Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/bKk4aSdSdAE_pXuDX_RmhiUXqYQ.roa
File: bKk4aSdSdAE_pXuDX_RmhiUXqYQ.roa (raw, json)
Hash identifier: syAB2kpgPHO+2pI6NbMO+nGTNsKQjg9iuheIlRvPMOA=
Subject key identifier: 6C:A9:38:69:27:52:74:01:3F:A5:7B:83:5F:F4:66:86:25:17:A9:84
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01980E6BE985435377E9C8206FBEA8239651
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/bKk4aSdSdAE_pXuDX_RmhiUXqYQ.roa
Signing time: Tue 15 Jul 2025 14:10:09 +0000
ROA not before: Tue 15 Jul 2025 14:10:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214783
IP address blocks: 2a03:5840:11a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Jul 2025 11:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:6b:e9:85:43:53:77:e9:c8:20:6f:be:a8:23:96:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 15 14:10:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ca93869275274013fa57b835ff466862517a984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0c:77:3b:d7:28:f1:1e:42:77:e3:b9:8e:27:
2c:62:b6:bd:24:e4:7a:e9:24:df:1c:9b:63:9b:99:
0a:60:ac:97:93:76:cd:20:89:ba:d8:1b:14:ec:f3:
27:47:dd:9f:55:db:1b:23:ae:98:12:0b:41:44:d0:
80:e5:cf:60:f3:fa:88:52:1c:b7:33:86:d0:39:07:
34:7a:3c:06:f7:a1:1a:0b:b0:8a:c1:88:e5:49:ad:
61:76:b2:7c:28:b3:f1:f6:76:43:81:d1:d2:7f:0d:
8c:03:b6:93:0c:b7:2b:5d:3e:70:13:f8:99:77:1a:
49:6c:92:7f:22:f3:30:fb:bc:3b:e3:41:12:38:f0:
13:d1:da:e6:ff:59:0b:70:18:d8:65:fc:66:69:3b:
89:10:27:c8:45:83:40:d0:b6:32:6f:20:09:ea:1e:
00:12:86:57:cb:3c:b7:6d:24:38:96:e1:e2:62:39:
fc:05:e2:fe:33:b5:e8:f9:f6:31:e8:0a:e7:4c:25:
f2:d7:f8:ec:1f:03:cb:8f:0e:d3:60:36:11:be:04:
b3:e9:b1:6c:c5:be:d0:66:87:d4:05:4d:c9:d9:8d:
bb:9e:f5:6b:66:ce:23:ef:61:94:2d:dd:21:2f:26:
a0:8e:17:f9:d6:c9:51:a2:a4:37:ee:42:d1:52:12:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:38:69:27:52:74:01:3F:A5:7B:83:5F:F4:66:86:25:17:A9:84
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/bKk4aSdSdAE_pXuDX_RmhiUXqYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:11a::/48
Signature Algorithm: sha256WithRSAEncryption
62:65:14:cb:0a:4a:e8:86:29:71:57:78:c8:8a:23:ee:df:e0:
d2:28:ae:79:a6:ff:ab:a9:22:fe:0b:dc:de:91:3b:f7:de:c8:
7e:79:88:47:53:85:5d:f8:0a:79:b3:d4:db:46:2f:ff:05:cf:
dd:ca:f5:21:b0:62:55:9b:90:e8:93:3a:40:c3:2a:e7:b8:0f:
2d:f4:59:9f:3b:a4:00:39:c9:81:8f:fb:38:b5:91:b4:04:e6:
87:22:a0:5c:33:77:ae:8a:cd:d2:c9:78:6a:3b:c0:bc:9e:e5:
74:5f:15:b2:06:8a:37:03:3b:8b:a3:8b:4b:e9:5e:16:26:e4:
ab:28:be:2c:7e:bb:0e:ab:e4:82:81:10:4b:b0:a5:6b:0a:67:
34:ba:4f:ed:62:f2:76:30:03:19:fa:2c:58:1e:ee:85:1a:33:
2a:55:e2:53:99:6e:a4:a1:92:42:87:33:b0:2f:db:2d:c3:fb:
48:60:06:93:1b:88:31:53:ee:d4:4e:7f:3c:48:46:32:02:2d:
42:9d:96:27:da:6c:3d:f7:60:a0:a3:2f:c3:75:6a:5f:a0:8c:
7f:e2:3a:f1:71:57:aa:fb:11:47:d5:57:51:63:c7:40:d4:58:
4c:c7:76:de:42:76:96:05:1d:78:2e:62:4e:01:0f:7a:fa:61:
60:8a:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:49:50 2025 by rpki-client