Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q7_Rdq2ELyVckgQ1Txl4Pyc1j6M.roa
File: Q7_Rdq2ELyVckgQ1Txl4Pyc1j6M.roa (raw, json)
Hash identifier: QPNUVDUPmEWtj6eqBktvVJwV7tpCjuMo5yvhIrOPIrg=
Subject key identifier: 43:BF:D1:76:AD:84:2F:25:5C:92:04:35:4F:19:78:3F:27:35:8F:A3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196816966974D3DE1767000E2EC0B30E308
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q7_Rdq2ELyVckgQ1Txl4Pyc1j6M.roa
Signing time: Tue 29 Apr 2025 11:58:10 +0000
ROA not before: Tue 29 Apr 2025 11:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206847
IP address blocks: 2a13:b4c4::/32 maxlen: 32
2a13:c241:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 08 May 2025 20:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:69:66:97:4d:3d:e1:76:70:00:e2:ec:0b:30:e3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 29 11:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43bfd176ad842f255c9204354f19783f27358fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:96:ce:09:43:1b:59:5a:00:a6:f6:19:17:
92:44:65:29:a4:3b:65:15:64:8e:37:7d:b9:73:75:
85:14:e4:42:1a:dc:f6:f1:16:2a:2f:8d:e7:fd:7d:
24:8a:ac:09:fb:27:ba:a0:51:f1:ae:2d:9b:f6:4c:
1f:a6:58:6a:2a:60:b2:13:7e:85:e0:d2:bc:98:28:
d0:0e:93:03:1f:14:62:e5:f0:b2:76:e0:b3:46:4b:
a7:fe:05:52:42:d6:c9:21:98:45:00:dc:7b:7a:c6:
26:70:e2:6d:7d:08:55:a3:41:d5:b8:8b:9d:ff:d4:
29:7d:94:5b:bb:be:32:bd:b6:4d:73:8d:99:58:e5:
ae:12:f7:0a:96:33:98:59:17:7c:f1:f9:84:b6:b8:
83:fd:3a:e8:77:66:de:fd:ce:ab:0a:68:f6:94:13:
72:a6:8c:c2:5b:e5:5a:d0:51:7f:68:a0:05:7f:4b:
b5:15:80:90:e6:e4:c7:42:de:4b:3a:9b:0e:f1:bf:
f7:73:3b:54:1d:1f:bb:30:b2:e9:49:81:b6:ce:d3:
3a:cf:c0:20:f7:92:2b:56:82:29:92:44:8d:ed:67:
a0:9d:5d:fe:22:96:3c:75:22:5b:48:b3:e9:39:f0:
59:eb:0d:9f:d0:e4:5f:72:a9:00:20:f2:0a:ac:c4:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:D1:76:AD:84:2F:25:5C:92:04:35:4F:19:78:3F:27:35:8F:A3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Q7_Rdq2ELyVckgQ1Txl4Pyc1j6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b4c4::/32
2a13:c241:8000::/33
Signature Algorithm: sha256WithRSAEncryption
91:20:db:b8:d5:c1:45:1a:5d:e1:1e:3f:d8:45:1b:2a:3e:27:
4e:50:76:73:8e:0f:f7:42:c1:b6:1e:f4:77:23:c7:b0:44:8a:
8a:6c:78:3a:9a:c1:4c:c7:a2:59:6b:32:6a:78:07:33:f7:fd:
fb:68:ce:f4:5e:8d:60:51:bc:c3:f0:fb:f2:b0:8f:4b:3b:c6:
75:16:68:e7:20:05:32:ab:45:54:0d:f4:a4:df:0f:1c:fc:17:
89:38:62:09:6c:45:4f:0b:82:b4:80:84:eb:57:6c:c9:ab:8a:
06:f6:40:f3:37:58:01:f2:7c:73:85:ac:91:2c:b8:64:ea:9e:
3e:ea:f6:34:c8:26:31:4a:04:4f:70:d9:5e:47:9c:f0:73:4d:
58:38:60:5d:62:99:a3:dc:9e:e4:3a:8d:15:b9:d2:47:6d:9e:
0c:2d:fb:82:11:b2:d6:13:d2:6e:fe:04:4f:04:1e:6c:9e:1d:
23:01:31:9f:37:e6:48:12:25:af:2c:33:2a:ff:a0:38:62:21:
35:90:72:b6:1a:c0:eb:21:93:2d:c8:e7:7b:8a:9a:23:31:a9:
76:b3:03:73:4b:ab:ef:47:04:34:89:85:1f:56:ba:2f:cc:dc:
31:7e:87:85:0b:05:f5:59:5f:e6:2b:c1:d0:1d:1a:65:f3:04:
91:dc:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:18:46 2025 by rpki-client