Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/72vCw2Kj7tk5rHSWA6pSIMB90zM.roa
File: 72vCw2Kj7tk5rHSWA6pSIMB90zM.roa (raw, json)
Hash identifier: 1xw76YEYdlrGb8hcG9AgIG4JIFyioJPgneOMQrU4u0w=
Subject key identifier: EF:6B:C2:C3:62:A3:EE:D9:39:AC:74:96:03:AA:52:20:C0:7D:D3:33
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 0197E53A75605744D4FA92433B8CE81D2730
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/72vCw2Kj7tk5rHSWA6pSIMB90zM.roa
Signing time: Mon 07 Jul 2025 14:11:42 +0000
ROA not before: Mon 07 Jul 2025 14:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216157
IP address blocks: 2a0d:f40::/29 maxlen: 29
2a13:92c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Jul 2025 14:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:3a:75:60:57:44:d4:fa:92:43:3b:8c:e8:1d:27:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jul 7 14:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef6bc2c362a3eed939ac749603aa5220c07dd333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:0b:6f:dc:18:93:65:68:de:0d:87:b4:82:
78:03:d5:0e:35:6d:f7:b0:e7:45:a8:26:19:6d:21:
f0:d6:c4:e1:c4:ab:14:b0:aa:e4:bc:fe:7a:64:39:
21:78:99:3d:13:28:aa:a9:7c:48:ab:93:82:60:33:
0e:84:4e:c0:b5:7e:97:23:38:a7:c9:e7:07:ea:f3:
4d:19:a6:d1:49:8c:a1:2d:d5:bc:f8:b8:f2:45:a4:
89:9d:46:25:90:38:18:94:a7:8d:fa:5a:b0:5b:9d:
64:15:04:02:62:10:8b:a9:2e:87:b4:7a:32:2e:f5:
c8:12:48:22:fc:47:fb:7e:a4:6e:49:f8:af:b2:66:
72:c4:03:08:f4:6e:a0:04:4e:c0:60:a2:76:3d:8f:
fe:64:d3:b6:ed:fe:b7:d3:7c:99:c6:5e:16:36:68:
a6:4a:9f:e1:67:45:a1:92:22:0b:30:57:eb:2c:46:
a7:ce:fb:80:99:c2:9d:3f:65:ea:b4:19:b7:f1:74:
eb:08:48:1a:0b:db:38:e0:92:1c:7a:17:35:9a:3f:
09:64:44:8f:55:f0:8d:04:4d:b4:46:94:3d:31:85:
f3:76:17:bc:90:74:00:67:87:01:cd:c9:84:03:3f:
c9:69:4e:d3:e4:49:63:fc:f3:bd:72:a6:78:fb:26:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6B:C2:C3:62:A3:EE:D9:39:AC:74:96:03:AA:52:20:C0:7D:D3:33
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/72vCw2Kj7tk5rHSWA6pSIMB90zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f40::/29
2a13:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:d0:03:c5:23:0a:8f:d1:85:d3:fa:38:6a:01:08:f0:7c:30:
81:95:24:1b:d8:06:7f:3d:a2:ad:ec:0a:a2:6e:f4:c5:56:0f:
f3:af:44:6f:b5:69:e0:fe:eb:03:cc:fe:aa:15:f5:77:4f:c9:
fd:bd:15:89:55:d1:f0:46:a5:20:03:fd:6d:58:a1:69:64:b8:
07:45:b6:0b:03:ed:a9:16:01:b7:c8:38:96:48:58:96:64:03:
b5:13:be:59:9a:7f:b6:e6:ad:70:b2:c5:dd:1e:37:18:05:dc:
87:ea:d3:a3:56:b6:01:1a:4e:30:77:af:b5:04:5c:8e:7c:82:
e0:8d:5c:ea:bf:a2:98:7e:9e:9b:06:97:4f:ca:e7:23:dd:e3:
9c:42:a1:e4:67:31:41:f2:c4:8a:ea:56:ec:e0:6d:66:a5:e2:
3b:49:52:04:a1:80:8b:f1:e0:05:68:a0:12:73:cf:ad:4c:7c:
6f:a2:31:59:58:de:67:31:69:3e:4d:03:8a:7d:51:38:7e:9d:
e9:eb:01:6d:de:75:3d:42:15:6c:51:25:3b:e4:c9:8e:3c:e6:
fe:5f:d4:0c:b2:ca:2c:f0:50:92:6f:f1:44:d3:b1:1e:cc:84:
31:77:33:c1:61:52:d0:fd:88:25:ec:a0:a9:b5:d6:23:3e:39:
bc:77:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:26 2025 by rpki-client