Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/V1alq5oVHdd0QRPk8VjtmTY129w.roa
File: V1alq5oVHdd0QRPk8VjtmTY129w.roa (raw, json)
Hash identifier: Ha9xdU66DYsJW3hRerpFPVk12Q+3pdMqBbNyffSbSxk=
Subject key identifier: 57:56:A5:AB:9A:15:1D:D7:74:41:13:E4:F1:58:ED:99:36:35:DB:DC
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019654AFD061E493C2AB94B9A12E6B5BD324
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/V1alq5oVHdd0QRPk8VjtmTY129w.roa
Signing time: Sun 20 Apr 2025 19:32:10 +0000
ROA not before: Sun 20 Apr 2025 19:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215427
IP address blocks: 2a07:f580::/29 maxlen: 29
2a0d:38c0::/29 maxlen: 29
2a14:41c0::/29 maxlen: 29
2a14:4240::/29 maxlen: 29
2a14:6240::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 21 Apr 2025 21:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:af:d0:61:e4:93:c2:ab:94:b9:a1:2e:6b:5b:d3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 20 19:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5756a5ab9a151dd7744113e4f158ed993635dbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:ed:3b:b6:4a:ba:f8:a0:a9:0f:48:0c:0f:
fc:d2:3a:ea:40:57:45:70:10:7d:59:b8:de:f3:fc:
98:c3:6b:cb:5d:8c:6c:5d:ad:39:f5:33:67:c5:70:
ff:1a:e9:16:6e:38:1c:9e:84:6b:c3:1f:7d:60:c3:
fe:08:da:94:88:06:76:ed:38:cf:51:8b:6b:db:70:
38:54:da:01:4e:fc:06:54:3b:f1:d4:b1:c8:f5:a1:
7e:2b:5b:3f:50:fc:88:df:51:bf:7c:60:33:9f:2f:
13:4e:07:78:de:fb:57:23:cf:21:5c:25:a9:c7:00:
14:33:05:0d:d8:1c:7a:bd:74:ec:0e:a0:a1:b4:a2:
3a:87:43:c5:a4:8a:20:49:b6:b4:43:72:1e:e6:71:
0d:af:43:d2:0f:60:1f:82:8d:fe:53:44:33:8c:fd:
cf:11:a4:1e:b7:56:2c:35:8c:11:65:4d:19:04:1e:
98:09:6b:21:3d:98:17:ed:3c:18:4f:48:b8:8b:db:
98:76:25:c5:6a:e2:f7:ee:58:7c:74:c7:ca:26:bc:
fa:9a:d6:cd:c1:4c:4c:36:3a:5e:98:40:14:5b:b8:
97:e4:77:c5:c3:f1:b5:4b:23:2d:69:f9:84:be:76:
f1:ea:78:c3:91:3c:17:bb:2f:d9:c3:fa:32:0a:58:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:56:A5:AB:9A:15:1D:D7:74:41:13:E4:F1:58:ED:99:36:35:DB:DC
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/V1alq5oVHdd0QRPk8VjtmTY129w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f580::/29
2a0d:38c0::/29
2a14:41c0::/29
2a14:4240::/29
2a14:6240::/29
Signature Algorithm: sha256WithRSAEncryption
df:8d:3c:58:7e:88:4a:11:de:b1:09:cf:6a:cb:0a:58:04:1b:
1e:40:1d:ce:c9:12:45:1b:e8:35:60:f1:82:df:df:68:48:37:
16:dc:79:89:c5:39:bc:d2:49:0d:76:2e:01:90:54:a7:9e:b0:
91:b9:05:0e:f7:f3:15:54:21:97:41:de:45:7c:a3:00:41:76:
6a:ca:e1:19:e0:03:25:17:6c:66:76:10:f1:82:68:90:07:73:
8c:bc:22:6b:e0:f4:74:80:3f:04:4d:48:b0:e7:d6:7d:41:b5:
d8:cd:5b:20:9e:b4:fe:d1:18:5b:19:23:5b:71:05:60:5a:f6:
6b:4d:5f:45:a6:b3:2f:61:3e:75:89:04:92:8f:36:c8:a2:d7:
66:72:68:87:28:14:9d:48:4a:b3:2e:c1:3f:8c:27:c1:bb:7d:
4a:85:a5:0c:4e:b8:18:14:1a:b8:98:3f:4f:69:15:9d:cc:48:
a0:41:8f:31:2a:dd:b4:65:19:5d:f7:43:ba:a1:14:5b:c9:c9:
a8:f7:e3:d7:dd:1f:2e:3a:21:15:e3:99:06:9c:63:92:08:84:
4a:d7:cb:e2:48:7a:19:e1:a3:b3:bd:cc:b2:51:47:19:57:33:
06:03:b1:b9:c5:4a:68:96:15:8f:91:9b:68:c2:34:44:3d:74:
c6:9a:b6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:12:05 2025 by rpki-client