Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/LZs5HSpyqrHK3WbJLSuIr2XrLaA.roa
File: LZs5HSpyqrHK3WbJLSuIr2XrLaA.roa (raw, json)
Hash identifier: TS9i0BXCqbcSmfr3wd7ue7eJdCMsNMQA72eu5q7BxXA=
Subject key identifier: 2D:9B:39:1D:2A:72:AA:B1:CA:DD:66:C9:2D:2B:88:AF:65:EB:2D:A0
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 0195256F8DED1A0258EDC3A5B837D065B88E
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/LZs5HSpyqrHK3WbJLSuIr2XrLaA.roa
Signing time: Thu 20 Feb 2025 22:17:02 +0000
ROA not before: Thu 20 Feb 2025 22:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8989
IP address blocks: 2a02:980::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 20 Feb 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:25:6f:8d:ed:1a:02:58:ed:c3:a5:b8:37:d0:65:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Feb 20 22:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d9b391d2a72aab1cadd66c92d2b88af65eb2da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:29:36:1a:01:63:f4:fa:54:66:60:80:ed:
d3:98:f1:80:8d:df:51:4b:e4:86:cc:ab:69:5b:6a:
b4:fe:0a:a0:d2:c0:15:c1:87:29:ba:4b:72:54:66:
8b:a7:ba:3a:3d:df:27:c2:58:1f:9d:eb:c8:87:29:
52:27:ed:2e:81:67:97:e3:8e:c6:e1:84:b9:6d:bd:
43:1f:f2:b1:aa:a5:84:35:90:6f:83:ea:7b:8b:f0:
ec:56:e8:d6:0c:ff:1f:49:e0:e9:87:01:60:62:2c:
c1:e9:a8:e5:d1:42:a7:d1:65:2f:6e:64:e7:56:9b:
19:4c:a0:26:91:b8:bd:f2:ee:e0:e5:8e:1a:94:3b:
85:12:0e:19:14:73:63:2a:0e:87:4f:50:53:9f:1c:
3b:e6:bb:a3:84:43:6e:51:1b:7f:15:5c:92:99:db:
31:f4:86:bf:08:46:68:ce:36:04:c8:76:f8:77:fd:
47:bb:64:b6:00:eb:47:0c:95:e2:4c:52:a4:51:83:
35:df:21:93:b5:97:55:18:6a:59:c7:ea:54:34:e7:
a0:18:65:66:5d:d4:c4:4f:2e:32:70:28:f5:05:11:
83:5a:3b:82:8a:da:7d:96:84:d2:1c:85:11:ec:09:
dc:ab:05:51:ab:8b:7b:21:f4:b2:02:dd:5e:84:6e:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:39:1D:2A:72:AA:B1:CA:DD:66:C9:2D:2B:88:AF:65:EB:2D:A0
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/LZs5HSpyqrHK3WbJLSuIr2XrLaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:980::/29
Signature Algorithm: sha256WithRSAEncryption
21:9b:00:42:be:4e:52:55:f5:b0:60:15:5e:b4:6b:83:6c:eb:
38:f5:08:a2:ca:32:0f:f7:1f:45:fa:8d:b3:a4:35:35:3e:5c:
3b:7b:e1:85:87:e4:5c:68:ea:87:5d:0d:80:1c:9b:35:5c:dd:
b4:a6:75:77:78:93:0b:8a:08:74:ed:90:0e:1c:3a:c9:b1:c2:
9e:44:f1:e5:49:d7:67:3c:b2:ef:9c:ab:77:30:93:01:66:27:
97:5f:27:99:75:3b:1a:18:4c:86:91:c0:42:88:7f:78:63:dd:
67:92:0f:82:97:ac:c5:96:21:f4:c4:f5:55:47:e7:60:07:e2:
f5:0e:59:22:ea:b3:3d:db:be:fc:e3:af:c1:51:32:67:02:e6:
d9:32:98:b0:ac:5d:cb:af:3a:b2:01:66:f0:de:95:e4:42:ca:
6d:97:51:27:95:f5:09:ce:01:ad:48:ef:b0:c5:c3:7b:e4:bd:
ec:ad:be:f0:13:56:73:a7:05:0b:8e:c9:03:4d:af:e7:b6:52:
a2:59:23:17:8d:c8:67:9b:31:b1:14:a4:08:42:41:4e:00:ec:
64:6d:d6:5e:ab:75:47:ab:bd:d7:00:12:98:e1:72:3c:7b:7c:
9c:06:91:4e:e4:c1:09:7c:fd:99:50:11:24:44:40:bc:78:47:
7f:a0:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:07:52 2025 by rpki-client