Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/8jRVLJbqN_AHoa6Fw1MEieKUKoI.roa
File: 8jRVLJbqN_AHoa6Fw1MEieKUKoI.roa (raw, json)
Hash identifier: JH/os1715+clLdh2QhhkHWdihfkum4Beh2/BuLmebNY=
Subject key identifier: F2:34:55:2C:96:EA:37:F0:07:A1:AE:85:C3:53:04:89:E2:94:2A:82
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0197E5FDDC1B3D88A55B1FA375E8AD103B4F
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/8jRVLJbqN_AHoa6Fw1MEieKUKoI.roa
Signing time: Mon 07 Jul 2025 17:45:08 +0000
ROA not before: Mon 07 Jul 2025 17:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211009
IP address blocks: 2a0a:c380::/32 maxlen: 32
2a11:be83::/32 maxlen: 32
2a11:c700::/32 maxlen: 32
2a12:1947::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 08 Jul 2025 18:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:fd:dc:1b:3d:88:a5:5b:1f:a3:75:e8:ad:10:3b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jul 7 17:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f234552c96ea37f007a1ae85c3530489e2942a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:40:67:88:28:c5:cc:6e:a4:c3:f3:33:e1:
16:12:c7:6f:f5:b9:8d:4c:ae:53:78:86:29:69:96:
16:0f:6c:61:43:c4:da:02:99:f5:7c:50:13:65:a9:
68:c4:48:92:4f:b2:27:6d:da:bb:01:0b:80:c4:83:
27:50:0c:eb:1a:ea:46:26:10:c8:b3:27:30:0e:bb:
9a:6c:b2:f3:99:85:b7:be:89:54:10:cb:f7:cb:73:
dd:01:96:cb:57:ba:85:c3:ac:a0:58:f8:25:e2:ac:
03:9b:09:93:3f:44:61:09:9a:82:33:38:4f:f3:d1:
4d:a1:d5:34:c8:9d:8e:0b:7f:fa:75:54:3f:0b:61:
3b:9b:b1:6e:31:26:e0:7c:1b:f5:9c:2f:1d:58:0b:
98:5c:b5:a1:9e:b5:6b:31:33:e3:31:77:dc:16:36:
e1:b3:33:49:9d:73:a4:17:6f:74:be:a5:f0:e2:e4:
a4:55:30:72:8f:1a:10:4d:36:7a:2f:cb:d0:ba:99:
95:44:23:39:eb:7e:3b:70:c4:0e:01:be:c1:ef:2f:
e9:19:b0:89:ba:a6:a1:7a:d2:c9:51:ec:98:1d:52:
eb:82:a2:7a:23:f8:c0:24:18:2c:6f:7a:bd:43:52:
29:79:ca:10:16:d4:ca:19:52:db:ef:2f:c0:a4:09:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:55:2C:96:EA:37:F0:07:A1:AE:85:C3:53:04:89:E2:94:2A:82
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/8jRVLJbqN_AHoa6Fw1MEieKUKoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c380::/32
2a11:be83::/32
2a11:c700::/32
2a12:1947::/32
Signature Algorithm: sha256WithRSAEncryption
dd:23:b9:bd:c9:ae:1e:99:46:6a:92:5b:f8:8f:5b:2e:ad:37:
70:e8:1d:00:fb:c7:9a:fa:dd:1d:6c:b6:54:2f:e5:a9:02:6f:
94:e6:85:b5:c4:f3:32:4a:ef:1b:a2:1c:6c:31:b8:c6:8e:79:
ea:5a:2a:2b:0e:32:e9:a1:a7:3e:34:78:e1:8a:a6:7e:32:93:
e1:20:80:f3:b7:8a:cc:39:83:31:4e:80:cb:8f:bc:17:ae:a1:
3e:fb:36:20:01:75:fe:1e:46:be:1f:47:73:92:35:8d:eb:67:
04:14:9e:be:d2:2e:b6:ae:8f:6e:86:2c:41:52:78:74:15:5e:
17:81:fe:48:01:b4:0b:a0:8b:98:2a:e0:b6:f6:77:d4:89:31:
ef:0c:63:f5:9c:96:84:a9:ac:3b:3a:75:42:9c:3c:2a:a7:cc:
30:92:9e:6c:ec:59:69:1b:55:84:9d:ff:28:f7:2a:be:fc:b9:
72:de:88:91:3b:08:52:8a:2a:18:66:34:88:b4:08:39:ce:8d:
95:45:8d:24:ce:ad:93:4e:b3:3b:e0:4c:aa:8e:65:63:97:9d:
43:8b:11:d3:6a:24:db:0a:4d:6e:51:1a:d8:fc:a1:7a:24:95:
87:47:09:c1:95:e2:f5:0a:9d:e6:cb:9d:75:4b:28:56:27:dc:
ae:3f:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:52:12 2025 by rpki-client