Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iWKjT-2ptOMCG0cyWoowXOW9H6w.roa
File: iWKjT-2ptOMCG0cyWoowXOW9H6w.roa (raw, json)
Hash identifier: RWQsVo+/IHG1b1G65L/UGY6pHWkp+9dTUJStJMJNEnw=
Subject key identifier: 89:62:A3:4F:ED:A9:B4:E3:02:1B:47:32:5A:8A:30:5C:E5:BD:1F:AC
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019669BC9BE1D58450DB77D2C8F9DBF56138
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iWKjT-2ptOMCG0cyWoowXOW9H6w.roa
Signing time: Thu 24 Apr 2025 21:38:10 +0000
ROA not before: Thu 24 Apr 2025 21:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:ac00::/29 maxlen: 29
2a13:c3c0::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:6a40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 30 Apr 2025 11:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:69:bc:9b:e1:d5:84:50:db:77:d2:c8:f9:db:f5:61:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 24 21:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8962a34feda9b4e3021b47325a8a305ce5bd1fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:04:5d:5e:e4:45:9a:cf:6a:68:90:8b:45:
82:ac:fc:74:9d:3a:87:b6:b9:f5:e3:a2:82:eb:02:
1f:df:f2:d4:4c:c1:ca:da:3c:e9:11:43:93:b7:99:
c6:f9:0a:05:cf:ad:b3:51:6f:d5:88:21:61:9d:76:
34:1f:b0:9d:d4:8a:ca:e7:c4:82:6e:d0:31:5c:92:
4f:59:17:9d:a1:a0:81:c2:e6:69:77:97:03:e2:d9:
ca:c0:f2:e7:97:50:5f:36:b8:b6:28:90:33:b5:7c:
1c:59:e6:bf:ff:40:a3:1c:4e:cb:03:02:d5:67:ac:
04:fe:c8:da:af:61:7d:f2:f0:f1:45:6c:be:13:43:
ed:51:96:07:0f:4d:e0:f8:78:cc:4b:cb:a6:f0:eb:
62:5b:64:7f:44:29:5e:80:8d:f2:00:a9:ee:a1:79:
36:ea:20:18:c1:2d:82:03:e7:19:a1:e4:2e:17:6c:
14:42:a9:33:82:69:73:3a:ce:a6:eb:2b:d3:72:da:
e8:a2:a0:66:f9:30:aa:2d:b0:8f:b1:d6:23:99:8a:
61:8d:fd:75:52:f5:a3:4f:53:55:ec:a2:95:79:65:
19:51:f7:67:0f:63:97:03:31:34:a4:7f:2d:06:4c:
ce:31:7d:85:5b:64:bd:08:83:e9:6f:1f:bb:65:1c:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:A3:4F:ED:A9:B4:E3:02:1B:47:32:5A:8A:30:5C:E5:BD:1F:AC
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iWKjT-2ptOMCG0cyWoowXOW9H6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
2a13:c3c0::/29
2a13:e040::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
46:ad:ec:62:44:a6:92:b9:80:f5:db:fb:ae:05:a4:37:26:ed:
84:17:f9:0f:22:de:ed:1e:ff:fb:24:f2:74:1c:6c:b6:31:25:
f9:89:e0:a3:1f:bd:f2:07:2b:d6:bf:64:7c:f7:fd:60:2a:e4:
c6:cb:69:96:af:e1:ad:26:d7:aa:82:81:de:8c:75:c4:57:de:
1d:dd:a1:f6:9d:0b:59:32:13:76:03:c2:71:be:78:20:35:46:
69:bf:6a:99:bd:21:18:c5:88:e5:b7:e5:86:45:0b:6f:7b:ad:
85:8e:d7:3a:8d:e9:cc:68:82:a3:5f:3f:f1:58:1a:99:cf:f9:
7a:03:f7:05:1d:67:e5:72:42:ab:ad:61:ec:81:08:35:ca:ab:
0c:dc:9a:d7:a8:db:f3:53:f2:7a:d2:b0:0c:f1:49:ca:4a:ef:
78:44:10:ec:d3:79:92:e5:cf:33:1a:9c:75:4a:3c:b6:6c:5a:
71:28:8d:00:30:b3:54:d0:2b:13:85:80:0f:d7:32:62:4d:ee:
b4:79:1d:78:51:7d:0e:32:99:f3:10:d6:7d:ab:c6:79:61:cc:
64:d7:be:aa:d3:3f:54:4b:1a:c5:40:02:7a:6a:15:5b:4f:ed:
e9:17:ab:f5:61:e7:98:a1:d4:a3:d6:89:99:d1:bd:11:b8:62:
10:a4:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:18:41 2025 by rpki-client