Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1-qpqvCtW5q2S_Wu-wdFMEHINbQ8.roa
File: 1-qpqvCtW5q2S_Wu-wdFMEHINbQ8.roa (raw, json)
Hash identifier: 5a4WQrrdX565ywWFkO0NKG9/RLlc08T4r1YSYDrzkH4=
Subject key identifier: FA:AA:6A:BC:2B:56:E6:AD:92:FD:6B:BE:C1:D1:4C:10:72:0D:6D:0F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0195247947A6471154B8C58E698EAA73A445
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1-qpqvCtW5q2S_Wu-wdFMEHINbQ8.roa
Signing time: Thu 20 Feb 2025 17:48:02 +0000
ROA not before: Thu 20 Feb 2025 17:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:c706::/32 maxlen: 32
2a0a:b385::/32 maxlen: 32
2a0b:9005::/32 maxlen: 32
2a0f:3105::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Feb 2025 11:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:79:47:a6:47:11:54:b8:c5:8e:69:8e:aa:73:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Feb 20 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faaa6abc2b56e6ad92fd6bbec1d14c10720d6d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:8c:cf:0f:9f:a8:77:c8:fe:17:84:8b:6a:
66:0b:ea:d7:95:44:69:c5:44:b6:33:f4:c8:de:e6:
30:62:1d:ec:49:3f:c6:11:75:15:80:57:59:11:e2:
0a:27:df:18:7b:59:60:58:60:e0:0c:5b:6d:fc:e3:
a4:3b:e4:5c:dd:31:a0:e1:ab:15:b6:dd:c7:c2:34:
e2:99:ba:21:b5:cf:dc:e8:18:bd:32:f0:b3:a1:4a:
bb:49:8c:5a:9f:c4:4c:1c:e2:13:1a:6c:8e:69:88:
cf:65:db:93:49:b6:48:bb:b2:9e:66:a6:aa:0d:ac:
44:45:7b:19:ff:5e:eb:bd:45:d2:68:86:03:aa:84:
aa:7e:f9:d5:f9:69:0d:59:60:89:94:bd:61:4f:78:
e7:d4:aa:db:77:b7:ff:47:85:bc:e5:8c:68:b9:76:
88:e2:e1:0f:47:90:0f:8a:2d:79:a0:35:08:df:49:
01:bf:28:d3:e4:b3:3c:f6:a9:ef:ec:9d:00:ae:59:
9d:53:96:ef:c3:01:eb:a9:b7:8f:37:e3:33:33:78:
37:24:86:80:00:2c:ce:ad:42:39:b0:07:c0:6e:06:
5b:2a:a6:75:3c:22:75:66:09:9b:75:55:ba:59:0e:
36:62:66:d1:8d:a4:ac:8e:d1:b3:c6:dd:3f:e6:14:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:6A:BC:2B:56:E6:AD:92:FD:6B:BE:C1:D1:4C:10:72:0D:6D:0F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/1-qpqvCtW5q2S_Wu-wdFMEHINbQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:c706::/32
2a0a:b385::/32
2a0b:9005::/32
2a0f:3105::/32
Signature Algorithm: sha256WithRSAEncryption
5a:13:ab:63:dc:f1:36:ab:4f:89:8b:7e:73:75:56:e2:2b:66:
07:1a:2e:97:57:c9:e4:11:c3:e9:c1:3a:13:b9:3e:c1:0a:de:
7d:c8:fa:95:d1:1c:94:87:cf:62:d9:a2:6f:6c:18:84:c5:26:
fc:de:d5:f5:b4:4f:19:87:e6:cb:46:83:43:d1:05:17:e0:26:
8f:5b:75:6d:15:0f:87:57:d6:50:ca:17:99:67:e5:e3:ff:f0:
e7:a8:94:e3:8a:7b:ed:b8:7e:95:14:65:37:06:d9:96:ed:56:
2f:a3:2e:36:7e:f1:7f:23:9f:27:5b:ef:27:e7:02:dd:a0:6f:
e6:7a:fe:f0:09:63:82:b7:6f:63:d5:2d:11:26:3b:f0:1e:40:
01:81:ec:61:53:03:f3:71:ba:9f:a2:c5:2e:5d:9a:a2:82:0f:
07:eb:4b:74:49:ea:b7:bd:67:79:4e:f6:ae:93:70:28:c9:aa:
6b:fe:08:0c:e9:73:68:a2:9a:01:7e:eb:2f:b5:eb:32:88:73:
f9:27:c7:ca:38:ce:4d:29:6c:82:b7:c5:3c:b4:95:6a:8e:01:
65:9b:57:38:f8:06:22:13:f4:36:ad:f6:15:cf:fb:6c:89:04:
d0:65:a9:16:60:4d:27:b2:4d:c1:03:d5:0a:7b:ec:af:55:cc:
62:e3:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:14:55 2025 by rpki-client