Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/PxE6g0iO6dUNgoXIDuByT54jN_w.roa
File: PxE6g0iO6dUNgoXIDuByT54jN_w.roa (raw, json)
Hash identifier: Zjl437z1tSScDFClXAbFKqwFLitU9G7UlFzK1pfU7X0=
Subject key identifier: 3F:11:3A:83:48:8E:E9:D5:0D:82:85:C8:0E:E0:72:4F:9E:23:37:FC
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0197EB3B1C427F6123D54777AF2F34C03B0E
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/PxE6g0iO6dUNgoXIDuByT54jN_w.roa
Signing time: Tue 08 Jul 2025 18:10:08 +0000
ROA not before: Tue 08 Jul 2025 18:10:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211009
IP address blocks: 2a0a:c380::/32 maxlen: 32
2a11:be83::/32 maxlen: 32
2a11:c700::/32 maxlen: 32
2a12:10c0::/29 maxlen: 29
2a12:15c0::/29 maxlen: 29
2a12:1947::/32 maxlen: 32
2a12:25c0::/29 maxlen: 29
2a12:34c0::/29 maxlen: 29
2a12:4240::/29 maxlen: 29
2a12:7980::/29 maxlen: 29
2a12:c180::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 14 Jul 2025 17:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:eb:3b:1c:42:7f:61:23:d5:47:77:af:2f:34:c0:3b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jul 8 18:10:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f113a83488ee9d50d8285c80ee0724f9e2337fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:17:dc:e2:f8:d7:2a:8d:9d:2b:a3:51:71:
b7:37:0b:f2:c0:7c:d4:0c:af:43:7a:66:8d:19:02:
ce:18:e3:9d:ce:c8:eb:99:6e:da:ec:86:82:5c:3e:
19:c1:d1:cf:69:8e:39:a0:af:1c:f6:02:7d:50:ff:
96:67:ea:c4:bb:25:77:59:47:af:3d:34:b9:5a:ba:
da:8c:81:9b:71:1d:6e:fe:6c:78:d0:17:63:2b:c9:
42:4f:67:07:29:3a:5a:d2:9b:ec:c3:54:d0:bc:9d:
42:db:8f:5a:4a:05:2f:87:75:43:f1:35:60:17:95:
aa:10:5b:8e:a9:1d:24:8d:3d:53:bf:63:d0:de:25:
b6:b1:00:5b:dd:a6:05:56:59:02:0f:e7:0f:9a:93:
a1:e0:ec:2d:d1:3b:6a:bc:2b:51:c6:e0:df:3e:55:
51:72:23:73:79:24:1f:0d:38:17:88:f4:10:3f:71:
d8:02:57:27:58:b7:b6:8e:01:62:63:39:b3:22:e8:
d3:94:85:f9:b9:0b:b8:e7:51:79:dc:7a:0e:dc:8f:
cc:30:7a:48:80:84:5d:70:fc:90:83:79:98:a2:3b:
e6:bc:f2:7c:b0:d1:8f:7d:1a:95:86:e4:74:8e:aa:
60:e8:e3:57:8c:61:d7:27:1c:65:ba:69:89:19:e2:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:11:3A:83:48:8E:E9:D5:0D:82:85:C8:0E:E0:72:4F:9E:23:37:FC
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/PxE6g0iO6dUNgoXIDuByT54jN_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c380::/32
2a11:be83::/32
2a11:c700::/32
2a12:10c0::/29
2a12:15c0::/29
2a12:1947::/32
2a12:25c0::/29
2a12:34c0::/29
2a12:4240::/29
2a12:7980::/29
2a12:c180::/29
Signature Algorithm: sha256WithRSAEncryption
32:e8:00:67:81:b5:c4:06:a2:bc:12:2b:8c:2c:58:08:d4:a6:
f5:54:48:75:47:c1:c6:7b:98:d8:8d:43:df:80:91:70:39:cc:
f7:c9:db:fc:48:e8:ca:fc:3d:35:85:6f:26:a7:e8:de:71:45:
75:82:93:31:d7:22:f9:10:8a:eb:76:25:15:fe:b4:21:a4:aa:
60:3e:0e:ae:dc:a2:e6:89:9c:7c:c8:60:e9:6e:07:42:da:9d:
0c:c3:47:8a:4c:34:68:4a:f2:c7:dd:0d:66:cf:35:5b:4f:a6:
d8:01:43:e7:73:c3:35:3e:10:2f:92:d0:8e:42:1d:4e:3c:0e:
e7:00:29:ca:c9:2f:0c:31:ed:94:3b:15:60:79:86:3e:11:6f:
a9:12:31:58:54:d2:eb:ca:8b:12:77:5d:51:ba:eb:81:a5:fb:
46:e2:fa:5d:de:c8:16:ed:55:0b:08:85:27:21:5e:69:f2:4a:
14:5c:27:8a:f1:07:c9:0b:cc:1d:38:6d:3c:c0:7b:6d:6a:22:
ca:cc:84:b2:d2:cf:d3:28:eb:7f:82:d9:1e:d6:85:be:70:56:
6b:28:92:01:b7:3b:87:d6:de:ee:ef:62:79:60:a0:36:e9:ae:
2a:86:38:d0:15:16:5b:36:d5:da:b2:e6:c3:0c:1d:3a:47:1c:
cb:74:f8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:07 2025 by rpki-client