Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/DihtgEN4sYm1Drr1054a7V5ClrA.roa
File: DihtgEN4sYm1Drr1054a7V5ClrA.roa (raw, json)
Hash identifier: 9d/ogphO0tADotD5RctaLbFNbfF8Q0r2JDtfkupWBgA=
Subject key identifier: 0E:28:6D:80:43:78:B1:89:B5:0E:BA:F5:D3:9E:1A:ED:5E:42:96:B0
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 0195ADE8CBDF38C680A7537BBAEEDB2FF4E9
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/DihtgEN4sYm1Drr1054a7V5ClrA.roa
Signing time: Wed 19 Mar 2025 10:17:49 +0000
ROA not before: Wed 19 Mar 2025 10:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 2a12:e680::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Mar 2025 10:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:e8:cb:df:38:c6:80:a7:53:7b:ba:ee:db:2f:f4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: Mar 19 10:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e286d804378b189b50ebaf5d39e1aed5e4296b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:19:d0:c9:8b:ac:45:ff:b0:f6:52:62:d6:
80:42:1a:80:bf:75:5a:f2:5a:17:73:dc:68:29:c4:
c6:e9:b2:74:2f:f6:0f:d0:46:cc:60:f4:80:56:a5:
76:61:5c:55:52:a8:73:98:2f:0c:8a:e8:28:25:72:
3f:34:81:98:ea:b5:bc:61:1b:6d:49:5b:92:14:0a:
f2:45:a9:7f:77:60:4b:8f:8f:13:2c:23:d6:17:91:
1a:b4:a2:bd:e5:a6:b8:c7:43:14:c8:46:1e:fd:3f:
df:af:ec:15:24:39:e6:67:59:c3:ad:cb:f6:51:83:
aa:c7:2f:05:15:78:18:42:74:8b:3c:c3:81:a0:2f:
a7:5d:e1:d5:26:3e:0a:01:31:8a:1c:17:f7:33:67:
07:d7:f3:04:3a:0c:6a:27:9e:8c:84:3d:5a:0f:9a:
3b:50:5f:35:a6:b7:e7:fa:c4:b6:6c:46:91:63:5b:
9e:a8:7b:5e:15:8a:ed:dc:97:ea:07:68:9b:76:52:
8d:cd:85:34:ed:70:d0:12:f4:71:57:5b:89:2e:fb:
4a:d7:c6:f8:57:66:c7:e9:d9:76:e2:fe:c0:d0:90:
82:6a:f3:62:75:3d:75:e7:56:0b:ad:e8:f4:df:5c:
13:3f:5f:34:c0:4d:7c:30:2e:01:a8:73:ab:06:1b:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:6D:80:43:78:B1:89:B5:0E:BA:F5:D3:9E:1A:ED:5E:42:96:B0
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/DihtgEN4sYm1Drr1054a7V5ClrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e680::/48
Signature Algorithm: sha256WithRSAEncryption
2a:74:82:ed:fe:34:1f:73:bc:94:db:8a:f8:83:5c:09:cc:3c:
c1:d2:1d:61:53:b4:a9:f5:1c:bd:36:72:13:cb:ef:d8:11:9c:
da:d9:8f:71:7d:da:3b:60:6d:a7:a0:34:f3:d0:6f:c2:b3:44:
72:76:ee:bd:38:6e:d3:13:87:99:9b:cf:2b:e1:40:bf:3b:b5:
fb:27:cb:81:43:94:ff:c2:00:13:ec:82:f4:03:4a:32:d7:cb:
02:de:3f:ab:c6:60:08:ff:3a:6e:39:ec:7b:ed:b0:79:df:f5:
9e:93:04:4d:ba:77:f5:fa:14:20:50:81:1d:03:e5:c2:bb:9a:
53:41:ec:e1:af:33:5c:2c:1d:74:3d:60:22:b9:ab:97:01:60:
16:d1:14:ad:93:61:8c:98:26:3e:66:cf:c3:f2:31:25:8d:db:
aa:b1:ab:48:e7:52:fd:4e:16:fe:c9:2e:8f:b1:bb:e2:51:95:
17:09:89:52:ed:b2:da:b6:b7:f2:b5:1a:a8:fe:3c:85:16:36:
aa:12:24:a7:27:30:74:80:0a:bb:44:27:bb:f8:db:4d:10:1d:
60:0b:07:5f:f4:36:1a:f1:fa:89:2f:34:f5:87:43:95:35:ef:
ac:a5:d6:42:0b:af:b8:95:a7:27:eb:34:51:a0:65:51:6b:4e:
51:0e:2a:75
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZWt6MvfOMaAp1N7uu7bL/TpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTRkNDFjZmE5NDNkYTE5ZjI3NzhhMGQzNzNkZDJhNzc0
MWQwNmQwHhcNMjUwMzE5MTAxNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTI4NmQ4MDQzNzhiMTg5YjUwZWJhZjVkMzllMWFlZDVlNDI5NmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTcZ0MmLrEX/sPZSYtaAQhqAv3Va
8loXc9xoKcTG6bJ0L/YP0EbMYPSAVqV2YVxVUqhzmC8MiugoJXI/NIGY6rW8YRtt
SVuSFAryRal/d2BLj48TLCPWF5EatKK95aa4x0MUyEYe/T/fr+wVJDnmZ1nDrcv2
UYOqxy8FFXgYQnSLPMOBoC+nXeHVJj4KATGKHBf3M2cH1/MEOgxqJ56MhD1aD5o7
UF81prfn+sS2bEaRY1ueqHteFYrt3JfqB2ibdlKNzYU07XDQEvRxV1uJLvtK18b4
V2bH6dl24v7A0JCCavNidT1151YLrej031wTP180wE18MC4BqHOrBht3RQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA4obYBDeLGJtQ669dOeGu1eQpawMB8GA1UdIwQY
MBaAFFgU1Bz6lD2hnyd4oNNz3Sp3QdBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMt
MGUwZGY2OGNkZTAzLzEvRGlodGdFTjRzWW0xRHJyMTA1NGE3VjVDbHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMtMGUwZGY2OGNkZTAz
LzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLmgAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAqdILt/jQfc7yU24r4g1wJzDzB0h1hU7Sp9Ry9
NnITy+/YEZza2Y9xfdo7YG2noDTz0G/Cs0Rydu69OG7TE4eZm88r4UC/O7X7J8uB
Q5T/wgAT7IL0A0oy18sC3j+rxmAI/zpuOex77bB53/WekwRNunf1+hQgUIEdA+XC
u5pTQezhrzNcLB10PWAiuauXAWAW0RStk2GMmCY+Zs/D8jEljduqsatI51L9Thb+
yS6PsbviUZUXCYlS7bLatrfytRqo/jyFFjaqEiSnJzB0gAq7RCe7+NtNEB1gCwdf
9DYa8fqJLzT1h0OVNe+spdZCC6+4lacn6zRRoGVRa05RDip1
-----END CERTIFICATE-----
Generated at Wed May 7 11:10:05 2025 by rpki-client