Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/krnrMxTA8WJNFd_8ztjQBI4IZEI.roa
File: krnrMxTA8WJNFd_8ztjQBI4IZEI.roa (raw, json)
Hash identifier: i+WM+cw7tjWwATQDNtqKne2JAu3gaMUvswYXZQT6cfE=
Subject key identifier: 92:B9:EB:33:14:C0:F1:62:4D:15:DF:FC:CE:D8:D0:04:8E:08:64:42
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01968A871803411C0A43BA33FF35646346B9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/krnrMxTA8WJNFd_8ztjQBI4IZEI.roa
Signing time: Thu 01 May 2025 06:27:11 +0000
ROA not before: Thu 01 May 2025 06:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215819
IP address blocks: 2a13:c246::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 08 May 2025 20:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:87:18:03:41:1c:0a:43:ba:33:ff:35:64:63:46:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 1 06:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b9eb3314c0f1624d15dffcced8d0048e086442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:78:73:9b:70:2e:4a:20:6b:3c:58:f9:51:
a6:04:bb:f6:75:3c:87:6a:a8:b4:6c:3f:3a:63:9f:
18:d8:0d:f7:e6:29:b0:28:62:52:39:89:8b:ea:b7:
56:c9:0e:0c:0c:c7:aa:60:93:49:ee:b0:bb:87:08:
41:d6:f7:ac:63:a3:a3:21:2c:d4:0c:7c:e5:09:e6:
d3:d9:6d:1a:02:bf:40:25:36:81:09:1e:cd:58:0b:
d2:06:b2:b4:70:3f:3b:d2:1c:fe:36:08:f5:88:a9:
47:28:6a:d6:f8:62:66:b0:c9:22:3e:53:b1:92:f8:
93:31:bc:8e:f4:5d:e5:0f:df:c4:1f:8d:d1:6a:85:
8c:d8:28:b5:ec:22:fb:02:8d:19:af:e7:a7:4e:81:
3c:e7:b5:5e:ce:3f:11:78:b8:b7:0e:87:f4:7e:a3:
fa:83:57:5f:b9:05:05:09:7d:07:fc:9f:e0:1b:f3:
cc:c7:11:2b:62:2e:0c:54:99:7d:29:f3:13:7d:37:
d9:1b:03:c4:b2:3e:ba:13:f9:c4:5a:94:f9:0d:ed:
04:2c:1b:28:f9:fc:10:a3:37:a1:95:20:34:7d:13:
56:fa:59:66:97:20:e1:90:47:0b:1e:a6:40:7c:e2:
91:5e:fa:ab:67:c1:a5:a8:9c:bd:80:c2:d1:ce:c3:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:EB:33:14:C0:F1:62:4D:15:DF:FC:CE:D8:D0:04:8E:08:64:42
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/krnrMxTA8WJNFd_8ztjQBI4IZEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c246::/33
Signature Algorithm: sha256WithRSAEncryption
4a:a6:5a:26:0a:eb:ee:f9:9e:7e:ab:0a:12:e2:36:5e:54:d7:
a0:26:10:35:47:7c:d0:43:df:05:9f:3c:f7:ed:ee:65:19:aa:
16:f3:af:7e:9e:60:cc:bc:3e:0f:3e:b6:5b:1d:ef:a2:df:fb:
69:a4:f1:fd:8e:83:66:2b:50:65:0b:14:c1:a9:b1:e7:ee:b9:
05:ae:a0:a5:77:84:d4:1b:0d:cc:d4:0c:43:c0:b7:a4:c1:37:
a8:f8:b6:f6:fd:53:5c:32:be:ee:c6:2e:87:0d:f4:4f:53:9c:
d7:76:1a:1e:4b:28:d3:0d:19:5d:53:79:d3:f8:15:48:72:d4:
1e:82:14:f8:fc:d6:8a:20:eb:0e:09:c2:3c:8a:67:71:f2:75:
07:36:a2:4d:86:15:ba:21:c2:6e:ec:b4:54:39:99:de:14:46:
ff:f6:00:17:56:cf:e2:f5:c4:8a:bb:19:48:3e:74:2d:d1:cb:
89:7d:1e:24:1d:6b:b0:11:cc:c4:c6:3e:6a:3d:56:92:9e:6a:
58:88:45:33:7a:43:20:a0:83:4e:df:2c:3b:df:bf:07:4c:7e:
c2:d8:b7:10:ce:c7:29:74:67:d8:f3:ee:54:fa:18:66:2a:8b:
52:5a:d7:c1:56:80:73:24:32:92:ff:44:da:19:1e:f6:20:3b:
fb:a5:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:12:05 2025 by rpki-client