Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iTNI_Nz3GR0EKdvtQlGhKljs7s0.roa
File: iTNI_Nz3GR0EKdvtQlGhKljs7s0.roa (raw, json)
Hash identifier: dyiyVv0dt6yK3HwpZ1513IpoomMqNKbgbQGthdskvXM=
Subject key identifier: 89:33:48:FC:DC:F7:19:1D:04:29:DB:ED:42:51:A1:2A:58:EC:EE:CD
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0194B837686A2F03CB16130E1996F752F32E
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iTNI_Nz3GR0EKdvtQlGhKljs7s0.roa
Signing time: Thu 30 Jan 2025 17:17:06 +0000
ROA not before: Thu 30 Jan 2025 17:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207108
IP address blocks: 2a0b:8440::/29 maxlen: 29
2a0b:a4c0::/29 maxlen: 29
2a0b:b480::/29 maxlen: 29
2a13:cdc0::/29 maxlen: 29
2a13:d140::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 30 Jan 2025 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b8:37:68:6a:2f:03:cb:16:13:0e:19:96:f7:52:f3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 30 17:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893348fcdcf7191d0429dbed4251a12a58eceecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:72:da:14:b9:b7:30:6c:ed:c1:9e:fe:fe:
d2:04:58:8f:13:29:67:e2:0c:c5:c4:82:d4:1b:74:
1b:05:f5:b9:3b:4a:69:66:a9:8e:41:94:63:1a:04:
ce:97:a4:f7:da:bb:10:96:86:35:9f:65:0e:28:f1:
5e:b0:e0:b2:28:26:6b:ec:08:74:7e:ee:ba:2d:cd:
86:66:db:88:b2:67:37:22:45:a4:a1:36:9d:58:c7:
49:89:67:61:db:de:59:84:63:0a:26:7f:03:3b:a8:
50:00:02:d5:43:d0:42:83:5e:aa:f5:8e:66:e4:b8:
3b:9b:de:5c:a9:39:38:fb:ff:d5:01:5b:e2:42:08:
de:d6:25:00:7b:a0:e4:a8:77:24:1f:df:ca:05:2c:
75:9a:b4:39:f1:58:19:2d:f1:13:e8:fd:b5:08:d3:
f4:3d:3b:4c:0f:a4:4f:9a:cb:86:17:9d:2e:6f:10:
15:7f:02:65:48:e4:df:83:3a:35:09:ca:09:44:d6:
5e:76:42:00:55:46:f1:da:48:3e:b3:91:3f:75:d0:
77:b1:9a:5c:49:70:13:5d:c5:95:2f:e4:8f:b9:fe:
48:60:99:2b:84:40:2e:e5:af:de:de:fa:80:09:08:
b5:d7:99:19:95:4e:e1:16:a8:3e:8b:dd:98:b2:a2:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:48:FC:DC:F7:19:1D:04:29:DB:ED:42:51:A1:2A:58:EC:EE:CD
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/iTNI_Nz3GR0EKdvtQlGhKljs7s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8440::/29
2a0b:a4c0::/29
2a0b:b480::/29
2a13:cdc0::/29
2a13:d140::/29
Signature Algorithm: sha256WithRSAEncryption
49:f4:36:c8:8c:46:bd:75:9b:10:c1:65:a5:39:e5:6f:5d:f5:
82:4d:db:6b:cf:2b:b4:47:49:97:87:83:de:61:50:5f:cf:10:
98:25:99:37:db:1e:0e:41:73:22:a5:ad:98:1a:8a:f8:dd:b4:
a4:2b:d9:c2:6a:aa:72:2e:8e:1a:6b:05:bd:c1:ea:97:90:f8:
b7:0f:6b:b5:90:e6:10:a1:b9:80:2b:59:03:a6:23:3c:b9:74:
6f:a3:f9:7b:31:18:c3:84:b6:c9:e0:68:ad:a8:18:60:1a:d0:
77:e6:b5:51:ee:54:96:ac:58:aa:1b:c8:f6:64:a9:c3:a0:62:
dc:f6:58:57:a6:2c:b9:54:12:44:16:72:e1:58:49:16:98:64:
71:50:da:bd:d1:86:82:4a:1d:b8:0f:45:c8:ab:d8:e6:e8:35:
cd:f0:69:92:51:c2:cd:b6:d4:8e:66:65:6e:bc:62:ed:82:d8:
91:ca:4e:c2:17:95:9c:7f:b1:cb:e3:6b:db:bb:2d:d4:2a:16:
ba:e0:6c:db:d5:d0:cd:60:19:61:94:47:14:a8:1a:e3:10:19:
fc:6e:a1:af:ca:ea:aa:ca:1f:7c:be:79:7a:4a:a8:81:47:aa:
87:62:15:3d:f9:37:89:36:35:fa:d2:aa:16:8b:38:c3:bf:06:
63:d0:c7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:13:36 2025 by rpki-client