Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/S2KvOflbeG46WrgYgTaojm7wGu0.roa
File: S2KvOflbeG46WrgYgTaojm7wGu0.roa (raw, json)
Hash identifier: bSvhHCYD0xtDHhOdprxX8idjZccwVd4Iri8W2XWOjbw=
Subject key identifier: 4B:62:AF:39:F9:5B:78:6E:3A:5A:B8:18:81:36:A8:8E:6E:F0:1A:ED
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 019524794879C67FA0BD39BA96A1B5A52376
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/S2KvOflbeG46WrgYgTaojm7wGu0.roa
Signing time: Thu 20 Feb 2025 17:48:02 +0000
ROA not before: Thu 20 Feb 2025 17:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4581::/32 maxlen: 32
2a0e:4585::/32 maxlen: 32
2a11:9886::/32 maxlen: 32
2a12:9504::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Feb 2025 11:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:79:48:79:c6:7f:a0:bd:39:ba:96:a1:b5:a5:23:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Feb 20 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b62af39f95b786e3a5ab8188136a88e6ef01aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:68:5e:3f:e6:ff:84:e5:04:27:0e:0c:32:
4b:25:28:f6:77:41:38:43:60:2c:c3:49:b2:c3:e9:
dd:bc:d3:c2:da:62:75:7a:a7:c6:d4:69:86:e0:91:
23:e6:42:04:6a:2a:3b:21:41:5d:1f:81:c7:92:01:
92:c6:a0:17:a2:ef:e5:01:bc:dc:ac:ea:22:73:b7:
ad:61:08:72:7b:ae:78:1c:c8:27:bd:4c:c7:5c:b4:
ad:f3:81:f5:38:57:29:2a:1b:35:ed:3c:a5:36:de:
6d:3e:5e:4a:8d:0f:63:7f:aa:69:b6:37:b3:56:ca:
39:4d:c8:af:51:0b:81:aa:52:a9:6f:76:88:f3:51:
85:45:b9:0e:76:29:f6:ad:c9:56:3c:6f:08:f2:9a:
74:f2:55:40:67:62:7a:d0:53:76:9c:f8:e7:12:1b:
d3:16:fd:1d:5c:11:57:46:31:7b:de:b5:ee:95:2f:
71:43:44:d4:3a:a9:f0:66:dc:94:67:62:f5:e7:b8:
f3:4d:fd:c3:9b:83:a6:af:47:55:c8:3a:fe:50:05:
49:64:1b:e5:47:4b:0e:6f:47:e7:6a:5d:f0:6b:47:
b8:bb:a6:27:f3:3a:f9:a4:b7:6e:51:e4:41:72:50:
9b:b6:78:55:2b:37:c7:87:89:3e:e6:f0:34:f1:44:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:62:AF:39:F9:5B:78:6E:3A:5A:B8:18:81:36:A8:8E:6E:F0:1A:ED
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/S2KvOflbeG46WrgYgTaojm7wGu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4581::/32
2a0e:4585::/32
2a11:9886::/32
2a12:9504::/32
Signature Algorithm: sha256WithRSAEncryption
5e:99:c9:a7:38:7c:44:11:75:40:c7:7d:fd:c9:95:35:5f:bf:
40:7a:72:30:3a:c1:17:b7:f9:d7:3b:da:d6:da:80:1e:c2:e3:
e1:7e:fb:1e:41:9d:9a:85:63:9c:60:de:cb:68:3d:0d:9f:1a:
13:a0:4e:8d:ff:5a:74:a3:4f:fd:72:db:ca:24:cf:d5:5a:c0:
d3:1e:47:6d:6d:35:b4:a0:36:e2:af:53:17:16:f6:86:3c:03:
80:2d:99:41:7b:c0:d9:6e:96:d1:46:6d:b0:ab:61:1d:b3:33:
1e:0e:1e:ad:89:96:c8:02:f4:4b:53:a6:b0:81:18:4d:3b:ff:
da:d7:53:e9:90:7d:58:81:2e:96:b4:4f:ca:82:6b:cd:41:57:
17:f3:dc:1d:69:69:62:29:20:25:3c:0d:39:f1:e0:1e:8a:c8:
0d:8e:3b:a7:6c:98:62:bd:8c:3f:8a:7a:59:6e:72:0a:6d:66:
a5:c5:7d:ea:67:ef:7d:09:b7:5e:ef:aa:98:8c:33:be:9e:ea:
49:b0:d1:c5:81:53:02:ab:cc:0f:d2:d9:e5:ca:1c:73:34:d4:
dd:32:57:ba:f4:24:9b:02:c4:3d:88:b0:be:c4:28:f1:e5:7a:
46:3f:c9:b9:fb:21:4f:1b:d5:9d:ae:4a:3b:8c:fd:cc:be:ca:
74:54:7a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:33:02 2025 by rpki-client