79:d0:b4:6e:20:33:32:87:71:ff:d4:60:5d:ce:27:a0:6d:d7:
61:0d:3a:73:08:09:91:60:50:c8:57:bf:77:f6:a2:4d:0f:cd:
32:96:63:a8:ff:58:37:2b:92:4c:d9:f4:d7:43:54:90:d6:03:
f1:10:24:70:3d:13:1a:9c:2a:92:51:f2:23:81:c4:f6:d6:0c:
77:20:c9:e8:9f:f5:56:a6:a9:8f:fb:f8:a9:fb:55:f3:7a:5d:
95:92:ec:77:25:a5:53:b1:8d:0c:1c:1a:85:e6:18:82:19:3d:
45:46:9b:cb:b2:da:f4:6c:ab:85:af:51:45:1c:1b:3e:49:b9:
54:c4:aa:57:de:53:c2:fd:79:04:68:64:0a:8b:d8:ef:bd:b0:
2d:d4:23:f0:1d:c6:55:bd:c5:e4:cb:1f:a6:1d:e0:2e:f9:8a:
e6:ca:af:f3:02:84:f0:ec:b3:26:ca:95:63:a6:6b:92:52:b6:
9b:29:4e:c1:66:c1:f3:9c:16:bb:5d:2c:00:c7:47:73:65:3c:
17:f0:03:06:b3:b0:8f:fc:9e:50:97:3e:b9:72:09:65:ab:b5:
11:61:05:27:9d:e0:8b:b7:b6:e9:7b:ba:84:05:72:3c:e1:1c:
a4:88:ea:8d:f3:69:49:a4:ab:01:57:b2:49:56:3e:d1:2b:84:
8e:2d:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:14 2025 by rpki-client