Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/p-us93WVGf7iGWX1HW0LjTQGnUI.roa
File: p-us93WVGf7iGWX1HW0LjTQGnUI.roa (raw, json)
Hash identifier: 8i4UjqX6P9R++Z/CJvmJGoBD+Pgs+V3ZtKX+aTSMsKo=
Subject key identifier: A7:EB:AC:F7:75:95:19:FE:E2:19:65:F5:1D:6D:0B:8D:34:06:9D:42
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01980E6BE508B8BB1A5C8595F175E901FB5D
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/p-us93WVGf7iGWX1HW0LjTQGnUI.roa
Signing time: Tue 15 Jul 2025 14:10:08 +0000
ROA not before: Tue 15 Jul 2025 14:10:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198767
IP address blocks: 2a03:5840:f6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Jul 2025 16:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:6b:e5:08:b8:bb:1a:5c:85:95:f1:75:e9:01:fb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 15 14:10:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ebacf7759519fee21965f51d6d0b8d34069d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:c9:33:0f:2e:79:ed:85:d6:f3:16:38:3a:
70:57:e9:be:c3:e0:c9:fc:ef:2f:5b:01:6f:89:15:
ef:c4:c3:26:dd:9b:02:44:33:a2:4a:5b:99:50:6a:
86:c0:1c:84:4a:dc:c2:90:39:e7:18:bc:35:eb:7d:
ff:d2:77:a1:82:c4:4b:be:f9:55:66:a5:0e:8e:48:
a7:0c:2f:d2:81:fa:50:5f:4b:bf:9d:79:3c:9a:df:
e0:ac:08:f0:54:4c:d7:e9:f5:0b:a9:e3:92:9e:6c:
3c:32:52:d5:da:eb:da:f0:81:ae:c0:9b:93:6e:6f:
f8:ba:b4:c3:8f:2e:7e:c2:62:fb:0f:f8:a9:cb:42:
95:95:f3:aa:96:7f:4a:be:95:bd:da:22:53:5a:9c:
e6:ca:43:17:93:36:e6:28:4b:ed:94:83:81:e3:e0:
c5:ea:aa:6b:57:93:ea:a5:69:6f:8c:41:a1:ba:85:
13:65:a0:d5:6a:ec:0f:30:43:6d:c4:f0:c9:ad:84:
9e:65:dc:2f:47:09:9e:34:1a:d8:c7:02:69:60:65:
3c:01:52:e0:24:6c:ae:77:8f:77:5a:47:06:d4:31:
bf:96:82:78:11:c3:2c:4a:38:7f:b0:44:56:8b:d8:
2c:ec:c8:cc:e7:da:1a:f3:03:9b:9a:1d:db:41:5e:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:AC:F7:75:95:19:FE:E2:19:65:F5:1D:6D:0B:8D:34:06:9D:42
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/p-us93WVGf7iGWX1HW0LjTQGnUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f6::/48
Signature Algorithm: sha256WithRSAEncryption
55:5e:13:ae:1e:c1:ce:53:db:48:9f:9f:e3:a3:ef:f5:ef:1f:
b3:de:de:8e:68:27:78:df:9f:e8:c6:e9:a4:14:1f:16:08:82:
c9:cc:a2:69:ee:c8:ff:c4:dc:25:15:e4:4f:09:98:f2:c2:37:
24:e5:d7:d5:a1:91:ca:fb:53:fd:ab:bd:2a:62:e4:3b:ea:79:
a5:6e:5a:ee:5e:99:ed:75:17:96:9f:ef:1d:c1:30:97:31:a5:
d9:d8:46:ed:ed:21:04:05:00:63:b0:cc:80:67:81:39:9f:b7:
a4:3b:bc:47:56:b9:20:79:af:3b:f2:b8:7c:43:3e:fb:4d:c9:
03:5c:01:9b:67:b7:21:5f:4c:7d:8a:1a:9a:a7:27:91:d0:da:
44:23:21:c1:8d:6d:45:42:a5:98:a3:4e:d7:13:1b:8d:cd:c0:
53:33:ee:20:19:13:7e:c2:65:ae:54:2e:c0:40:a0:89:0f:c9:
da:83:83:80:11:a6:9a:ad:d2:61:d2:fd:04:df:da:31:12:fa:
ad:9b:03:09:77:02:f9:56:de:3e:2f:d4:28:cf:7a:fc:15:78:
72:0b:95:88:27:f9:b9:4e:db:30:03:99:cd:96:ac:5d:8f:41:
a9:31:fd:3a:7f:49:85:d6:c6:a2:44:6a:0c:45:04:23:03:53:
ac:4a:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:42:41 2025 by rpki-client