Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hoicgh8oNEmxr50DHNhsHxrMgF4.roa
File: Hoicgh8oNEmxr50DHNhsHxrMgF4.roa (raw, json)
Hash identifier: TxYNlcyKw45k87afj/3r9DWAxKQU4fqMpTmifo+TmlM=
Subject key identifier: 1E:88:9C:82:1F:28:34:49:B1:AF:9D:03:1C:D8:6C:1F:1A:CC:80:5E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01965CC3FDFB765D20F26EDC3BFE2C03F9E5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hoicgh8oNEmxr50DHNhsHxrMgF4.roa
Signing time: Tue 22 Apr 2025 09:11:10 +0000
ROA not before: Tue 22 Apr 2025 09:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a09:b700::/29 maxlen: 29
2a0f:1540::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a13:f40::/29 maxlen: 29
2a13:1940::/29 maxlen: 29
2a13:2ec0::/29 maxlen: 29
2a13:3040::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 25 Apr 2025 08:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:c3:fd:fb:76:5d:20:f2:6e:dc:3b:fe:2c:03:f9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 22 09:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e889c821f283449b1af9d031cd86c1f1acc805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:37:1b:9f:c4:e3:38:35:ef:08:29:ff:61:
a6:93:fc:41:db:81:e9:d4:e0:d3:11:ef:8c:e2:53:
50:6c:d6:c1:98:a7:7a:d6:24:56:1f:e7:3d:b2:88:
d7:bb:10:ce:49:48:91:dc:01:d7:18:0d:51:94:be:
de:5f:b1:88:01:5b:04:85:98:bf:d2:28:17:61:08:
ad:96:21:cc:f8:a5:ff:74:29:ec:49:87:f8:15:ef:
40:0a:b1:df:cb:8f:bc:d2:6e:5b:b0:da:87:ee:79:
a4:2a:1f:d6:ef:1a:c2:0b:36:87:4b:bb:2f:0a:8b:
bd:d8:66:f4:f7:dd:86:9c:42:61:b5:d5:61:6b:4c:
7a:42:c1:c8:b5:a7:93:29:93:5b:fe:2a:64:65:01:
42:ea:34:3e:54:a6:5d:34:0c:71:04:6c:40:9a:8c:
52:88:52:9d:24:fe:64:2a:dc:2a:03:3f:aa:e6:ba:
cb:a2:f3:b6:97:7b:10:95:1f:f1:81:25:c4:05:45:
e6:0a:ec:43:66:ca:73:26:d6:fc:da:bf:a2:a1:99:
14:60:4e:27:7d:ba:49:d9:76:0f:1e:7d:1e:ce:eb:
b0:89:4d:08:1c:44:b9:5c:1e:cc:5a:d9:bb:03:b9:
41:b7:4c:99:23:41:d1:ac:a7:51:eb:34:3d:76:59:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:9C:82:1F:28:34:49:B1:AF:9D:03:1C:D8:6C:1F:1A:CC:80:5E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Hoicgh8oNEmxr50DHNhsHxrMgF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b700::/29
2a0f:1540::/29
2a0f:dec0::/29
2a0f:e540::/29
2a13:f40::/29
2a13:1940::/29
2a13:2ec0::/29
2a13:3040::/29
2a13:a100::/29
Signature Algorithm: sha256WithRSAEncryption
6b:1c:ef:c3:25:5f:aa:58:8c:a1:a8:2b:21:ad:89:2a:12:c8:
6d:b6:42:b9:b1:9c:70:bd:65:00:9a:33:e4:68:82:dc:10:d4:
9c:7c:61:14:32:40:4c:83:a9:74:ff:c6:94:90:be:0b:e9:1e:
ac:25:9d:6a:25:d8:fb:e3:e0:4e:7b:53:28:3d:f1:af:30:15:
d9:9d:a0:29:2f:8c:9a:0a:a0:05:1e:cd:92:ab:eb:d0:2f:2e:
23:1e:f6:a1:78:70:3f:55:af:a8:df:29:0e:20:03:8a:8e:1a:
3e:af:e1:d2:4a:8a:3e:28:cd:a5:e3:e3:fb:b1:ea:37:67:03:
8f:7c:0e:90:65:33:59:30:61:86:9d:30:9a:90:9c:9d:aa:bf:
86:96:12:af:14:7f:27:05:29:ec:f7:e2:95:97:e9:8f:a9:73:
d0:10:10:3f:76:1e:bb:2d:7e:76:3e:22:80:1a:7d:aa:96:96:
ed:f6:50:e7:15:71:46:e2:3f:a8:3f:3b:0a:03:09:c7:ab:f6:
9e:d8:d2:d3:f1:a5:9b:f0:fb:f6:86:bb:b8:24:57:e8:a9:86:
7a:1d:44:d5:bb:9d:c8:6c:ec:6e:94:89:9a:e6:af:47:03:03:
56:48:cd:c0:ff:cf:2e:0a:6a:4c:1c:4e:0a:65:9b:9c:87:ff:
18:f2:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:27:51 2025 by rpki-client