Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ory1fxcE3AcRMylYfQ8lDIzrM-s.roa
File: ory1fxcE3AcRMylYfQ8lDIzrM-s.roa (raw, json)
Hash identifier: xkzv6P/7OGSs1wXSE/3sSk8j52J23pS7aLuPsMkdPZw=
Subject key identifier: A2:BC:B5:7F:17:04:DC:07:11:33:29:58:7D:0F:25:0C:8C:EB:33:EB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01968A8714BB9DBC3DD181E2507DD49B4009
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ory1fxcE3AcRMylYfQ8lDIzrM-s.roa
Signing time: Thu 01 May 2025 06:27:10 +0000
ROA not before: Thu 01 May 2025 06:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133944
IP address blocks: 160.19.92.0/23 maxlen: 23
2a10:b40::/29 maxlen: 29
2a13:b4c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 May 2025 20:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:87:14:bb:9d:bc:3d:d1:81:e2:50:7d:d4:9b:40:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 1 06:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2bcb57f1704dc07113329587d0f250c8ceb33eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:5e:b9:c0:0f:30:85:0e:d6:91:6c:a5:1d:
bd:9f:6c:a8:b5:a0:d5:96:ce:02:c8:73:bc:56:ee:
9d:b6:92:5a:6b:9d:c8:cc:d1:01:36:62:be:f4:9f:
cc:b0:76:8f:bc:4d:8d:7b:c8:50:64:f9:45:24:0f:
55:46:a6:f1:3a:83:68:25:53:0b:d0:24:38:4a:fe:
38:78:70:25:2b:fa:76:4b:ed:c0:25:66:f3:2b:91:
bc:0e:2f:a4:18:67:8a:41:ae:e8:71:42:66:a3:7f:
74:f2:21:e0:43:f3:7f:cc:a7:59:61:20:96:28:a2:
fa:d0:91:83:31:23:67:7e:2d:e4:1f:b7:79:10:13:
99:70:da:e6:54:b9:99:9b:6a:53:68:45:50:60:c9:
c9:82:ca:36:c7:b1:65:e3:00:ba:ad:56:40:00:7e:
84:6a:0c:12:4b:73:34:dd:f9:2c:18:b5:a3:35:4e:
12:ca:6a:e6:39:bc:a3:8a:43:9d:84:01:91:02:d1:
7d:49:87:b6:e1:c5:3f:9b:3b:52:90:27:e2:c9:d5:
39:2c:03:c6:e7:16:5c:24:fb:51:d3:2e:7b:91:aa:
81:0b:bd:3d:c3:eb:19:55:9c:c4:18:e0:ef:2c:c2:
a0:71:5e:e6:6e:f7:33:22:19:61:50:c1:d0:92:d4:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:B5:7F:17:04:DC:07:11:33:29:58:7D:0F:25:0C:8C:EB:33:EB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ory1fxcE3AcRMylYfQ8lDIzrM-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.92.0/23
IPv6:
2a10:b40::/29
2a13:b4c2::/32
Signature Algorithm: sha256WithRSAEncryption
ab:2a:42:d0:e8:56:92:fd:9c:40:ac:bc:32:c8:61:05:8d:9b:
bf:95:a3:b6:db:af:0c:bf:9a:65:02:43:36:13:3c:e1:45:2f:
49:f0:30:dc:db:c1:5e:39:f4:f9:79:22:c8:cc:1f:1c:22:7c:
66:2d:5a:58:80:be:c3:2a:63:23:58:d8:5b:53:b0:10:88:58:
b0:0d:a0:a8:c0:7b:82:89:72:6c:02:6e:49:a1:72:28:66:e5:
0d:72:78:2a:4c:99:ec:fc:fa:74:dd:b0:63:c7:d0:7d:07:07:
3c:5e:5f:87:af:cf:21:c0:02:d8:7d:b7:87:4e:74:d6:c2:40:
89:e2:9a:2f:50:52:1b:96:09:f6:8a:88:8c:47:d7:88:5f:02:
63:7c:93:35:d0:ca:75:c0:8b:48:91:9f:5d:0f:c0:99:51:60:
25:75:35:9e:3c:1f:62:dd:c5:2b:6f:d0:d3:f2:83:38:df:e8:
ac:34:3a:b7:6f:18:87:96:ab:7e:8d:16:6c:4b:9d:d4:d5:46:
28:69:c5:e4:75:64:0b:5b:36:5b:40:e8:4f:c1:6e:ba:19:a3:
76:09:59:ce:e1:d8:5e:e2:e6:df:b8:fc:f1:f9:74:72:7a:00:
fd:9a:41:03:62:d8:a5:ca:49:6c:5e:3d:03:40:0e:37:ae:a3:
d0:51:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:54:21 2025 by rpki-client