Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R29FXKXVOxzzK_GfuBdo8nQTX14.roa
File: R29FXKXVOxzzK_GfuBdo8nQTX14.roa (raw, json)
Hash identifier: alI2cKVhsvhvz2PFS8lP+BHyvVBA2ue0tkOHmh6L48g=
Subject key identifier: 47:6F:45:5C:A5:D5:3B:1C:F3:2B:F1:9F:B8:17:68:F2:74:13:5F:5E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01968A8716A3C1930A10F3F2E42E9B2939D7
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R29FXKXVOxzzK_GfuBdo8nQTX14.roa
Signing time: Thu 01 May 2025 06:27:11 +0000
ROA not before: Thu 01 May 2025 06:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204335
IP address blocks: 2a13:c245::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 08 May 2025 20:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:87:16:a3:c1:93:0a:10:f3:f2:e4:2e:9b:29:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 1 06:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=476f455ca5d53b1cf32bf19fb81768f274135f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:67:dd:94:9b:23:7e:53:74:c0:ca:ac:62:
27:d3:bb:c8:6c:f1:0b:db:3f:26:f0:58:14:f6:97:
20:3c:2c:79:1b:45:e6:8c:7a:2e:b8:e1:2b:2d:95:
98:0e:3c:73:eb:1c:fc:ad:b7:a6:a7:14:43:80:02:
83:01:97:15:30:bf:00:6b:93:ee:0a:e9:c5:77:fe:
e6:e4:fa:17:b0:4d:36:5c:cb:52:2c:18:cf:56:b5:
79:ca:a6:f5:4d:fa:4c:85:26:c4:3f:39:8d:d4:33:
da:d7:9c:7e:6a:12:41:59:b9:70:cb:8d:78:bd:21:
b5:f2:23:c4:d5:f5:a5:67:26:ba:9e:18:a2:9e:76:
9e:53:c0:26:d0:5b:99:b2:20:8e:d5:be:4c:b7:43:
d6:95:e7:e0:c5:6e:1f:2a:df:9f:b9:88:71:26:c6:
fb:4a:62:41:6e:26:e9:61:f2:a3:5a:33:f8:3f:fe:
d9:c0:60:48:1f:5e:fa:07:a8:fb:17:59:09:bd:99:
9a:c6:ab:c1:4a:21:5a:64:56:fd:d0:cf:45:f4:b6:
65:b8:d3:f6:33:ee:94:f2:40:95:c4:c1:46:c3:a3:
ef:72:82:1d:20:e8:46:a2:0c:a0:4b:40:7d:fc:9c:
97:41:bd:b4:9f:73:87:d5:fb:ef:30:f4:1c:01:be:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6F:45:5C:A5:D5:3B:1C:F3:2B:F1:9F:B8:17:68:F2:74:13:5F:5E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R29FXKXVOxzzK_GfuBdo8nQTX14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c245::/33
Signature Algorithm: sha256WithRSAEncryption
7d:74:90:30:c0:72:08:58:2e:8b:d5:f0:15:dd:49:d1:d1:48:
89:1f:8f:65:75:75:3a:c2:db:a5:9d:40:13:2c:95:56:7e:f7:
8f:73:6f:ea:8e:53:16:1e:c1:5c:13:f0:8d:54:7c:ef:b4:80:
db:67:1a:3f:b2:49:02:3c:fc:d7:ca:b3:18:78:68:31:9b:15:
f8:29:34:50:a3:08:96:c6:ba:47:c2:2c:63:ca:87:c2:9c:0b:
b4:46:77:a5:12:d2:50:b1:b8:88:83:f2:70:90:8d:a3:40:4e:
49:69:d1:82:ae:c8:ce:1b:6b:56:27:e2:13:40:01:31:d0:db:
d3:d4:86:b4:68:89:61:53:68:a8:73:70:0e:f7:97:93:31:b3:
29:34:83:46:dc:c9:f9:57:83:f8:32:21:8f:93:ff:98:5d:cd:
fe:4e:c5:68:e8:cb:60:fe:2b:92:cb:be:65:ea:fd:88:ae:c3:
40:b9:63:a6:f2:f4:20:dd:84:6b:80:5f:62:dc:fa:5c:52:6b:
73:15:1f:b3:4c:97:e4:32:b7:fd:fe:35:63:9e:95:99:df:89:
58:31:61:ed:d5:4d:fe:6c:09:87:b3:c1:fc:ae:9f:3b:5c:78:
8e:ea:b7:ca:62:1f:e9:4b:dd:12:49:a8:60:85:15:05:79:af:
41:dc:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:41:53 2025 by rpki-client