Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kt41ZbMT2cknEGEjrbp0J_HIs5M.roa
File: kt41ZbMT2cknEGEjrbp0J_HIs5M.roa (raw, json)
Hash identifier: /sM/iARUm3PFxO03Z4LNoIyqgSU49o3YkpsxKGmmjHQ=
Subject key identifier: 92:DE:35:65:B3:13:D9:C9:27:10:61:23:AD:BA:74:27:F1:C8:B3:93
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01966BC4A249D26B4A18954BB4735364BDD6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kt41ZbMT2cknEGEjrbp0J_HIs5M.roa
Signing time: Fri 25 Apr 2025 07:06:10 +0000
ROA not before: Fri 25 Apr 2025 07:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209858
IP address blocks: 2a13:600::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 26 Apr 2025 11:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:c4:a2:49:d2:6b:4a:18:95:4b:b4:73:53:64:bd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 25 07:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92de3565b313d9c927106123adba7427f1c8b393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:38:13:29:6f:db:41:f2:1c:bc:3b:86:3d:
76:3c:1b:ed:e0:20:43:1c:87:8e:8b:9f:2e:d6:20:
9a:b2:7e:c9:5f:a1:5e:45:67:1f:8c:cf:e9:c1:2c:
34:da:12:c9:d6:5b:ac:78:f5:1e:5a:dc:1c:74:e6:
41:c9:e5:b8:6f:d4:f1:7a:40:ca:49:f6:02:09:a6:
e7:2f:2a:f5:11:98:9e:17:16:31:55:75:5d:48:6c:
33:ec:3c:1f:19:7c:a3:48:c3:3f:f1:91:08:a7:a0:
fb:f7:09:17:c0:34:1b:ef:7f:fd:90:0b:0d:30:84:
c4:c3:c7:a9:5b:ae:55:6d:af:08:9d:76:aa:f5:a8:
8f:d0:09:f7:a2:5c:77:70:db:7b:77:ae:99:32:ea:
0e:4e:df:85:8e:bd:d8:0e:46:ac:b0:da:19:03:42:
e4:1c:2e:5f:b7:8f:91:e8:3a:0e:c2:31:0f:3e:6a:
32:64:0d:7b:fb:e5:ea:36:72:d4:8f:35:17:cb:aa:
fc:5e:d4:29:07:76:07:18:ce:2a:ad:f7:ec:4f:f6:
66:19:ff:54:88:fb:3e:7e:f7:63:47:74:7d:0f:8e:
dd:a3:cc:04:f0:9f:2d:0b:1b:c3:e7:14:a3:be:ea:
c7:24:8f:bd:fe:87:75:45:e9:a8:b0:74:9a:ec:f6:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:35:65:B3:13:D9:C9:27:10:61:23:AD:BA:74:27:F1:C8:B3:93
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kt41ZbMT2cknEGEjrbp0J_HIs5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:600::/29
Signature Algorithm: sha256WithRSAEncryption
72:6c:77:9d:6c:6b:f9:64:2d:ab:59:89:3b:4e:85:62:e1:71:
3f:6e:d5:cc:a9:cf:c8:f5:63:f3:83:ea:0d:8c:0c:93:20:39:
b5:87:59:cf:18:9d:9a:8c:6c:d4:1f:e3:2d:9f:e9:34:18:a6:
7e:ef:4f:71:73:57:b1:a6:7a:48:c8:de:74:d0:35:a0:3c:29:
4b:f0:9a:98:f9:c3:1b:99:a8:45:46:6e:0b:da:1e:32:f7:9a:
7e:5f:2e:82:9c:36:25:bb:d3:65:cb:f6:01:d3:13:26:ea:20:
3d:fb:fb:0e:81:0b:c6:0e:7f:30:83:dc:39:9d:de:51:71:2a:
5b:52:50:45:70:55:65:06:90:ce:66:8d:04:87:bc:09:94:03:
c2:1c:4a:c9:db:09:7c:d0:5b:f9:6e:2c:5b:4d:1a:30:ca:12:
a8:79:47:ec:d3:ef:2a:14:a5:d6:fd:2c:75:53:5e:08:27:c1:
3f:72:8b:98:f4:5a:28:f6:c8:f3:5c:a2:aa:c4:0e:e3:2e:eb:
bb:34:d9:18:d1:cd:85:a7:15:30:66:e9:6f:8d:eb:70:42:b0:
cf:f6:1f:27:85:09:1e:e2:3b:d0:1c:dd:75:f5:ba:14:02:76:
8d:ac:ee:1f:3f:ba:ea:3d:2c:67:e6:f0:dd:ce:12:11:68:72:
39:4f:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:15:13 2025 by rpki-client