Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/UEdPx1aUmmRIuh4g8pIkY5E-rWw.roa
File: UEdPx1aUmmRIuh4g8pIkY5E-rWw.roa (raw, json)
Hash identifier: CZVWGjb5ihF8IVw8uFAJNNmNvCZMllk34C9A+JZIpiQ=
Subject key identifier: 50:47:4F:C7:56:94:9A:64:48:BA:1E:20:F2:92:24:63:91:3E:AD:6C
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0196A19924F48945AD0BDAA7F45089398F66
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/UEdPx1aUmmRIuh4g8pIkY5E-rWw.roa
Signing time: Mon 05 May 2025 17:58:10 +0000
ROA not before: Mon 05 May 2025 17:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a12:41c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 May 2025 14:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:99:24:f4:89:45:ad:0b:da:a7:f4:50:89:39:8f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: May 5 17:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50474fc756949a6448ba1e20f2922463913ead6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:8f:8c:43:42:29:b2:1a:46:23:3b:31:61:
57:4f:fa:ae:4f:75:e6:5c:66:31:ae:71:45:c2:6e:
c0:60:4c:3c:06:76:a3:44:c4:4b:17:69:67:5e:34:
66:e3:27:49:6f:4e:f7:0f:dc:32:61:d3:b1:41:70:
ab:64:33:bd:f3:46:1e:bb:eb:a5:2e:03:93:f5:74:
30:f4:38:02:c6:a5:24:f7:18:9f:94:32:65:59:00:
8d:17:08:7b:52:8f:7a:38:9b:08:18:68:b4:e6:e8:
bb:e2:26:eb:d5:0f:94:4c:96:b0:4c:60:a4:59:a2:
3a:c0:39:c8:95:a1:36:31:17:3b:e4:81:cd:60:28:
51:2a:fb:57:9a:fd:2a:43:3d:d6:9d:cf:dd:23:3d:
a2:ed:48:86:17:11:e6:5e:82:cf:93:63:60:de:f5:
e5:57:ff:df:eb:ac:6b:65:58:5a:81:d4:98:55:52:
54:1c:f2:a5:34:67:57:ad:e8:32:b8:bb:16:53:aa:
c4:3d:91:8e:58:88:44:12:c5:cd:b9:09:b4:17:2c:
57:4d:8f:e7:fa:8e:0e:d6:9b:f3:41:71:7e:b1:6f:
b8:f9:a5:84:81:a0:6b:28:d3:b4:af:d7:35:05:58:
f7:63:aa:41:76:0d:a0:d0:c5:f7:cd:62:c1:e0:d4:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:4F:C7:56:94:9A:64:48:BA:1E:20:F2:92:24:63:91:3E:AD:6C
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/UEdPx1aUmmRIuh4g8pIkY5E-rWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:41c2::/32
Signature Algorithm: sha256WithRSAEncryption
68:e4:0c:2d:70:9c:16:8e:65:28:ca:5d:ea:21:1b:60:90:c5:
ab:e4:87:74:bd:4a:cd:b9:44:54:a8:72:17:9d:28:09:04:2f:
95:b7:b4:bc:a2:ad:70:eb:ab:7b:c7:63:6d:78:2c:5f:9f:88:
32:1f:91:6a:27:ea:e3:3d:bc:56:94:c1:21:7e:23:76:d0:e3:
aa:0d:b6:95:6b:36:7e:0d:b4:b2:d0:9d:b7:7e:14:fb:7f:cd:
77:ba:78:e2:e2:2f:91:ac:77:7d:a0:70:61:3b:d6:60:fd:8b:
a6:10:7d:f5:4e:f6:29:0a:6d:92:01:80:bc:ea:23:d6:67:5c:
7c:86:6c:68:50:59:10:5c:fa:bc:48:18:2e:0d:be:43:a7:00:
d5:e3:81:ed:e8:49:fa:9d:3c:5f:66:13:3e:51:34:e3:14:34:
ad:5b:64:7c:76:84:a3:d8:fb:95:2a:07:50:9d:82:05:d0:c3:
0a:ec:a6:ff:5b:53:ce:86:1a:fb:14:db:23:56:a9:6c:45:58:
31:c7:66:d1:bc:8f:1e:21:71:8a:db:8c:7e:4b:db:0c:fc:af:
6d:bb:28:1b:2e:6e:f7:68:6e:a3:0f:31:c5:ab:d5:4a:80:75:
4a:b5:e0:c0:62:f9:7c:40:d6:0f:e2:02:9f:98:9a:12:7a:7f:
4d:a0:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:22:27 2025 by rpki-client