Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/fsdR1Yz6mdL6Pjwt7wjc3_8_yPc.roa
File: fsdR1Yz6mdL6Pjwt7wjc3_8_yPc.roa (raw, json)
Hash identifier: 7yuXrqOkeK29I+MZ3LY4UeRTWf87H8JHhf0g9ugLE/4=
Subject key identifier: 7E:C7:51:D5:8C:FA:99:D2:FA:3E:3C:2D:EF:08:DC:DF:FF:3F:C8:F7
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0195632D0B967E5A857A10BAE72A0FDBD154
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/fsdR1Yz6mdL6Pjwt7wjc3_8_yPc.roa
Signing time: Tue 04 Mar 2025 22:00:51 +0000
ROA not before: Tue 04 Mar 2025 22:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0f:e3c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 05 Mar 2025 21:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:63:2d:0b:96:7e:5a:85:7a:10:ba:e7:2a:0f:db:d1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 4 22:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ec751d58cfa99d2fa3e3c2def08dcdfff3fc8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:70:3a:66:d2:b8:5c:ec:b2:ea:c4:20:de:
81:7c:d7:7a:c5:37:81:bd:ab:3c:f1:50:6a:c3:a6:
bb:a9:94:39:60:88:92:a6:62:ed:b0:d2:b7:17:38:
ab:4c:b9:9a:a4:2a:b4:60:8e:18:de:c7:4e:d3:b2:
c2:24:53:93:36:d1:61:87:a9:7a:72:70:8b:59:7a:
8c:1a:a7:f5:30:65:dc:75:4d:db:cf:16:39:44:e8:
34:78:0b:e1:65:fb:6b:26:4c:68:5c:ba:02:ab:c9:
fe:46:c3:2c:e1:66:08:41:d2:0e:d8:71:40:67:e1:
d5:3e:b7:b1:9c:54:6b:a2:99:9b:5e:9e:40:e3:94:
40:48:78:2d:a6:0b:a1:82:b4:50:8a:e2:3b:21:85:
48:a3:af:73:e3:5a:b4:d9:56:6e:5b:4d:0b:84:22:
d4:4c:e1:16:1b:96:0e:3f:46:b4:8b:1b:de:9e:f9:
b8:2a:54:38:c1:9d:8b:ff:36:22:4e:f1:81:4e:c4:
98:42:0a:1c:b6:70:66:6f:28:96:d0:76:12:fe:d5:
76:94:1f:64:0c:cd:0f:79:2c:30:09:ad:e4:ab:95:
7c:a4:af:38:01:6c:d5:98:d4:e7:d0:0a:d9:f2:41:
9c:dc:5a:75:a5:0d:9a:0a:cc:d4:3a:95:bc:dd:34:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C7:51:D5:8C:FA:99:D2:FA:3E:3C:2D:EF:08:DC:DF:FF:3F:C8:F7
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/fsdR1Yz6mdL6Pjwt7wjc3_8_yPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:83:39:79:98:30:fd:cc:ea:4d:7c:f4:93:9b:14:08:95:2c:
78:e7:36:21:06:59:16:80:83:7f:2c:17:be:57:9a:15:49:44:
83:a0:be:32:6e:4c:e6:fc:04:11:d2:64:ee:20:0b:14:16:4f:
58:1a:2b:65:59:13:17:2f:fe:b6:b4:85:ae:6d:ba:63:24:f5:
ec:1a:7d:06:ad:fc:47:75:ec:ca:59:81:46:bc:32:f4:d6:60:
36:ad:92:e3:23:2f:c5:35:22:e9:73:f7:35:b6:3c:88:63:b0:
f3:95:3c:45:26:5d:43:c6:86:85:e0:e9:37:7b:85:44:68:81:
a7:f3:47:f7:9c:f6:78:be:79:2e:ee:8a:a9:e8:d4:8b:63:13:
9f:89:67:d9:81:fa:00:2d:1c:2c:2a:79:0b:e4:4e:35:b4:39:
c5:ce:eb:0a:a9:ee:08:0f:62:12:21:4c:a2:4c:9d:67:e1:0b:
e3:2a:b9:69:31:d0:ff:37:1f:bc:cb:fd:2d:60:da:35:70:7f:
d6:d1:19:8f:e5:ab:d1:cf:28:82:bd:7c:3a:75:79:9c:ca:9c:
b8:8b:cc:a8:f4:01:ce:2d:36:23:ff:79:ce:58:79:3d:fe:51:
4d:91:ab:1c:1c:bf:a8:d2:35:f0:78:ba:94:6b:90:60:65:51:
fe:35:76:ef
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZVjLQuWflqFehC65yoP29FUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwMzA0MjIwMDUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWM3NTFkNThjZmE5OWQyZmEzZTNjMmRlZjA4ZGNkZmZmM2ZjOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbVwOmbSuFzssurEIN6BfNd6xTeB
vas88VBqw6a7qZQ5YIiSpmLtsNK3FzirTLmapCq0YI4Y3sdO07LCJFOTNtFhh6l6
cnCLWXqMGqf1MGXcdU3bzxY5ROg0eAvhZftrJkxoXLoCq8n+RsMs4WYIQdIO2HFA
Z+HVPrexnFRropmbXp5A45RASHgtpguhgrRQiuI7IYVIo69z41q02VZuW00LhCLU
TOEWG5YOP0a0ixvenvm4KlQ4wZ2L/zYiTvGBTsSYQgoctnBmbyiW0HYS/tV2lB9k
DM0PeSwwCa3kq5V8pK84AWzVmNTn0ArZ8kGc3Fp1pQ2aCszUOpW83TSbgQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFH7HUdWM+pnS+j48Le8I3N//P8j3MB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvZnNkUjFZejZtZEw2UGp3dDd3amMzXzhfeVBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg/jwDAN
BgkqhkiG9w0BAQsFAAOCAQEATIM5eZgw/czqTXz0k5sUCJUseOc2IQZZFoCDfywX
vleaFUlEg6C+Mm5M5vwEEdJk7iALFBZPWBorZVkTFy/+trSFrm26YyT17Bp9Bq38
R3XsylmBRrwy9NZgNq2S4yMvxTUi6XP3NbY8iGOw85U8RSZdQ8aGheDpN3uFRGiB
p/NH95z2eL55Lu6KqejUi2MTn4ln2YH6AC0cLCp5C+RONbQ5xc7rCqnuCA9iEiFM
okydZ+EL4yq5aTHQ/zcfvMv9LWDaNXB/1tEZj+Wr0c8ogr18OnV5nMqcuIvMqPQB
zi02I/95zlh5Pf5RTZGrHBy/qNI18Hi6lGuQYGVR/jV27w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:06 2025 by rpki-client