Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/JCvgCQmAxUvHaKWfrQ69OjxP_1k.roa
File: JCvgCQmAxUvHaKWfrQ69OjxP_1k.roa (raw, json)
Hash identifier: eTNm4kW9+Ldetf3s2iMc+2s6P2rbBNjPnSj7MkRXjqw=
Subject key identifier: 24:2B:E0:09:09:80:C5:4B:C7:68:A5:9F:AD:0E:BD:3A:3C:4F:FF:59
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 019808B7A141E5DDB9024D01E20C596565FE
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/JCvgCQmAxUvHaKWfrQ69OjxP_1k.roa
Signing time: Mon 14 Jul 2025 11:35:08 +0000
ROA not before: Mon 14 Jul 2025 11:35:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0a:c385::/32 maxlen: 32
2a11:5880::/32 maxlen: 32
2a11:6506::/32 maxlen: 32
2a11:7685::/32 maxlen: 32
2a11:8300::/32 maxlen: 32
2a11:b783::/32 maxlen: 32
2a11:be84::/32 maxlen: 32
2a11:c106::/32 maxlen: 32
2a11:c704::/32 maxlen: 32
2a11:cd00::/32 maxlen: 32
2a11:d084::/32 maxlen: 32
2a12:1942::/32 maxlen: 32
2a12:1cc3::/32 maxlen: 32
2a12:2c43::/32 maxlen: 32
2a12:3b40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 22 Jul 2025 19:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:b7:a1:41:e5:dd:b9:02:4d:01:e2:0c:59:65:65:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jul 14 11:35:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=242be0090980c54bc768a59fad0ebd3a3c4fff59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:7c:6a:7b:0b:4f:41:21:e0:a9:f8:79:7e:
c8:58:88:7f:8e:f6:4c:7f:b0:9d:89:7f:7c:2c:50:
c7:c3:87:99:97:dd:e0:1a:c8:cd:e7:36:7d:b0:56:
fc:52:22:ae:d1:ca:01:4f:21:1b:a9:03:74:dd:67:
17:a8:1a:66:04:64:39:d0:80:2a:a7:58:57:ab:40:
6f:e2:0c:8a:30:17:21:06:c8:19:a4:31:70:96:db:
d1:c3:b4:f8:78:61:4d:14:45:82:5a:4f:9d:0d:bf:
23:42:77:a2:1d:4a:9b:bd:9d:51:4b:72:6f:92:96:
d1:3e:88:64:97:a5:f8:f1:ac:ad:24:72:63:96:7b:
64:8f:9a:75:b3:68:07:14:a4:34:9d:94:a8:50:f2:
bc:e2:9a:f6:ed:b4:17:d8:c2:2f:9d:d8:d3:75:17:
d7:01:fb:fc:b4:ef:25:fa:a4:15:15:b7:5b:71:79:
6f:ec:d9:19:d1:93:3b:60:dd:99:9c:19:25:d7:59:
45:19:b1:bc:ce:0b:dc:c6:62:61:87:1b:22:3b:4e:
e2:33:58:94:47:1c:1f:86:f6:d7:54:c1:6c:7d:d0:
50:8b:4d:9c:3e:6d:0f:99:66:02:54:fc:40:d3:a5:
ef:6e:33:b9:e2:93:09:1b:f6:98:21:42:bd:85:04:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:E0:09:09:80:C5:4B:C7:68:A5:9F:AD:0E:BD:3A:3C:4F:FF:59
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/JCvgCQmAxUvHaKWfrQ69OjxP_1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c385::/32
2a11:5880::/32
2a11:6506::/32
2a11:7685::/32
2a11:8300::/32
2a11:b783::/32
2a11:be84::/32
2a11:c106::/32
2a11:c704::/32
2a11:cd00::/32
2a11:d084::/32
2a12:1942::/32
2a12:1cc3::/32
2a12:2c43::/32
2a12:3b40::/32
Signature Algorithm: sha256WithRSAEncryption
a1:38:c3:93:de:6b:69:6c:20:8e:a1:b5:b3:87:c4:0f:ea:21:
17:33:4b:05:fc:97:10:ab:99:21:35:85:a0:25:eb:c3:8c:0b:
69:84:31:8f:e8:f6:ce:2d:5f:76:a0:56:4f:5b:15:42:46:a4:
73:ee:a2:60:f6:96:15:a5:3b:8d:3d:65:70:76:d8:0a:09:c8:
61:73:6b:d4:45:52:bb:f8:cf:f2:f4:af:d0:74:3a:b5:35:1c:
32:31:f4:a9:83:d4:06:3d:bc:03:4d:ed:94:1c:d2:1b:0a:9d:
4f:85:56:ff:64:c8:a9:eb:ac:0d:55:93:1d:8f:f3:55:3b:8c:
57:72:29:82:4e:7a:af:e8:ed:98:aa:f6:91:b6:7b:86:0a:f0:
68:a1:4a:92:60:93:66:1f:5c:a3:59:91:ef:f8:c3:6a:d6:ab:
a1:50:45:95:3f:32:cc:04:c1:f2:2e:30:f0:ff:2c:11:cc:4b:
48:ec:e6:5d:37:3c:36:7d:ba:64:16:01:4d:6c:da:76:44:a3:
2e:2a:63:a1:3d:85:db:72:ab:f0:cd:c7:25:8d:0b:84:7e:59:
ce:ea:8a:e9:6c:61:25:d2:c2:49:2d:03:ec:4f:44:49:4d:39:
24:b0:5e:a7:6b:66:16:80:cc:48:e8:4c:f6:88:4e:fd:29:99:
02:3f:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:41:30 2025 by rpki-client