Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iqfVWP4JW1-qE82dKg5lt48NB0s.roa
File: iqfVWP4JW1-qE82dKg5lt48NB0s.roa (raw, json)
Hash identifier: u/wDV4bJBg/XGv1xJnYOEacTxiPJnVD27Rv8zTb+1Do=
Subject key identifier: 8A:A7:D5:58:FE:09:5B:5F:AA:13:CD:9D:2A:0E:65:B7:8F:0D:07:4B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F9B27C4782DBBD0190D00318ADE9FC780
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iqfVWP4JW1-qE82dKg5lt48NB0s.roa
Signing time: Tue 21 May 2024 12:37:05 +0000
ROA not before: Tue 21 May 2024 12:37:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202941
IP address blocks: 2a10:2f00:187::/48 maxlen: 48
2a10:ccc0:800::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 May 2024 14:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:27:c4:78:2d:bb:d0:19:0d:00:31:8a:de:9f:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 21 12:37:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aa7d558fe095b5faa13cd9d2a0e65b78f0d074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:e7:7e:bd:c0:54:0e:2f:08:36:9e:02:55:
5f:08:0b:a0:de:df:94:41:b2:2e:eb:76:0e:9a:b7:
c8:70:91:e2:29:ec:de:ae:2d:d2:c6:25:71:e3:02:
81:ee:a8:0c:95:f7:ec:97:62:c6:26:62:ad:da:60:
ae:90:97:4d:b1:f3:50:b5:dd:1f:be:ab:19:26:2b:
c5:79:63:ac:0a:af:ad:d7:b7:91:ca:36:c3:ea:10:
6a:d7:26:2e:80:36:3b:69:6d:ce:ac:f1:93:73:37:
84:54:dc:45:36:aa:bb:37:81:17:ae:28:bd:47:c2:
ad:17:22:7d:04:f2:00:17:84:6e:6c:2d:b0:af:a8:
17:42:ea:a6:1a:51:2a:55:b6:86:05:69:cf:ff:0a:
b4:62:5b:7d:6c:2e:0d:0d:60:65:42:e1:08:ab:7f:
39:f0:db:3a:b4:04:92:35:08:87:14:99:5a:70:8b:
13:03:a5:0a:9c:85:61:6b:6d:fa:4b:21:01:41:18:
59:f3:c1:05:54:63:1b:cf:2d:e4:2d:75:ce:dd:df:
e2:5c:42:96:75:f4:02:f8:09:df:4b:b0:aa:d6:92:
3b:e8:80:3b:e2:80:8a:0c:42:16:37:e9:18:90:56:
a8:f3:82:06:5c:8d:ec:68:d8:fa:f9:25:a9:ee:4d:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:D5:58:FE:09:5B:5F:AA:13:CD:9D:2A:0E:65:B7:8F:0D:07:4B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iqfVWP4JW1-qE82dKg5lt48NB0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:187::/48
2a10:ccc0:800::/48
Signature Algorithm: sha256WithRSAEncryption
15:48:31:f7:88:67:23:9b:fd:30:3e:d8:59:a6:6a:79:82:f8:
28:97:45:22:c0:92:30:fe:23:69:02:78:f2:1f:cc:9e:27:f0:
a5:20:23:88:cc:01:11:5a:b8:59:3e:91:fc:75:4b:eb:94:79:
f7:c2:37:aa:4f:82:fa:cb:7e:aa:67:bb:76:ad:d3:ae:c9:88:
d7:8c:56:a7:e3:18:18:19:52:8d:5b:2e:77:a8:ce:cc:51:af:
37:10:a9:12:4b:2a:16:b9:d1:1e:d8:21:fc:48:2c:35:34:32:
4f:c3:f9:5f:d0:eb:ca:75:6b:f3:30:f3:f3:8e:9f:5b:dc:a8:
4f:cd:0a:71:a1:bf:a4:1c:91:1e:4d:e0:54:ff:8f:ba:99:4e:
6a:77:14:2c:fd:15:b5:96:71:07:05:04:55:fa:8a:3b:c1:3d:
30:94:d3:c5:81:18:b2:87:8a:ab:df:38:37:57:58:0c:3a:9d:
20:46:33:eb:bc:f9:44:e6:ec:d9:f7:aa:b7:2d:08:15:af:46:
1c:d0:40:89:ad:ca:b4:66:66:5d:29:07:4f:6b:ac:1d:9d:8e:
61:e1:d6:1a:af:5a:5b:ef:7d:bc:3c:52:0f:3f:a7:ee:5e:06:
79:7d:10:f8:f1:25:05:80:35:5e:bc:d0:38:18:d7:0e:f3:2f:
69:05:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:14:44 2025 by rpki-client