Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E1N4HLMk7-eP5-PLsm1sX0ERpgo.roa
File: E1N4HLMk7-eP5-PLsm1sX0ERpgo.roa (raw, json)
Hash identifier: IYLFTiihqv9c++6dV8JVuEtUm/HK2TJREZ7PYMyeeSE=
Subject key identifier: 13:53:78:1C:B3:24:EF:E7:8F:E7:E3:CB:B2:6D:6C:5F:41:11:A6:0A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E9034D6225CB1941DC1B93115672884A6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E1N4HLMk7-eP5-PLsm1sX0ERpgo.roa
Signing time: Sat 30 Mar 2024 16:32:45 +0000
ROA not before: Sat 30 Mar 2024 16:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 2a0e:b107:27d0::/46 maxlen: 48
2a0e:b107:27d4::/46 maxlen: 48
2a0e:b107:27f4::/46 maxlen: 48
2a0e:b107:27f8::/46 maxlen: 48
2a0e:b107:27fc::/46 maxlen: 48
2a0e:b107:2800::/46 maxlen: 48
2a0e:b107:2804::/46 maxlen: 48
2a0e:b107:2810::/46 maxlen: 48
2a0e:b107:2814::/46 maxlen: 48
2a0e:b107:2818::/46 maxlen: 48
2a0e:b107:281c::/46 maxlen: 48
2a0e:b107:2820::/46 maxlen: 48
2a0e:b107:2824::/46 maxlen: 48
2a0e:b107:2828::/46 maxlen: 48
2a0e:b107:282c::/46 maxlen: 48
2a0e:b107:2840::/46 maxlen: 48
2a0e:b107:2844::/46 maxlen: 48
2a0e:b107:2858::/46 maxlen: 48
2a0e:b107:285c::/46 maxlen: 48
2a0e:b107:2860::/46 maxlen: 48
2a0e:b107:2864::/46 maxlen: 48
2a0e:b107:2868::/46 maxlen: 48
2a0e:b107:286c::/46 maxlen: 48
2a0e:b107:2870::/46 maxlen: 48
2a0e:b107:2874::/46 maxlen: 48
2a0e:b107:2878::/46 maxlen: 48
2a0e:b107:287c::/46 maxlen: 48
2a0e:b107:2888::/46 maxlen: 48
2a0e:b107:288c::/46 maxlen: 48
2a0e:b107:2890::/46 maxlen: 48
2a0e:b107:2894::/46 maxlen: 48
2a0e:b107:2898::/46 maxlen: 48
2a0e:b107:289c::/46 maxlen: 48
2a0e:b107:28b0::/46 maxlen: 48
2a0e:b107:28b4::/46 maxlen: 48
Validation: Failed, certificate revoked on Sat 30 Mar 2024 16:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:90:34:d6:22:5c:b1:94:1d:c1:b9:31:15:67:28:84:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 30 16:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1353781cb324efe78fe7e3cbb26d6c5f4111a60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:b2:f7:0a:c8:a6:05:31:b2:96:7c:3c:e5:
54:4d:71:e0:c4:cd:6c:97:57:96:31:a2:7a:01:6b:
12:6c:ff:a3:a7:cf:52:7d:ce:c8:71:f1:1d:8d:56:
a3:ed:7c:79:55:a0:b2:d8:9e:9e:7e:e6:ea:99:05:
4f:0a:b2:ea:9d:39:1d:67:75:1c:5c:2c:d9:86:d0:
75:ae:3e:9a:8c:41:12:9e:97:34:54:19:27:e1:82:
62:77:d5:0e:ca:61:aa:74:1a:42:1e:66:55:2d:10:
4c:71:32:ab:b5:ed:e0:5a:bf:5e:f6:b0:00:74:8f:
95:38:ed:2c:99:75:05:c2:0a:f2:b3:1f:d8:98:bc:
41:c4:0b:65:ca:b4:02:9b:c3:7e:66:a4:94:5f:07:
a0:b3:19:4e:c2:e4:8c:c8:cc:9d:aa:e6:19:85:59:
23:ef:26:77:57:ce:4e:1b:54:53:d5:76:e8:6d:fd:
cc:65:ae:9d:8f:74:89:f9:7e:74:bd:f0:c8:d6:5d:
2f:4e:54:55:89:36:e8:c6:b2:60:55:ff:8e:82:4b:
63:70:71:ae:23:e3:32:f3:68:44:da:3c:aa:41:f9:
0f:65:a5:4e:d7:2b:3d:4b:27:fd:6b:df:f9:9f:a4:
4f:a1:67:b0:44:b0:f4:76:4d:de:32:36:6a:96:4c:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:78:1C:B3:24:EF:E7:8F:E7:E3:CB:B2:6D:6C:5F:41:11:A6:0A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E1N4HLMk7-eP5-PLsm1sX0ERpgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/45
2a0e:b107:27f4::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2810::-2a0e:b107:282f:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2840::/45
2a0e:b107:2858::-2a0e:b107:287f:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2888::-2a0e:b107:289f:ffff:ffff:ffff:ffff:ffff
2a0e:b107:28b0::/45
Signature Algorithm: sha256WithRSAEncryption
c5:37:ba:bc:ee:03:c4:f2:59:25:17:da:69:5d:ac:64:9e:93:
f1:86:5a:53:a5:6f:2f:b8:e7:e4:8a:df:5f:ad:e5:f6:77:af:
8f:08:14:a6:1d:96:08:94:1c:13:63:7b:0e:63:5d:9c:ea:28:
c2:ca:35:5b:8c:ea:3a:45:4e:f0:bf:1a:34:f1:ad:99:d5:b5:
0e:b4:a4:c5:af:87:d1:32:28:25:f7:8e:7c:b6:75:d2:c0:fb:
ed:76:a4:27:ed:aa:e0:e1:c3:ed:d5:a0:a2:a6:ea:c1:fd:9d:
01:04:1a:00:53:4c:d0:19:fa:ab:70:a4:55:37:79:a7:db:37:
94:bd:b3:d8:92:be:b0:b6:19:14:7e:1a:35:24:b1:92:71:a8:
ff:31:1c:55:8a:6d:c3:ff:3b:17:09:b8:31:96:fb:30:e5:dc:
82:34:b5:d2:fc:64:cd:b3:30:a3:dc:4f:f4:7b:47:28:a4:4d:
cc:6e:4d:31:8e:53:94:32:ba:e4:ef:a2:31:43:a6:19:d0:aa:
e6:fa:65:c2:ad:a3:36:39:f8:ab:42:a2:72:a0:43:4d:ea:c2:
34:b3:fb:22:6c:09:16:39:54:52:1a:d1:51:9a:f7:e1:33:53:
69:e5:07:2d:ae:91:f8:26:40:4b:f2:19:f5:80:70:6c:54:c8:
b3:c6:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:50:37 2025 by rpki-client