Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/g2nUU-va_SBSHAYo70okOrCJ0u0.roa
File: g2nUU-va_SBSHAYo70okOrCJ0u0.roa (raw, json)
Hash identifier: i9vzhgZQGoP1aXxoLGRYnbFen19Othu6f0/F3yvsbqs=
Subject key identifier: 83:69:D4:53:EB:DA:FD:20:52:1C:06:28:EF:4A:24:3A:B0:89:D2:ED
Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial: 0195EBD8D0D0A2419D401F665929622FD05D
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/g2nUU-va_SBSHAYo70okOrCJ0u0.roa
Signing time: Mon 31 Mar 2025 10:56:49 +0000
ROA not before: Mon 31 Mar 2025 10:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216213
IP address blocks: 2a14:c880::/29 maxlen: 34
Validation: Failed, certificate revoked on Mon 31 Mar 2025 12:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:d8:d0:d0:a2:41:9d:40:1f:66:59:29:62:2f:d0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Validity
Not Before: Mar 31 10:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8369d453ebdafd20521c0628ef4a243ab089d2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:2a:66:dd:07:da:4f:46:5a:3f:4a:7f:fb:
1a:6e:c4:7f:85:f2:55:aa:9f:46:fe:60:15:6c:78:
06:cb:09:b6:a8:7b:03:8b:27:b4:b4:2a:00:cc:34:
d0:44:59:03:6d:51:45:fa:66:1f:4b:4f:b6:10:cf:
c4:06:58:dc:31:06:a7:94:d9:64:44:6b:e7:4a:42:
79:ed:5c:96:65:6a:f0:6c:a4:a6:d4:2d:80:8e:f3:
f7:9d:c9:03:92:46:9c:2e:bd:31:0d:0c:32:38:c2:
30:c7:a3:2b:1d:74:fd:89:6c:59:20:73:7b:95:de:
97:77:0c:94:d1:ae:93:95:ba:19:ab:4c:a5:ac:f5:
b0:97:fd:3f:4c:7d:af:98:e0:ad:81:cf:83:49:ca:
14:29:11:40:6a:b9:78:42:6d:38:79:e8:4f:60:8a:
5b:0e:6e:69:b7:0c:61:33:f3:f9:12:7b:ee:bc:0d:
a9:a1:6d:77:55:db:4e:b5:c1:41:dd:72:03:f3:5d:
eb:e8:64:6b:eb:52:da:3b:53:0d:41:e8:20:44:3e:
01:89:f9:3b:8a:98:d6:7f:7e:0b:83:3f:02:69:a1:
53:77:00:f5:55:b6:5c:40:66:59:04:1b:e1:30:35:
a2:2e:db:c5:c9:84:c6:7e:30:ee:1e:0c:86:da:3b:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:69:D4:53:EB:DA:FD:20:52:1C:06:28:EF:4A:24:3A:B0:89:D2:ED
X509v3 Authority Key Identifier:
keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/g2nUU-va_SBSHAYo70okOrCJ0u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c880::/29
Signature Algorithm: sha256WithRSAEncryption
28:df:65:9a:4a:f1:9a:8d:4c:8a:6a:2b:61:e2:2e:57:91:d9:
85:dc:d0:7c:42:9d:b8:9b:aa:ef:24:ab:3f:cb:be:ae:0b:3b:
ff:29:a7:4e:ca:0e:5e:05:40:89:4d:a1:d3:f5:68:6c:8b:d0:
2e:8f:dc:10:06:ea:4b:4c:da:3c:d4:50:34:7f:29:52:58:3a:
a6:24:6c:9c:33:bb:c8:c9:ed:1d:95:e3:c5:15:ed:a3:9a:ca:
fd:b3:23:5b:0b:fe:68:52:84:ee:27:1b:75:ea:ac:82:e9:07:
1b:bc:5e:19:4a:5a:ed:4c:fe:5b:e8:c2:e5:5e:bc:44:7d:7a:
b8:3d:0a:07:9e:28:b1:13:ee:1a:12:e8:dd:40:e0:3d:f3:2d:
74:b4:cd:ae:f9:42:21:a0:e0:81:9b:71:0e:14:e0:10:f2:b5:
c2:a5:b4:81:49:ad:e4:24:24:ad:b3:17:d0:73:d7:02:0b:18:
cd:5a:42:9d:28:d8:b2:f1:1b:19:e3:96:9b:90:bf:eb:22:36:
8f:04:8a:ea:e0:60:37:80:02:02:16:fc:36:82:08:98:aa:c2:
0a:30:b4:6b:8c:7a:03:64:c7:7d:74:f5:c6:b0:8a:62:c9:9b:
75:b5:97:ae:f1:03:64:75:aa:b7:fb:6c:2f:af:83:ca:50:a2:
68:5c:80:5c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZXr2NDQokGdQB9mWSliL9BdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl
MTRlNDQwHhcNMjUwMzMxMTA1NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzY5ZDQ1M2ViZGFmZDIwNTIxYzA2MjhlZjRhMjQzYWIwODlkMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxcqZt0H2k9GWj9Kf/sabsR/hfJV
qp9G/mAVbHgGywm2qHsDiye0tCoAzDTQRFkDbVFF+mYfS0+2EM/EBljcMQanlNlk
RGvnSkJ57VyWZWrwbKSm1C2AjvP3nckDkkacLr0xDQwyOMIwx6MrHXT9iWxZIHN7
ld6XdwyU0a6TlboZq0ylrPWwl/0/TH2vmOCtgc+DScoUKRFAarl4Qm04eehPYIpb
Dm5ptwxhM/P5EnvuvA2poW13VdtOtcFB3XID813r6GRr61LaO1MNQeggRD4Bifk7
ipjWf34Lgz8CaaFTdwD1VbZcQGZZBBvhMDWiLtvFyYTGfjDuHgyG2judJwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFINp1FPr2v0gUhwGKO9KJDqwidLtMB8GA1UdIwQY
MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt
NzlmN2I2ZWE3YzE0LzEvZzJuVVUtdmFfU0JTSEFZbzcwb2tPckNKMHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0
LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTIgDAN
BgkqhkiG9w0BAQsFAAOCAQEAKN9lmkrxmo1MimorYeIuV5HZhdzQfEKduJuq7ySr
P8u+rgs7/ymnTsoOXgVAiU2h0/VobIvQLo/cEAbqS0zaPNRQNH8pUlg6piRsnDO7
yMntHZXjxRXto5rK/bMjWwv+aFKE7icbdeqsgukHG7xeGUpa7Uz+W+jC5V68RH16
uD0KB54osRPuGhLo3UDgPfMtdLTNrvlCIaDggZtxDhTgEPK1wqW0gUmt5CQkrbMX
0HPXAgsYzVpCnSjYsvEbGeOWm5C/6yI2jwSK6uBgN4ACAhb8NoIImKrCCjC0a4x6
A2THfXT1xrCKYsmbdbWXrvEDZHWqt/tsL6+DylCiaFyAXA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:58:46 2025 by rpki-client