Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sQM7y8NSr5k2avti4pwCgqP5yzM.roa
File: sQM7y8NSr5k2avti4pwCgqP5yzM.roa (raw, json)
Hash identifier: SEf+MYCCpLPdTdyR+wevfC6tjSU1MvawNPZ0alk3kJQ=
Subject key identifier: B1:03:3B:CB:C3:52:AF:99:36:6A:FB:62:E2:9C:02:82:A3:F9:CB:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D41266785008D4C2F5CD54AAF430DB543
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sQM7y8NSr5k2avti4pwCgqP5yzM.roa
Signing time: Thu 25 Jan 2024 15:04:12 +0000
ROA not before: Thu 25 Jan 2024 15:04:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215669
IP address blocks: 2a0e:97c0:8b0::/44 maxlen: 48
2a0e:97c0:8b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 Jan 2024 15:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:26:67:85:00:8d:4c:2f:5c:d5:4a:af:43:0d:b5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 25 15:04:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1033bcbc352af99366afb62e29c0282a3f9cb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:f0:d7:4d:13:8f:70:56:fa:15:da:40:1f:
6b:2d:37:e6:56:5e:bd:46:8c:16:a1:76:5e:e5:40:
74:ae:62:24:b0:b5:a6:77:64:e4:59:98:66:f3:71:
60:82:cf:92:60:22:a9:fa:5d:b8:95:7d:08:0b:23:
1d:d1:6b:2f:62:60:65:17:25:01:d4:7c:23:6f:a7:
55:0e:96:60:86:6a:1e:73:0b:66:84:cd:cc:b7:0b:
4f:09:bf:e8:46:df:65:ba:40:ff:63:9f:0f:e4:72:
1f:5e:fc:61:e4:66:a3:bc:72:08:f5:c2:c2:cb:b8:
5d:4c:5d:ad:f3:a1:6c:02:00:1d:6d:2a:d0:b8:01:
bc:c2:34:56:35:e1:72:a9:55:0a:66:3b:e6:ba:26:
5f:fa:c8:83:97:f4:37:3c:fd:7c:3f:84:71:36:96:
6d:cb:ea:a8:76:b3:fb:8a:da:0e:93:70:e0:07:cd:
58:7a:ac:94:7b:c4:44:ef:03:5a:49:b6:c8:06:c1:
ff:41:06:7b:b1:83:1d:6b:99:36:d5:bf:13:66:53:
57:80:a9:23:4a:4e:68:e8:24:47:bb:ae:c0:d0:f2:
f0:13:39:a8:3d:c3:8f:da:63:a9:ce:c0:08:7e:7b:
f2:df:79:3a:92:b2:c6:24:a2:c8:a8:5f:2b:3d:f8:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:3B:CB:C3:52:AF:99:36:6A:FB:62:E2:9C:02:82:A3:F9:CB:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sQM7y8NSr5k2avti4pwCgqP5yzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:8b0::/44
Signature Algorithm: sha256WithRSAEncryption
a2:91:c5:38:bc:25:47:8d:89:4f:53:a6:a7:f6:a1:1d:da:c3:
94:be:16:15:d5:3f:da:be:e4:b3:8e:e0:34:5b:a0:92:2d:f6:
84:ec:6a:21:72:54:9a:40:07:2d:04:1a:3e:af:94:2f:c3:5a:
58:58:b2:40:d6:a8:f0:69:f7:10:c4:1e:94:61:9c:88:04:9b:
89:70:02:bb:4b:7f:15:2f:63:71:9f:b0:1f:43:59:58:20:e1:
e8:eb:43:53:db:80:62:f4:b2:e4:5a:5a:69:6b:a9:7d:b8:c0:
24:db:b2:50:f3:77:57:23:10:e5:4f:14:1d:ba:cf:06:37:a9:
f2:af:db:0c:2a:69:83:fa:9c:01:37:5f:97:45:20:99:a4:d1:
9a:77:39:f5:75:0d:c4:09:ca:32:0c:10:7e:02:3f:e8:a7:ee:
9e:f3:c0:fb:18:b8:57:e8:e6:07:63:1b:d0:21:a6:88:67:a7:
b4:66:d9:b9:9c:8c:37:09:d9:cd:a5:ea:c9:8a:44:f6:84:7d:
e0:4c:4d:e0:6e:27:e1:be:d8:f7:72:63:ef:c1:2c:41:0a:d2:
77:ce:7a:42:e9:5e:59:a9:3d:6e:31:91:5a:06:2f:84:a4:d0:
64:24:e9:30:34:1a:14:ee:96:85:bb:5c:15:e0:3b:3b:09:50:
f9:7a:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:17:51 2025 by rpki-client