Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/M6NlZbKUHE6Rn3KpfE17mYXFmOY.roa
File: M6NlZbKUHE6Rn3KpfE17mYXFmOY.roa (raw, json)
Hash identifier: ZK/LWHW53sT1QYZ+FYwBOQlLLX/aoY2ngrywUS0gXBk=
Subject key identifier: 33:A3:65:65:B2:94:1C:4E:91:9F:72:A9:7C:4D:7B:99:85:C5:98:E6
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0195199CD2C76E88EA256C2A746D2FB138C1
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/M6NlZbKUHE6Rn3KpfE17mYXFmOY.roa
Signing time: Tue 18 Feb 2025 15:11:02 +0000
ROA not before: Tue 18 Feb 2025 15:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213437
IP address blocks: 2a0c:9a40:8f00::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Feb 2025 16:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:9c:d2:c7:6e:88:ea:25:6c:2a:74:6d:2f:b1:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 18 15:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a36565b2941c4e919f72a97c4d7b9985c598e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:82:a4:c6:35:b2:f6:3c:cd:d9:5a:ed:8c:
3e:f3:3b:19:41:bc:71:d0:92:8c:79:29:35:6f:ba:
31:76:3a:d5:23:ce:05:64:b6:97:d8:8d:18:0b:b7:
7b:90:b5:02:4b:81:3f:f6:a5:5c:f6:94:40:34:14:
dc:c0:6c:88:1c:38:d6:86:18:53:6d:fb:a7:c9:c1:
dc:01:6a:35:12:d6:c0:8f:6a:8e:9e:f8:ea:5d:3d:
c1:36:96:43:78:fd:7a:0c:e9:14:66:11:fc:be:e2:
95:70:a2:df:0a:ce:2e:64:11:8c:21:0a:d2:9c:46:
9f:87:a3:90:9b:62:78:d0:3e:d2:5f:96:9f:69:70:
bc:e8:08:4b:04:35:d3:6e:3f:b2:c1:c9:39:59:20:
6a:9c:8e:c2:19:38:61:51:97:98:3e:60:64:62:be:
f2:62:3a:5a:f2:58:3a:16:b0:b8:b1:a9:13:73:a5:
b1:e3:fd:a5:1f:54:fd:e4:5c:55:31:05:b2:c3:f1:
e7:4e:eb:cf:5d:d5:08:65:f5:b3:69:bd:8d:e7:7e:
3f:4e:c6:f1:6d:ca:0f:b7:33:6d:8f:37:a9:8d:cb:
eb:35:48:d9:24:b6:91:24:2f:e4:81:28:73:94:40:
71:6f:00:86:8e:75:3b:66:02:52:fe:87:21:17:d7:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A3:65:65:B2:94:1C:4E:91:9F:72:A9:7C:4D:7B:99:85:C5:98:E6
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/M6NlZbKUHE6Rn3KpfE17mYXFmOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8f00::/48
Signature Algorithm: sha256WithRSAEncryption
79:b6:30:be:c6:c0:c0:4b:02:3b:00:9a:e4:da:b9:06:11:8e:
80:a8:83:14:1a:87:a1:f1:f5:e9:33:22:5b:67:77:65:f3:59:
02:52:6c:6a:d7:64:6f:d8:59:c0:16:18:79:b2:d8:ff:c6:86:
42:c7:ed:20:e3:45:36:cb:c0:05:4f:b5:1c:45:ea:9d:42:04:
1a:54:73:14:38:91:0f:2f:cb:0c:50:65:0f:a0:ae:d3:00:d5:
58:05:12:a4:53:7e:03:58:4d:ae:d9:bf:b2:63:78:13:0e:a6:
84:f8:59:f0:5d:8b:41:aa:a3:f9:2e:89:74:10:0f:43:95:e8:
5b:da:40:ae:2f:39:79:4a:94:1a:30:66:cd:3c:37:51:48:db:
ef:5d:d5:a4:7d:b2:46:ba:9e:08:7b:25:12:a9:a0:98:5a:8e:
f6:3d:8f:1b:ad:29:eb:0d:2f:b6:94:44:42:11:af:7b:7b:7e:
ef:58:94:05:87:44:12:07:bb:3e:dc:02:33:47:ff:11:f2:c7:
91:4d:f8:be:c9:21:1a:d1:3d:97:6b:f2:86:2d:e8:c6:22:b5:
d2:2a:da:f9:4f:06:6e:ab:51:a0:4d:f3:8c:40:bf:92:a8:63:
17:96:7d:f7:e9:c6:ba:53:ac:94:fa:d2:01:00:74:43:90:05:
3e:ef:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:22:37 2025 by rpki-client