Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/lO4CfL2ZWd2oFN4a1BteHHsIp70.roa
File: lO4CfL2ZWd2oFN4a1BteHHsIp70.roa (raw, json)
Hash identifier: NzrzzScQEhX5SnhH7oZ+keUzngfbh9grgcWg3/m0vnA=
Subject key identifier: 94:EE:02:7C:BD:99:59:DD:A8:14:DE:1A:D4:1B:5E:1C:7B:08:A7:BD
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 019644B9D07EA39BD4D41586E29724A6765D
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/lO4CfL2ZWd2oFN4a1BteHHsIp70.roa
Signing time: Thu 17 Apr 2025 17:09:10 +0000
ROA not before: Thu 17 Apr 2025 17:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 2a0e:67c0::/32 maxlen: 32
2a11:4341::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 28 Apr 2025 10:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b9:d0:7e:a3:9b:d4:d4:15:86:e2:97:24:a6:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Apr 17 17:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94ee027cbd9959dda814de1ad41b5e1c7b08a7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:f8:5d:d3:24:f2:49:94:42:c5:9a:4e:8f:
c0:ce:80:9e:d3:ca:d9:7a:03:2d:e7:0e:07:fb:d9:
bb:18:b3:a1:32:f7:62:c6:d5:58:1a:d7:71:02:b0:
2f:2d:c6:89:48:86:3a:1d:a5:37:39:6a:d8:31:56:
b3:90:ed:6f:0e:66:a7:e2:66:22:56:bd:75:37:4f:
1b:7e:94:d2:ba:b9:1d:1a:19:f3:bc:65:a1:bc:01:
b0:f5:ed:e9:ef:81:12:cc:d1:4f:f0:b4:d8:38:9b:
9c:a9:5b:58:4c:56:cb:d3:c6:44:e4:f2:b5:86:45:
3d:ce:a9:32:7c:fd:e4:f2:ce:b7:04:c3:59:d6:6c:
51:93:03:ea:6f:91:a3:84:20:ed:55:96:d7:3f:d1:
e7:cf:aa:02:f2:5c:23:35:cc:64:49:e3:47:02:6e:
47:b7:0b:c2:0b:b1:0f:c8:a5:f4:03:df:b0:46:af:
27:45:52:57:c0:b5:d0:af:3d:a7:7d:42:f9:83:5d:
ad:32:c5:58:5c:93:27:5c:0a:1f:15:ea:b3:90:af:
9a:dd:d6:85:fc:36:c2:78:f5:fc:ba:ab:44:f7:2d:
5c:70:d1:85:e8:e5:08:3e:6d:a5:c0:0f:74:0a:7f:
cc:fd:8d:af:14:95:1f:b2:5a:8f:92:af:18:b4:bf:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EE:02:7C:BD:99:59:DD:A8:14:DE:1A:D4:1B:5E:1C:7B:08:A7:BD
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/lO4CfL2ZWd2oFN4a1BteHHsIp70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:67c0::/32
2a11:4341::/32
Signature Algorithm: sha256WithRSAEncryption
af:8d:d7:ba:b4:49:d0:f5:e3:11:a1:3a:82:c0:6c:17:b8:1b:
c9:8b:6c:13:ef:b6:2e:a7:36:95:c6:bb:67:68:84:ae:1c:93:
01:c2:d2:76:96:b8:1d:d2:a6:da:ac:94:cb:f9:01:f1:6e:3d:
a8:ec:1d:d6:19:b0:fe:d0:dd:41:63:4a:c3:49:2d:55:0e:a2:
db:be:f7:09:f1:69:20:7b:9d:34:ef:c8:29:5a:3b:45:6e:47:
d2:40:ef:70:3b:12:7e:d3:73:99:89:99:34:af:6a:46:47:a7:
bf:3d:7b:19:32:d7:d4:22:f8:54:8c:49:a3:f5:f3:0b:1e:b5:
9f:b6:13:63:b6:5f:81:80:01:89:ac:50:89:3f:f1:9f:16:f5:
27:62:be:a2:25:df:6e:17:04:6e:f1:e9:12:3b:0f:13:7a:57:
9c:d1:fd:e1:6d:3e:be:29:f5:3f:b9:23:e9:47:ca:b1:01:d9:
e7:ad:22:93:dd:f5:3a:9c:ce:42:39:32:30:92:92:fc:fd:b1:
df:9d:08:cb:10:1e:c5:2a:3c:b7:09:f0:4a:6e:a7:2a:9e:79:
ea:84:f8:e6:1a:7b:a2:5a:98:6b:3f:68:4b:29:93:01:03:f6:
45:b5:e7:77:a3:65:49:cc:ce:6a:b0:5f:7b:6f:40:e5:0d:71:
5b:af:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:14:38 2025 by rpki-client