Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/e2Cb5XjWZ7UvMElLdS_0HxEtahM.roa
File: e2Cb5XjWZ7UvMElLdS_0HxEtahM.roa (raw, json)
Hash identifier: Ijmftsf1CgkGQg1tiWU8EPQyfn4Kpc8yYWaRlOLO2P8=
Subject key identifier: 7B:60:9B:E5:78:D6:67:B5:2F:30:49:4B:75:2F:F4:1F:11:2D:6A:13
Certificate issuer: /CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Certificate serial: 0194692F401262501EBE87EB08CE4A438AEA
Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/e2Cb5XjWZ7UvMElLdS_0HxEtahM.roa
Signing time: Wed 15 Jan 2025 08:58:11 +0000
ROA not before: Wed 15 Jan 2025 08:58:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206564
IP address blocks: 2a05:c700:1::/48 maxlen: 128
2a05:c700:14::/48 maxlen: 128
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:2f:40:12:62:50:1e:be:87:eb:08:ce:4a:43:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Validity
Not Before: Jan 15 08:58:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b609be578d667b52f30494b752ff41f112d6a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:97:dc:66:d7:0e:ce:9a:01:84:6f:d6:67:
cf:97:f6:57:62:2f:9e:8b:d8:ff:43:4f:99:e0:b4:
81:c4:d5:71:1e:06:4c:48:12:2b:4a:a4:38:cb:64:
7f:c8:83:b4:cc:86:86:04:46:47:75:d4:ab:9d:5b:
14:12:83:30:be:c3:f0:20:61:94:f4:75:66:67:23:
5e:e1:20:af:df:fd:26:ee:4c:d2:57:72:08:3f:5c:
a8:2f:f5:42:10:f8:e0:94:0a:f2:fb:33:6f:f5:4c:
b1:4a:8c:21:7d:24:1b:93:fd:56:09:be:96:b8:e4:
c1:2a:73:bc:61:97:25:d2:28:1f:f9:57:99:b3:d4:
4b:be:ce:6c:c2:2c:d9:1e:ee:4d:bb:c2:bf:ec:7e:
40:b2:6a:b3:2b:85:31:72:d4:e5:7b:f0:a7:44:2c:
cf:f8:82:8c:b2:7f:c2:0a:21:f3:a6:3e:5a:13:64:
74:79:a3:53:4f:eb:d3:26:fe:2c:90:0b:9c:18:15:
a0:bb:9d:14:a2:13:23:db:60:6a:53:99:7b:67:a3:
93:99:66:4a:d3:1d:3c:21:a9:dc:1c:2f:cd:ee:0a:
ca:ff:56:d0:f0:ee:0c:ae:99:02:16:04:a8:17:f4:
78:c8:0a:98:7e:61:14:a9:cc:71:38:0c:b8:33:7d:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:9B:E5:78:D6:67:B5:2F:30:49:4B:75:2F:F4:1F:11:2D:6A:13
X509v3 Authority Key Identifier:
keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/e2Cb5XjWZ7UvMElLdS_0HxEtahM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:c700:1::/48
2a05:c700:14::/48
Signature Algorithm: sha256WithRSAEncryption
32:bb:af:c8:9a:80:6a:5a:63:21:69:28:f5:ae:b2:ce:e9:14:
ba:c7:73:53:49:81:dd:d5:16:5f:ae:d6:ed:0b:6c:79:92:11:
2c:a3:35:ef:c2:42:39:58:bf:a9:2a:04:1b:d4:b6:de:c3:34:
24:eb:97:81:5f:2e:71:8e:37:b2:9b:ca:e8:03:ad:7d:bb:04:
1e:47:b6:84:f8:ca:7c:4a:00:14:76:f6:ea:b2:8f:88:9d:81:
fc:6f:b0:af:8c:58:17:fe:04:0a:f8:0c:e3:6c:dd:db:d6:04:
d0:05:4c:a7:b7:78:61:49:99:41:b5:e6:18:07:54:12:3a:25:
b7:b2:4d:75:2d:07:c8:3f:4a:eb:8b:fa:62:cf:d4:6f:70:05:
91:f0:09:54:f5:f7:13:ee:5f:2a:66:fc:33:1d:06:e6:1c:ac:
4e:8e:aa:ec:a4:6d:4b:a6:1f:54:55:6d:66:b5:ea:fc:cd:8e:
05:11:ec:06:1d:fd:90:5e:dd:f5:df:20:4e:9c:f9:8d:1a:b2:
d1:86:c8:fa:bd:ed:f1:7c:74:4d:bc:ec:46:20:22:69:f3:0b:
93:de:9f:86:be:b6:9c:89:f0:ba:87:08:f3:19:b3:21:54:5a:
6b:5b:0a:bb:07:ea:82:29:c7:1d:28:48:5d:79:ea:df:19:20:
fe:36:28:45
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZRpL0ASYlAevofrCM5KQ4rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMTcwNmI5MTViYWI4ZGFjMmI1NTQ3ZmJjODdhZGViNjFl
NmFlZGUwHhcNMjUwMTE1MDg1ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjYwOWJlNTc4ZDY2N2I1MmYzMDQ5NGI3NTJmZjQxZjExMmQ2YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCmX3GbXDs6aAYRv1mfPl/ZXYi+e
i9j/Q0+Z4LSBxNVxHgZMSBIrSqQ4y2R/yIO0zIaGBEZHddSrnVsUEoMwvsPwIGGU
9HVmZyNe4SCv3/0m7kzSV3IIP1yoL/VCEPjglAry+zNv9UyxSowhfSQbk/1WCb6W
uOTBKnO8YZcl0igf+VeZs9RLvs5swizZHu5Nu8K/7H5AsmqzK4UxctTle/CnRCzP
+IKMsn/CCiHzpj5aE2R0eaNTT+vTJv4skAucGBWgu50UohMj22BqU5l7Z6OTmWZK
0x08IancHC/N7grK/1bQ8O4MrpkCFgSoF/R4yAqYfmEUqcxxOAy4M30z5QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHtgm+V41me1LzBJS3Uv9B8RLWoTMB8GA1UdIwQY
MBaAFDMXBrkVurjawrVUf7yHreth5q7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXhjR3VSVzZ1TnJDdFZSX3ZJZXQ2MkhtcnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMTJjZTctNzQxNS00YzVkLWE4OTAt
ZWM5NTE0OGZkMjM2LzEvZTJDYjVYaldaN1V2TUVsTGRTXzBIeEV0YWhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMTJjZTctNzQxNS00YzVkLWE4OTAtZWM5NTE0OGZkMjM2
LzEvTXhjR3VSVzZ1TnJDdFZSX3ZJZXQ2MkhtcnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgXHAAAB
AwcAKgXHAAAUMA0GCSqGSIb3DQEBCwUAA4IBAQAyu6/ImoBqWmMhaSj1rrLO6RS6
x3NTSYHd1RZfrtbtC2x5khEsozXvwkI5WL+pKgQb1LbewzQk65eBXy5xjjeym8ro
A619uwQeR7aE+Mp8SgAUdvbqso+InYH8b7CvjFgX/gQK+AzjbN3b1gTQBUynt3hh
SZlBteYYB1QSOiW3sk11LQfIP0rri/piz9RvcAWR8AlU9fcT7l8qZvwzHQbmHKxO
jqrspG1Lph9UVW1mter8zY4FEewGHf2QXt313yBOnPmNGrLRhsj6ve3xfHRNvOxG
ICJp8wuT3p+GvracifC6hwjzGbMhVFprWwq7B+qCKccdKEhdeerfGSD+NihF
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:28:27 2025 by rpki-client