Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KoiTI5ai7U1ZHSrzH0Z16D4sH8w.roa
File: KoiTI5ai7U1ZHSrzH0Z16D4sH8w.roa (raw, json)
Hash identifier: hgLZm3UXINYCqXDaop0vThQfQ1xkeS6r/JTulu2AEJ8=
Subject key identifier: 2A:88:93:23:96:A2:ED:4D:59:1D:2A:F3:1F:46:75:E8:3E:2C:1F:CC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274827A212A815C8206C981BD9CC301F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KoiTI5ai7U1ZHSrzH0Z16D4sH8w.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138840
IP address blocks: 2a0e:1a83:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Jan 2025 07:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:27:a2:12:a8:15:c8:20:6c:98:1b:d9:cc:30:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a88932396a2ed4d591d2af31f4675e83e2c1fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:23:c7:7a:88:c0:77:ad:4e:59:92:ee:c5:
3f:fc:09:15:7d:01:ea:4e:c1:17:c3:8a:4e:7b:ba:
f2:9e:9c:56:a5:9e:63:ec:22:60:d9:5b:fd:a9:17:
b3:08:4d:01:2c:60:62:27:04:f5:c2:a6:44:20:0a:
f2:e2:ed:d0:d8:c7:55:24:27:64:d0:5c:2e:64:52:
d9:93:76:f3:c9:13:51:5c:c7:41:c2:65:60:10:6f:
94:0c:f1:54:1e:2f:85:4c:02:a5:e2:a2:99:e0:26:
53:de:96:32:ce:3a:43:2c:5f:3e:4a:91:ed:0a:37:
74:c0:fe:4b:0e:f3:3e:f5:db:72:a2:0c:76:cf:74:
03:52:d0:00:96:f6:5e:66:fd:90:e2:e8:8b:80:21:
e8:44:9c:99:6b:94:1b:d8:36:c9:3e:f8:cb:8b:86:
5a:d8:c5:22:97:3b:dd:5e:0a:0e:a0:0d:19:d8:3c:
54:8c:9e:68:3d:66:39:9d:9c:fb:dc:bd:9a:c6:98:
d8:34:82:77:a8:34:9b:ab:9b:2e:51:5b:95:9a:ef:
af:ca:1b:0c:00:7a:67:74:9e:fa:ab:3b:fa:94:c3:
8d:c3:b3:ea:d1:25:f2:8f:04:7d:38:bd:84:de:34:
87:1e:03:82:a0:7c:cb:b4:67:db:34:44:59:76:7f:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:88:93:23:96:A2:ED:4D:59:1D:2A:F3:1F:46:75:E8:3E:2C:1F:CC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KoiTI5ai7U1ZHSrzH0Z16D4sH8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1a83:100::/48
Signature Algorithm: sha256WithRSAEncryption
0b:5a:19:7b:ad:d0:d1:b6:9b:5a:ec:ca:38:62:40:5f:54:3e:
f5:f9:2c:31:6b:2c:c1:08:0c:46:9b:25:29:a7:06:69:ac:03:
ea:e1:e4:eb:f9:31:a3:fc:f0:cd:25:2c:83:e6:80:72:d8:8e:
0e:67:8d:3c:22:80:d6:df:82:79:de:7b:20:aa:75:88:0f:fb:
67:c8:c0:d8:24:f9:d8:44:01:e2:95:1f:46:fa:21:4c:57:34:
14:a5:02:83:6f:4d:3d:d1:e4:2e:4b:8b:86:ab:c7:0e:72:73:
93:15:35:00:57:e1:a3:64:bc:45:63:35:c1:1f:1a:5a:b3:37:
73:87:24:52:30:ab:6e:d9:b4:b9:d0:d0:eb:11:85:ba:d5:87:
6e:e2:03:58:ba:06:eb:d9:35:85:7d:c8:d9:d6:fe:13:4c:92:
c8:84:fc:00:47:83:94:4e:9a:1c:92:e2:e0:9c:15:8a:6e:3d:
61:ad:97:fd:79:5c:36:19:b4:5d:de:10:cd:9b:fc:b0:7f:c3:
60:03:79:8d:e3:c5:6d:61:91:8a:fe:d1:cd:b6:85:8a:e0:98:
51:30:a3:72:bb:6f:2e:b9:e4:53:3d:ab:d5:60:c4:80:1f:8a:
4e:d3:a7:61:b1:7b:39:0f:76:b8:bf:6d:52:91:e7:0a:3a:c3:
c4:91:37:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:07:57 2025 by rpki-client