Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qoPK6wE07hNoOJZPm9mYfwmWAoM.roa
File: qoPK6wE07hNoOJZPm9mYfwmWAoM.roa (raw, json)
Hash identifier: kDEKSJY+ocixdgFEl6Mge/iyck12TQWyQRh3lQ8Bqog=
Subject key identifier: AA:83:CA:EB:01:34:EE:13:68:38:96:4F:9B:D9:98:7F:09:96:02:83
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CE48E2089E5A5B789C176D0043AA86926
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qoPK6wE07hNoOJZPm9mYfwmWAoM.roa
Signing time: Sun 07 Jan 2024 15:32:48 +0000
ROA not before: Sun 07 Jan 2024 15:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 2a0e:b107:2804::/46 maxlen: 48
2a0e:b107:27fc::/46 maxlen: 48
2a0e:b107:2800::/46 maxlen: 48
2a0e:b107:27f8::/46 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jan 2024 15:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:8e:20:89:e5:a5:b7:89:c1:76:d0:04:3a:a8:69:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 7 15:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa83caeb0134ee136838964f9bd9987f09960283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:c4:96:62:88:8c:c6:2b:a3:bb:c0:24:61:
a4:a5:e6:b4:e1:f0:f7:87:12:e4:94:19:1b:cb:9e:
7a:77:cc:64:25:98:6b:6f:5c:1f:a3:bc:11:48:f2:
55:70:98:73:33:76:66:48:69:10:b4:53:ed:71:84:
ce:0b:20:44:7b:fa:a0:c8:da:f6:f8:49:c6:ba:6c:
4f:aa:15:91:00:e2:1d:92:3f:82:2b:10:64:2d:0c:
76:4c:04:ab:bc:52:01:ae:42:1e:6e:8e:57:cf:50:
e6:05:0d:c0:e3:4e:17:74:0d:6e:4b:7b:af:51:73:
92:83:64:28:52:af:26:0d:a5:47:b9:33:b4:cf:eb:
7b:46:07:7b:b5:c7:b3:6d:b6:74:92:ac:37:d2:92:
39:38:0a:56:3e:82:ad:93:92:2c:77:b7:d7:6b:eb:
7f:2d:26:03:85:b1:c3:f2:27:6a:a9:36:79:3d:0c:
2f:3c:27:11:61:36:72:9e:8d:49:a1:32:2d:57:1f:
90:3a:f7:5b:b1:e7:7a:55:4c:04:3b:00:f0:8a:93:
7b:0c:61:48:c8:27:d2:24:e8:53:f1:eb:bc:68:0a:
da:17:01:e8:b1:ce:d2:66:31:17:68:5a:0f:59:b5:
7f:f7:24:1b:dd:e7:94:4c:0d:67:15:3f:6a:d6:f7:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:CA:EB:01:34:EE:13:68:38:96:4F:9B:D9:98:7F:09:96:02:83
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qoPK6wE07hNoOJZPm9mYfwmWAoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27f8::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a7:3f:d2:cd:5e:09:75:a2:f4:da:d7:9b:4b:2e:a2:88:95:04:
60:24:b1:06:88:41:a1:7f:d5:0a:2a:41:40:04:8b:c3:25:e9:
a8:4a:59:a6:69:99:e2:1e:39:7b:a4:9b:fb:2d:1f:b8:73:11:
4b:26:8b:24:f2:60:04:af:0c:da:d4:b6:82:87:8c:1a:66:9e:
13:c9:9d:a6:27:8f:c5:95:f7:92:e6:aa:b8:88:72:81:66:ee:
89:64:80:55:67:b2:13:71:d7:fa:e4:ef:9e:9e:09:de:04:d6:
c1:8a:21:04:b2:f1:49:3c:9f:c9:3a:a2:86:30:05:c6:10:b3:
ee:f0:9d:76:7f:b3:d4:ef:3f:86:72:ff:a8:e9:10:9e:98:21:
85:da:a9:05:ab:7b:9c:38:f1:30:5a:38:de:01:a2:9a:87:e0:
db:52:d1:81:a8:ed:41:89:c9:60:56:15:42:69:f0:b8:bc:b4:
60:ad:a7:32:e3:82:94:9a:ea:ef:a8:10:3c:cc:7f:95:4b:37:
a0:bd:98:77:35:88:d4:90:cb:ea:72:2b:d8:ce:3c:62:6e:93:
55:bc:fb:d4:bb:41:37:3c:c2:b9:af:38:38:68:41:c4:34:d7:
52:05:4b:bf:83:f4:e1:6b:b2:fb:7c:69:2e:25:4b:d5:19:b5:
9f:19:50:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 20 06:17:57 2025 by rpki-client