Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/3JgwDjesXzU59_YFdbIhbO6D--s.roa
File: 3JgwDjesXzU59_YFdbIhbO6D--s.roa (raw, json)
Hash identifier: c+L5OSd3jLac/RsTGrvD0+UXzmWjRH1vfSnPZqHDyno=
Subject key identifier: DC:98:30:0E:37:AC:5F:35:39:F7:F6:05:75:B2:21:6C:EE:83:FB:EB
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0197E5FEC606D20A10F396F97921A95DFEA4
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/3JgwDjesXzU59_YFdbIhbO6D--s.roa
Signing time: Mon 07 Jul 2025 17:46:08 +0000
ROA not before: Mon 07 Jul 2025 17:46:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a0a:c382::/32 maxlen: 32
2a11:5885::/32 maxlen: 32
2a11:5887::/32 maxlen: 32
2a11:be80::/32 maxlen: 32
2a11:be85::/32 maxlen: 32
2a11:c702::/32 maxlen: 32
2a11:c705::/32 maxlen: 32
2a12:1945::/32 maxlen: 32
2a12:1946::/32 maxlen: 32
2a12:2c44::/32 maxlen: 32
2a12:2c45::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Jul 2025 15:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:fe:c6:06:d2:0a:10:f3:96:f9:79:21:a9:5d:fe:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jul 7 17:46:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc98300e37ac5f3539f7f60575b2216cee83fbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:5e:65:b1:58:fc:e3:0a:94:cc:a9:73:e4:
66:3a:6f:ce:b3:be:04:9d:32:a6:f7:b9:bf:c2:e2:
41:f1:3f:c4:6e:02:9a:35:24:e5:a1:22:c3:29:d4:
a9:c4:57:c6:08:d9:d6:57:7c:28:03:a4:b0:2c:c5:
be:65:4e:0c:f8:75:dc:3a:24:4e:a9:40:42:52:64:
80:ec:bf:65:fb:98:c5:2a:c9:a9:0f:1b:22:32:72:
fb:5f:f6:64:d1:83:8e:69:5c:a1:76:96:b6:1f:19:
11:e6:ac:44:dc:90:0e:25:4c:d1:29:54:02:93:00:
49:0b:38:d1:64:be:47:81:11:15:80:17:3d:06:4a:
57:fd:c6:62:61:4b:57:c3:33:bc:18:fc:48:58:f0:
9c:b4:62:fb:fd:03:5b:c6:73:92:ee:fd:18:b5:a9:
9a:7a:35:5a:29:3a:e7:57:37:23:4e:42:87:8d:34:
a5:69:0f:08:39:da:88:c6:fa:b0:9f:bb:07:be:98:
99:42:46:5d:18:86:33:1b:a1:b6:82:0f:4f:5d:99:
e1:f8:69:4b:91:65:9b:f7:60:2f:15:38:05:6a:cc:
11:14:6a:b9:b2:dc:36:bf:7e:29:f1:0a:40:05:43:
53:ed:4c:47:b7:e3:a4:6b:f5:0e:92:9a:f9:29:41:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:30:0E:37:AC:5F:35:39:F7:F6:05:75:B2:21:6C:EE:83:FB:EB
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/3JgwDjesXzU59_YFdbIhbO6D--s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c382::/32
2a11:5885::/32
2a11:5887::/32
2a11:be80::/32
2a11:be85::/32
2a11:c702::/32
2a11:c705::/32
2a12:1945::-2a12:1946:ffff:ffff:ffff:ffff:ffff:ffff
2a12:2c44::/31
Signature Algorithm: sha256WithRSAEncryption
07:89:c7:1f:d3:40:56:4c:7d:e8:c1:a8:08:00:f1:05:e3:e5:
d2:8f:a1:09:bc:64:14:8e:e6:bf:4a:e8:6d:9d:bd:f3:22:1a:
30:48:07:41:52:c9:8d:75:64:0d:de:31:6f:42:b5:f5:da:c2:
f4:53:0f:d1:38:97:0f:8c:d2:61:29:61:22:03:71:aa:1e:32:
b0:f2:2a:30:2d:6a:a3:80:a7:78:c3:83:d5:a7:e3:02:10:38:
37:c1:95:4d:3c:bc:7f:d3:76:5b:99:6a:a0:8e:1a:bb:b5:1c:
8d:72:d7:8a:bd:62:d0:36:78:09:57:30:c0:e6:40:50:c1:77:
74:61:82:26:42:c5:91:53:1b:83:4f:03:f9:5b:9b:5e:9c:53:
6f:3c:0a:a1:d9:57:25:cc:19:6f:de:7a:09:18:f0:2f:05:ee:
c1:2b:1c:f7:b0:4b:78:2a:d8:19:ca:80:cc:76:be:69:95:2e:
e9:0f:4a:af:6c:fd:8a:e0:30:61:02:73:83:88:98:5b:05:25:
76:91:35:62:2d:fe:f9:70:45:f3:05:11:ae:a1:af:23:bf:a3:
f6:61:fd:fc:30:ed:00:77:51:96:c4:bd:da:6d:99:c0:0a:4c:
55:29:4a:26:61:1a:58:84:b5:af:ce:81:1d:20:be:eb:56:7b:
5b:b4:57:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:48:45 2025 by rpki-client