Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tOMyUdZIsz92zCfd2iue9oDBXSk.roa
File: tOMyUdZIsz92zCfd2iue9oDBXSk.roa (raw, json)
Hash identifier: XHSfTZDwNmM9aoW73xw+YCXwvke27uWQ0+5hFTWUnEs=
Subject key identifier: B4:E3:32:51:D6:48:B3:3F:76:CC:27:DD:DA:2B:9E:F6:80:C1:5D:29
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01968A87178E7153AB359F371D2D7CA308C7
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tOMyUdZIsz92zCfd2iue9oDBXSk.roa
Signing time: Thu 01 May 2025 06:27:11 +0000
ROA not before: Thu 01 May 2025 06:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213705
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a13:c244::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 08 May 2025 20:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:87:17:8e:71:53:ab:35:9f:37:1d:2d:7c:a3:08:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 1 06:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4e33251d648b33f76cc27ddda2b9ef680c15d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:2e:12:bc:ad:27:53:8d:41:f4:40:25:73:
ce:94:30:f8:e4:bc:b3:ef:31:58:41:01:9b:c3:39:
be:9e:4f:d6:3b:24:98:09:ca:dc:67:03:57:cc:e0:
16:04:9a:12:91:2c:63:27:36:38:25:7a:ed:e5:45:
c0:2f:71:58:49:a9:47:41:0e:47:5e:b3:ea:b8:12:
48:80:13:f5:80:fc:11:f0:dc:f8:aa:9b:54:9c:64:
a7:19:08:ad:b8:0d:85:49:b3:9e:6b:f7:46:b1:4e:
5d:cf:dc:f3:cf:ce:d4:ce:ba:9e:7f:8d:70:fe:8f:
d0:06:13:d2:60:fe:b9:3c:ac:9a:b9:76:51:57:c2:
1c:15:1d:1e:52:01:d6:8c:99:1c:37:70:f8:e4:26:
64:6e:8e:23:b6:f8:47:d1:8c:40:14:78:50:86:d1:
ec:50:dc:c8:af:8b:f8:47:f2:fe:11:39:74:71:b3:
33:c6:e9:8e:01:a5:ec:df:22:60:fb:0c:85:95:f0:
6d:31:2d:36:7a:f4:f6:5d:6f:2d:30:5d:41:d7:0f:
1a:54:4b:b9:e1:2a:ff:ec:35:e0:ba:36:c3:d6:1a:
19:97:a7:b4:f7:62:27:ff:a7:5b:84:0a:91:34:f0:
0e:88:2f:61:8c:77:bc:6d:35:8a:77:b7:c8:e1:c6:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:32:51:D6:48:B3:3F:76:CC:27:DD:DA:2B:9E:F6:80:C1:5D:29
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tOMyUdZIsz92zCfd2iue9oDBXSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a13:c244::/33
Signature Algorithm: sha256WithRSAEncryption
bb:6c:a4:76:61:94:13:41:45:1c:fe:a1:87:56:42:31:11:92:
74:88:28:0d:ef:7a:55:8e:7f:a5:e0:73:ea:6b:49:f0:42:7e:
e6:4a:38:45:f4:d2:c3:b3:b8:91:71:7c:ca:8c:88:8e:f2:d4:
cd:49:ac:18:0c:93:f9:f3:ee:d8:00:29:92:13:13:43:6c:74:
6e:70:1c:7b:09:c1:4c:89:db:31:e3:db:c0:95:05:8e:74:9d:
e6:ed:9a:36:70:25:2d:df:e5:a7:e6:c5:23:52:f4:1e:63:6f:
d9:08:d6:1b:73:fc:1c:ea:a7:e8:af:f8:24:43:75:b7:30:cb:
2f:54:bd:fc:d4:01:20:08:4f:96:93:c2:a5:5d:f8:48:2d:6e:
3e:25:a1:93:f9:72:06:7d:69:83:f5:c4:f3:f2:17:8f:9b:21:
79:87:a0:6c:a1:de:f1:7c:c8:47:21:29:1d:ca:12:a4:6a:bc:
df:15:a4:f8:98:23:fb:fc:23:fc:8a:3e:c0:0c:9a:21:4c:41:
d4:e9:f5:dc:7f:10:98:5a:e2:64:f4:12:6d:0b:a9:e8:f2:28:
78:71:d6:72:05:8e:03:da:93:2d:80:f4:42:c3:82:99:91:a2:
00:ee:5f:c5:b4:a4:2a:88:43:7b:03:ca:63:7c:a6:18:e9:89:
ea:1d:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:34:16 2025 by rpki-client