Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SWwugRrD8V4e9CxLMHcIuADNA6k.roa
File: SWwugRrD8V4e9CxLMHcIuADNA6k.roa (raw, json)
Hash identifier: 3elGhALnSsKu+uFPhGRot8mHnKlSamz3Ph5B3nmbHZk=
Subject key identifier: 49:6C:2E:81:1A:C3:F1:5E:1E:F4:2C:4B:30:77:08:B8:00:CD:03:A9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0197C34A2C9532B8D16C4A0FD90F9A87390F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SWwugRrD8V4e9CxLMHcIuADNA6k.roa
Signing time: Tue 01 Jul 2025 00:01:47 +0000
ROA not before: Tue 01 Jul 2025 00:01:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62513
IP address blocks: 2a0f:b240::/46 maxlen: 48
2a0f:b241:8::/46 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Jul 2025 15:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:4a:2c:95:32:b8:d1:6c:4a:0f:d9:0f:9a:87:39:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jul 1 00:01:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=496c2e811ac3f15e1ef42c4b307708b800cd03a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:9d:05:0e:08:c2:f2:e4:46:4a:f6:18:89:
a2:0d:ba:4e:ef:b1:64:e4:58:fc:d5:b7:ff:0c:c1:
63:88:6d:78:c4:1e:ed:cd:b8:e4:b2:aa:e0:ef:ce:
07:ac:d5:eb:ba:bc:fa:13:4c:30:3a:3a:54:15:19:
6d:13:79:f4:ef:9d:f5:be:23:85:a1:ab:c8:4a:b8:
d5:9f:ea:b2:17:98:20:fe:c4:78:b1:7f:be:b2:91:
e8:cb:93:6a:59:05:25:e2:24:8e:68:70:71:4f:46:
04:e9:13:5e:a3:0b:f7:5c:4a:2a:26:3e:98:58:04:
a3:e5:3c:c6:83:4f:52:d2:cf:fa:80:a7:19:f4:82:
b5:f3:5f:a0:c2:82:70:ff:98:49:a3:06:ac:a9:e0:
2e:48:6c:18:94:da:a3:9c:fc:2d:b6:30:96:cf:b6:
bd:75:63:a2:34:a4:8e:36:cf:95:4b:6b:6f:7c:8c:
63:31:35:06:5f:e0:81:5a:5c:66:e6:ec:25:11:91:
f1:ca:fb:6e:9b:57:65:d2:25:0c:d3:68:10:82:c1:
fb:0c:68:df:ee:62:58:e4:b8:7a:e0:01:ed:0b:e4:
c5:33:a2:3f:7c:5d:d7:18:1b:57:da:81:6b:14:c8:
19:24:68:73:2c:d4:05:92:3a:6d:80:aa:c9:d8:89:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6C:2E:81:1A:C3:F1:5E:1E:F4:2C:4B:30:77:08:B8:00:CD:03:A9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SWwugRrD8V4e9CxLMHcIuADNA6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240::/46
2a0f:b241:8::/46
Signature Algorithm: sha256WithRSAEncryption
8e:e8:d8:b3:ba:07:d4:1e:dc:dc:43:2d:d0:5e:36:b9:40:06:
e9:f9:38:69:48:b2:71:7d:44:6d:38:6e:53:6e:54:88:1c:5b:
68:5c:5a:64:a0:c0:13:d6:58:81:6a:ac:3e:aa:48:5e:84:32:
8b:c2:ee:e3:99:e5:cd:11:3d:0d:53:82:15:be:b5:4d:79:6f:
4e:ba:73:fa:03:cc:ca:c0:3f:9b:cc:73:e6:5d:7d:50:e8:51:
57:8e:ea:e5:4f:bc:64:4e:d8:f0:66:bf:46:d9:5e:cd:1c:21:
a5:1b:f1:b3:5e:8d:86:09:6c:e3:06:92:77:8e:f5:2f:41:53:
d6:b9:1c:41:0b:49:21:92:2b:7e:54:04:ad:2d:6a:9c:d8:90:
ba:45:be:61:67:50:c3:1e:a9:f1:cf:a6:4a:8e:f6:db:5b:79:
ce:ca:61:da:04:de:05:6f:54:c0:95:74:4e:59:4d:e4:c0:9e:
ec:82:74:a4:2e:32:1e:b3:29:65:6a:26:49:30:e5:a2:a2:8c:
b4:76:1f:2c:13:b2:77:e1:19:dc:81:a7:75:e4:ff:9a:82:f5:
1c:98:c9:5b:64:54:8a:dc:e8:96:9e:6e:ef:bc:65:5b:bd:3b:
c7:fb:eb:ac:3b:c6:0b:f4:fe:34:1e:53:27:bb:80:0c:ce:82:
13:e0:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:52 2025 by rpki-client