Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1fJsZCwpkhBZPZY5YNil40cfi0E.roa
File: 1fJsZCwpkhBZPZY5YNil40cfi0E.roa (raw, json)
Hash identifier: UFzEE+DaSJJ95KK+q0cXAYDkSDxDkd3/JnE91MpmHg8=
Subject key identifier: D5:F2:6C:64:2C:29:92:10:59:3D:96:39:60:D8:A5:E3:47:1F:8B:41
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0198195AECCF660D09DE93FC17A611D5ABC3
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1fJsZCwpkhBZPZY5YNil40cfi0E.roa
Signing time: Thu 17 Jul 2025 17:07:25 +0000
ROA not before: Thu 17 Jul 2025 17:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214168
IP address blocks: 2a11:4540::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a12:d40::/29 maxlen: 29
2a12:8580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 21 Jul 2025 17:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:5a:ec:cf:66:0d:09:de:93:fc:17:a6:11:d5:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 17 17:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5f26c642c299210593d963960d8a5e3471f8b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:18:90:1f:e3:1f:d9:12:5c:24:72:e1:94:
aa:9b:de:cb:36:9a:6b:6f:2c:68:6f:0e:d5:6d:e3:
a0:dd:3b:80:b1:10:30:94:fe:a9:ae:fd:f7:ba:4f:
6b:ee:28:c8:88:e2:61:7e:34:76:dc:a0:14:39:fa:
dc:39:1e:33:3d:73:5c:41:ab:9d:38:a1:7b:42:27:
7e:49:2e:48:fa:22:58:bf:61:5b:4d:71:5a:c3:fc:
ad:dc:6e:9c:16:71:b6:dd:c9:5f:30:ed:a7:d3:9f:
7a:a9:0b:a9:01:0a:e9:a0:70:d9:c2:ea:df:3d:34:
46:4d:c7:4c:a5:5b:52:63:24:68:c4:da:25:c1:83:
37:39:9f:89:d0:5d:d5:00:57:c9:67:c3:b5:ef:ef:
f8:91:cd:e7:1e:69:fd:64:3f:a6:e6:11:8d:69:0f:
8e:32:12:c8:33:d8:86:80:e2:c5:0e:d4:ac:0c:90:
5b:4c:13:b2:58:7c:f1:18:8e:8c:ef:60:b9:9c:26:
63:b4:29:c5:1e:fc:46:67:b9:d6:c8:32:f9:a9:01:
03:ba:40:72:c7:e4:42:8c:1a:6f:1e:56:3d:b7:3b:
09:fb:74:64:be:3f:00:30:86:0d:86:47:b0:5a:5c:
36:86:2c:fd:03:33:d1:1c:a6:cd:fa:1e:64:8b:a5:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F2:6C:64:2C:29:92:10:59:3D:96:39:60:D8:A5:E3:47:1F:8B:41
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1fJsZCwpkhBZPZY5YNil40cfi0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4540::/29
2a11:8740::/29
2a11:bbc0::/29
2a12:d40::/29
2a12:8580::/29
Signature Algorithm: sha256WithRSAEncryption
37:23:ec:52:9e:71:98:2a:24:bc:d7:d7:27:8d:94:22:65:5b:
9f:c1:e3:8a:0b:21:b3:f2:66:a0:7f:89:05:be:8a:c5:f0:f7:
46:79:06:6b:f9:93:56:c2:50:2c:94:5a:58:09:4c:4e:d2:a2:
99:31:c5:29:d5:f0:43:a7:c9:7a:2b:10:26:1f:fd:7f:4e:96:
20:33:5d:26:db:4c:4a:72:9d:09:75:d2:ea:00:44:84:95:94:
bb:32:54:72:d8:d5:3e:b0:41:29:e3:d6:9f:35:e8:1d:a0:aa:
76:dd:8c:af:dd:d8:25:11:3a:c8:15:90:56:cf:95:ee:a8:71:
58:ae:36:b7:ba:3e:d6:62:31:6c:cb:8a:6a:d1:0a:ab:b0:50:
61:84:05:e9:8e:96:97:f7:a8:b9:a8:0f:19:6e:5d:ec:f2:09:
1c:ea:56:2d:c4:7d:19:d5:fb:8a:de:5b:59:2e:80:8b:52:0b:
75:fd:9b:6b:b8:35:cb:d0:88:6e:61:60:40:75:f5:a6:ca:e6:
14:b8:f2:28:69:0b:a7:53:3a:49:01:34:26:51:dd:9c:28:c0:
6e:7c:63:86:21:3e:51:31:72:a8:cc:8e:45:81:80:bd:b1:11:
e5:74:c6:01:d3:68:11:d8:3f:be:f2:d4:29:ca:4d:ab:cb:28:
2b:de:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:24:17 2025 by rpki-client