Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/exMy_DE4Whqiehc-IHewfwAggBQ.roa
File: exMy_DE4Whqiehc-IHewfwAggBQ.roa (raw, json)
Hash identifier: jO2uNPCAs4yDnXi9MhaHBxcg6HpP5D5IaC/f1Cvv96k=
Subject key identifier: 7B:13:32:FC:31:38:5A:1A:A2:7A:17:3E:20:77:B0:7F:00:20:80:14
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 0194CB2BB4805A407186DDCC4D7846BDA5D3
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/exMy_DE4Whqiehc-IHewfwAggBQ.roa
Signing time: Mon 03 Feb 2025 09:37:06 +0000
ROA not before: Mon 03 Feb 2025 09:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212547
IP address blocks: 2a0b:ed41::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Feb 2025 09:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:2b:b4:80:5a:40:71:86:dd:cc:4d:78:46:bd:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Feb 3 09:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b1332fc31385a1aa27a173e2077b07f00208014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:39:b1:18:7d:ff:b9:30:30:de:76:ea:d7:
3b:05:d2:b5:22:90:35:f6:67:6d:80:ea:63:0a:33:
5c:15:51:ab:00:0e:11:26:28:04:b5:ce:83:c4:57:
c2:47:7e:b0:e8:c4:9a:fd:2d:5d:6a:46:f8:4a:2b:
f1:98:46:d6:d2:09:60:fa:76:6d:c4:31:13:e6:55:
48:c4:98:13:58:21:82:13:13:a4:c9:c4:d3:f9:29:
ab:29:e1:3f:c5:86:a3:aa:fd:58:73:6b:97:10:3d:
f4:c7:82:79:42:b4:47:ec:5e:0a:99:b1:f9:1c:ea:
e4:a3:c8:45:03:55:f5:ed:6b:c9:ff:94:b6:86:a6:
54:78:4b:29:e9:93:f8:47:10:a1:cb:f1:c2:4b:65:
56:03:53:e1:10:70:2b:c9:f9:57:51:c9:7f:d3:30:
8c:a2:d0:11:b8:ef:2b:6c:ba:70:66:3c:6a:5f:73:
16:61:5e:9c:c3:ba:de:b9:6e:a7:a2:f6:6d:3e:e5:
2f:45:95:18:eb:ba:96:46:20:04:27:cd:96:a3:cd:
06:ca:ca:30:ec:30:59:95:54:e3:26:c0:e7:54:d7:
bb:44:4e:74:e5:ed:43:a5:f2:69:b5:0e:c6:44:f4:
e4:68:f8:d7:62:5c:f6:ac:56:18:d1:a2:b1:b6:6e:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:32:FC:31:38:5A:1A:A2:7A:17:3E:20:77:B0:7F:00:20:80:14
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/exMy_DE4Whqiehc-IHewfwAggBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ed41::/32
Signature Algorithm: sha256WithRSAEncryption
4f:27:20:bb:e6:b5:ff:41:c3:c0:07:34:40:d1:dd:a9:f9:de:
0d:2e:4b:8c:30:77:77:c9:e2:a0:d0:23:18:7c:14:0c:b5:52:
e9:18:b2:89:ee:22:b7:d1:ec:6c:5c:2d:9d:7e:59:bf:dc:6e:
4e:e7:08:af:8e:c8:43:d7:95:10:0f:00:0c:ed:a7:f3:21:b9:
3b:61:6e:6e:d5:c1:7f:ba:7a:1e:00:3a:b1:c5:52:92:74:2a:
e8:60:8a:45:14:4d:e6:31:55:c2:0f:a5:43:c7:d6:e2:4c:f1:
cc:12:59:80:e1:95:72:3d:b1:cb:30:b3:72:30:ac:e7:39:46:
76:80:a9:95:53:24:08:27:48:f6:2b:33:0c:db:e0:8d:41:bb:
4e:42:37:a9:a4:2c:8e:13:ef:1a:29:89:3a:e9:45:ef:12:0f:
0f:6a:3c:99:8a:bf:74:da:86:44:ae:48:7f:e0:21:09:30:96:
b5:84:c7:06:56:8a:65:8f:89:7e:62:24:cf:38:2f:53:0b:a8:
6b:09:f8:e1:bc:73:cd:4a:24:97:99:1f:42:e4:58:75:cd:09:
f1:54:a3:a7:3d:4e:9d:af:a7:ce:98:cb:c2:2a:1f:37:54:e3:
d4:c1:5d:b9:b8:76:81:2e:c0:32:ff:30:b3:57:dd:22:3a:ec:
23:75:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:09:20 2025 by rpki-client