Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/EvWzXfyOw4Q-lvjJE-ox7mradAQ.roa
File: EvWzXfyOw4Q-lvjJE-ox7mradAQ.roa (raw, json)
Hash identifier: WmwZbmhJPdDiKZ9qrKGoDqs1aukRyMjQoEF16p65gM0=
Subject key identifier: 12:F5:B3:5D:FC:8E:C3:84:3E:96:F8:C9:13:EA:31:EE:6A:DA:74:04
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 01980DB2F5502111DCE073F7235CAD41EEB9
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/EvWzXfyOw4Q-lvjJE-ox7mradAQ.roa
Signing time: Tue 15 Jul 2025 10:48:08 +0000
ROA not before: Tue 15 Jul 2025 10:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a02:ed1:ee::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Jul 2025 07:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:b2:f5:50:21:11:dc:e0:73:f7:23:5c:ad:41:ee:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Jul 15 10:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12f5b35dfc8ec3843e96f8c913ea31ee6ada7404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:9d:c7:81:71:c3:76:4a:af:dd:a8:99:d7:
64:e5:89:2e:6c:9d:00:3a:27:cc:10:06:e5:45:d0:
16:0d:c5:08:da:6f:6b:fe:2c:9e:a6:be:c9:3f:99:
c8:50:3d:d7:83:57:24:ac:ca:9a:06:66:98:92:de:
f2:37:d8:ae:0a:cb:d7:80:5f:58:80:bf:7f:11:20:
cf:94:77:48:14:a4:cb:4d:7e:6c:39:83:c9:78:d1:
77:57:19:4a:01:79:90:7a:00:b9:97:45:31:98:36:
69:78:a5:97:d3:27:57:bc:23:a5:d0:8b:a6:ed:a5:
94:8c:41:a9:60:62:50:2f:92:d5:24:25:66:c7:96:
84:93:b3:89:2a:70:2f:44:c1:ca:b0:ab:7b:ce:29:
e5:62:30:a3:2d:b7:75:24:66:1c:b7:fc:5b:2d:3a:
41:c5:84:49:38:93:c4:73:f1:ff:61:ad:23:22:76:
fa:c8:37:b1:e9:55:b7:23:c1:95:75:d0:7e:b9:9a:
64:83:61:90:11:2e:ef:f0:08:9f:d1:ed:01:9c:22:
4f:2a:39:bb:c6:ce:58:e7:3b:ed:08:b8:7e:7d:9b:
de:b2:57:b1:35:ec:24:6b:44:da:f3:9f:88:ab:86:
7a:a4:a0:07:83:7a:c0:0b:54:c9:96:7e:d2:2c:5a:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F5:B3:5D:FC:8E:C3:84:3E:96:F8:C9:13:EA:31:EE:6A:DA:74:04
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/EvWzXfyOw4Q-lvjJE-ox7mradAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ed1:ee::/48
Signature Algorithm: sha256WithRSAEncryption
bd:3f:f5:99:8d:46:2f:c9:b2:d4:84:dc:16:c6:50:2a:e3:8e:
1c:0f:26:c6:d7:22:f8:88:32:70:5c:43:91:30:ab:ac:97:f1:
88:8d:c6:d9:ee:c7:65:88:dc:65:80:e3:b9:c3:0f:69:ad:8d:
6e:6d:65:99:e9:f3:30:4a:37:a6:36:91:bb:4d:11:38:12:b2:
35:a6:d1:ad:89:7d:5f:b5:d8:00:ff:bc:17:bd:eb:b6:45:a4:
76:47:27:f3:33:9d:85:4e:e3:e2:b9:18:5f:21:d9:3c:08:91:
f0:87:aa:d7:71:df:6b:85:d5:b5:ff:ee:07:cb:44:5f:04:be:
b2:0f:df:6d:cd:42:3d:a5:21:d5:98:01:8b:0f:92:c7:1b:1c:
4e:b0:a4:26:21:03:c2:b5:3c:24:9b:ae:d1:9e:b9:cb:41:39:
6e:e3:d4:61:6a:30:f7:be:df:b4:e6:e6:55:eb:7a:ec:9d:dc:
d9:a7:03:69:dd:27:e4:8b:80:99:33:60:09:06:d3:6b:e3:1a:
a1:51:9f:7d:60:c4:bb:60:82:7e:70:63:09:30:8d:6c:62:d6:
be:3c:b2:a9:64:f9:c4:c3:82:92:bf:e5:9a:e2:90:c6:46:86:
5e:5b:29:c1:3a:0b:e2:db:b1:48:15:1d:a8:53:f6:88:05:0b:
05:d3:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:45:15 2025 by rpki-client