Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xgX8k6bj4Saz01qMJks9ziyga7k.roa
File: xgX8k6bj4Saz01qMJks9ziyga7k.roa (raw, json)
Hash identifier: g80xnFx0SNwkW3aBCgYm+LgnKudO7hPsKc/NiOFVlsY=
Subject key identifier: C6:05:FC:93:A6:E3:E1:26:B3:D3:5A:8C:26:4B:3D:CE:2C:A0:6B:B9
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0195242338C76C6A9C41C9475B67E80BBD53
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xgX8k6bj4Saz01qMJks9ziyga7k.roa
Signing time: Thu 20 Feb 2025 16:14:02 +0000
ROA not before: Thu 20 Feb 2025 16:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213437
IP address blocks: 2a0c:9a40:8f00::/48 maxlen: 48
2a0c:9a40:8f10::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 23 Feb 2025 20:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:23:38:c7:6c:6a:9c:41:c9:47:5b:67:e8:0b:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 20 16:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c605fc93a6e3e126b3d35a8c264b3dce2ca06bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:e2:45:81:00:2f:4a:05:e2:7e:98:d2:c8:
b8:c9:6b:82:bb:e9:46:f3:e6:ee:5d:18:fd:46:dc:
38:b9:c3:df:8a:9f:ab:84:aa:57:0e:9d:ad:d2:e5:
6c:46:8c:ae:a5:4a:93:06:02:4f:06:8d:e1:db:bd:
44:e1:44:87:30:d3:f4:51:e0:9b:50:d4:d1:4f:ff:
8f:93:21:67:fc:1d:99:15:17:44:c5:55:ec:11:51:
cb:a7:e8:4a:c1:4d:2b:73:b8:d5:ff:ae:5b:6e:d9:
01:dd:4c:5a:77:3a:08:b9:c3:e4:e5:3d:9c:07:fd:
e1:95:3e:3c:0f:32:b2:c2:d6:78:74:60:d5:43:87:
5b:e2:14:42:4a:d8:94:ff:e6:07:f7:c3:eb:ec:b2:
6c:e5:d9:94:4a:36:dd:7a:54:21:33:89:c4:1b:6b:
ef:f2:cd:cf:32:ae:74:d6:dc:e7:c0:89:3d:d4:d2:
56:35:c2:1c:66:1e:48:3a:5e:77:76:a2:11:3b:2e:
d9:04:19:26:0a:7f:87:d0:30:85:23:11:a0:06:f1:
8a:66:b3:cb:ca:28:15:89:b9:a3:d9:67:ad:60:e8:
94:5b:21:91:3e:28:e2:2c:79:ab:dc:62:b3:41:85:
bc:d3:87:b7:1e:06:9e:05:8e:00:01:66:91:58:2a:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:05:FC:93:A6:E3:E1:26:B3:D3:5A:8C:26:4B:3D:CE:2C:A0:6B:B9
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xgX8k6bj4Saz01qMJks9ziyga7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8f00::/48
2a0c:9a40:8f10::/44
Signature Algorithm: sha256WithRSAEncryption
b8:25:0e:9c:15:a3:cd:04:e1:82:3f:e9:c8:ab:7f:a1:36:58:
04:21:2a:dc:b0:bf:83:78:e9:1b:10:76:a4:55:57:d6:22:37:
7c:33:9f:2b:7d:8e:14:ba:e1:f4:3c:7b:41:ed:94:e2:7e:db:
a5:eb:f7:3c:cf:da:75:7e:14:de:44:c9:53:aa:3a:44:b3:9b:
76:0a:6b:dd:5c:73:7f:49:42:80:09:24:c2:c1:34:37:dd:21:
74:2a:1f:90:57:36:0e:54:72:79:55:f3:45:2d:96:45:05:2f:
31:d5:26:57:b5:af:14:d4:27:45:0d:09:a2:de:78:df:be:cf:
7d:7e:7e:28:38:1f:d7:d1:ce:79:aa:f6:a6:0a:de:a0:3b:84:
1d:b7:97:b9:f0:6f:f8:e6:4d:e7:9d:00:a3:a3:48:6d:e5:a1:
1e:e1:5a:ce:fa:31:21:2b:bd:f7:88:74:16:76:17:4c:85:e8:
4a:50:6c:e3:e3:b6:d5:1a:17:3b:1e:16:1c:e7:f8:0d:a6:b1:
cf:39:d6:d3:2b:89:1f:b7:c7:5f:bb:37:bb:35:6d:b7:22:f1:
bb:74:4b:04:e4:99:4b:72:76:42:71:b0:2f:4c:dd:62:d1:12:
f5:61:99:a1:b9:32:9e:78:b5:ba:9b:ce:3f:93:e0:c4:50:e7:
43:0a:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:38:07 2025 by rpki-client