Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/AOHXm8mLbWA2LYGkMwS6DsM1b9g.roa
File: AOHXm8mLbWA2LYGkMwS6DsM1b9g.roa (raw, json)
Hash identifier: XnptQRxcUNqtzpPrahSemOpTnaydESjKCYEhVke/cfE=
Subject key identifier: 00:E1:D7:9B:C9:8B:6D:60:36:2D:81:A4:33:04:BA:0E:C3:35:6F:D8
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 01977E10E68901F42E3B320C5687C2B58C2F
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/AOHXm8mLbWA2LYGkMwS6DsM1b9g.roa
Signing time: Tue 17 Jun 2025 13:25:26 +0000
ROA not before: Tue 17 Jun 2025 13:25:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203062
IP address blocks: 2a06:2c80:1000::/36 maxlen: 48
2a06:2c80:4000::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Jun 2025 17:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:10:e6:89:01:f4:2e:3b:32:0c:56:87:c2:b5:8c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Jun 17 13:25:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00e1d79bc98b6d60362d81a43304ba0ec3356fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:54:38:15:43:e1:96:79:7a:65:eb:7e:06:
73:50:70:7c:9b:4e:af:90:0b:e7:1f:77:02:c9:20:
c2:71:56:22:0f:ff:8f:74:d1:23:4e:5b:7e:f9:dc:
bc:1a:a6:df:6f:c2:23:55:b0:35:f4:b4:b5:b2:cf:
9b:c2:7f:49:e6:72:37:b8:2b:6b:96:d1:a8:39:c2:
20:a7:41:bc:74:da:9f:b1:40:e3:1e:5d:8d:85:19:
69:96:3c:6e:13:ec:d1:72:67:02:23:2d:1d:b3:58:
92:07:45:8e:7f:76:38:14:2a:b8:0b:f7:b0:74:99:
2c:a9:5e:50:dd:ab:88:53:7c:a5:20:4f:27:45:b4:
6e:05:6a:ce:74:14:9b:e2:48:bc:25:c7:8f:8d:e3:
7a:3a:ae:39:d5:9a:8d:f1:53:b7:91:cf:cf:48:68:
d3:d7:84:8b:05:78:71:6f:cb:c2:56:16:cd:b5:f4:
43:6f:37:71:b2:65:ef:dc:59:4a:1a:c9:bf:09:c7:
0d:e5:13:9a:dc:9b:79:bf:7a:5a:b7:75:8b:c2:e8:
af:af:91:02:64:f1:22:40:a0:24:55:40:c0:35:78:
d6:6f:77:4e:10:12:ba:9d:e2:25:13:5f:c3:b4:69:
80:81:3a:d4:56:2b:38:53:07:9c:97:37:0f:f0:04:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:D7:9B:C9:8B:6D:60:36:2D:81:A4:33:04:BA:0E:C3:35:6F:D8
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/AOHXm8mLbWA2LYGkMwS6DsM1b9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2c80:1000::/36
2a06:2c80:4000::/36
Signature Algorithm: sha256WithRSAEncryption
71:ef:4f:ce:cc:e0:c9:03:81:36:4c:59:db:fa:8a:e6:1a:d7:
97:fd:a3:59:34:b7:bf:b3:e5:1d:ff:a3:b8:8e:15:94:45:2d:
2f:5d:18:b7:68:d3:7e:97:0d:04:92:05:36:c9:63:78:4c:bc:
d6:18:65:df:4c:d0:a3:a9:c9:ba:87:2f:af:3d:a1:65:d2:f5:
37:e7:e0:db:be:bf:b1:d5:8e:8c:cc:99:23:43:60:ff:58:4c:
69:41:f1:0e:e7:a5:37:30:cb:ee:0d:ab:a2:55:69:ee:19:a6:
69:7d:7a:c7:b0:6d:95:4f:1a:51:46:f3:1a:04:67:5a:57:9f:
15:e0:f1:ab:19:0d:8a:75:c4:4a:fa:a5:f4:d8:de:80:7e:4e:
97:16:85:71:ad:23:52:8d:b7:83:06:fe:3a:7f:34:75:b6:a1:
2d:f9:36:dc:dc:d6:29:44:e9:fe:81:0e:08:e1:52:25:c3:60:
5f:13:14:ba:f4:0a:29:d7:07:89:f1:9a:f7:13:0c:3d:5b:57:
42:aa:c4:ac:65:06:e8:c1:21:0a:19:1f:98:11:7f:41:7c:ae:
fc:7b:cf:07:30:6a:a0:01:20:54:22:5c:9b:88:cf:43:1c:0a:
82:61:58:e0:68:f3:e9:16:63:1c:1e:9d:ca:44:18:79:9a:04:
c5:92:b5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 23:58:05 2025 by rpki-client