Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/_owMwq7Ck59FwRfrZdg7xLo6qw8.roa
File: _owMwq7Ck59FwRfrZdg7xLo6qw8.roa (raw, json)
Hash identifier: FOQ5EnJK0Ytiu1KZ9fpGv7Gx28cJdS/FE4Hr1MvSq2o=
Subject key identifier: FE:8C:0C:C2:AE:C2:93:9F:45:C1:17:EB:65:D8:3B:C4:BA:3A:AB:0F
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0197ADD05B99029C7AA52B5E688F98CFDAF8
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/_owMwq7Ck59FwRfrZdg7xLo6qw8.roa
Signing time: Thu 26 Jun 2025 19:56:42 +0000
ROA not before: Thu 26 Jun 2025 19:56:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a11:8446::/32 maxlen: 32
2a11:b784::/32 maxlen: 32
2a11:b785::/32 maxlen: 32
2a11:c103::/32 maxlen: 32
2a11:d086::/32 maxlen: 32
2a12:1806::/32 maxlen: 32
2a12:4c06::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Jul 2025 18:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:d0:5b:99:02:9c:7a:a5:2b:5e:68:8f:98:cf:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jun 26 19:56:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe8c0cc2aec2939f45c117eb65d83bc4ba3aab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:3c:e3:38:4c:49:60:3f:58:fa:c1:ae:88:
3e:ca:8e:c2:e5:43:4d:ce:d0:b6:6b:a7:a4:62:25:
22:2f:6a:6d:bb:a5:ef:d3:ff:51:93:76:cd:fa:3c:
a5:dc:48:73:17:32:ea:fe:c4:e8:16:78:11:bc:b5:
36:d7:6b:57:57:25:44:27:3f:9d:a9:33:87:53:7e:
19:f8:0a:b7:be:a2:15:40:33:f4:31:58:93:dd:08:
8a:16:a9:e3:3c:87:25:73:ce:97:63:ac:09:45:15:
fe:87:d6:7e:6b:18:08:21:9e:90:2c:19:28:05:1a:
4d:ae:be:a3:86:bd:0a:33:b5:52:e7:ea:ea:9e:94:
fb:66:11:25:f3:e3:06:8f:3f:9a:8d:21:b8:69:22:
b8:8f:24:77:5a:ac:67:c3:eb:d4:b6:41:b6:a9:cb:
0d:61:9b:26:8b:c0:ad:b1:3a:34:70:01:ec:80:c2:
9a:d7:29:16:5f:d9:ab:3d:b7:b9:95:5e:b0:93:12:
70:2d:23:45:82:08:fc:0d:9a:96:f4:fe:d0:c8:ef:
97:ce:29:f1:f2:b9:8c:67:c3:e2:a9:0e:5c:06:38:
75:c9:ba:1d:f9:c5:aa:1d:0b:f1:e9:ca:3c:03:5a:
39:c2:82:f4:c9:a9:5a:50:78:56:0b:2c:35:58:33:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:0C:C2:AE:C2:93:9F:45:C1:17:EB:65:D8:3B:C4:BA:3A:AB:0F
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/_owMwq7Ck59FwRfrZdg7xLo6qw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8446::/32
2a11:b784::/31
2a11:c103::/32
2a11:d086::/32
2a12:1806::/32
2a12:4c06::/32
Signature Algorithm: sha256WithRSAEncryption
11:93:ea:56:3c:5f:23:2a:f2:d0:a1:4c:b7:d4:b6:ea:6e:f8:
64:38:98:34:97:37:cc:79:45:ab:43:c5:2d:50:24:77:de:8d:
32:ba:5c:28:84:05:fd:2f:c7:31:43:80:8d:2f:93:08:71:bb:
4c:7e:c4:bf:4a:1c:aa:3d:d6:db:34:99:30:d5:05:20:8e:eb:
29:e2:68:a6:9f:57:e1:b6:1e:36:bc:5d:bf:f3:de:f9:be:0e:
24:20:74:69:2e:88:03:22:b4:ed:ca:e5:bc:b2:c5:13:90:f1:
2b:6b:eb:39:90:b8:83:23:70:5f:ed:86:1c:16:09:7d:4e:ea:
bf:59:ad:82:8f:73:7f:47:76:2d:a2:03:db:58:bd:ad:ea:79:
87:49:71:a2:ce:fe:28:9b:ac:a0:39:33:8a:f6:3d:ba:b0:91:
8b:6f:09:56:45:54:18:3b:1b:fc:a4:54:b8:19:e9:71:b2:4d:
82:dc:c5:ce:10:76:99:2e:2e:ed:59:a4:62:41:66:2f:c6:89:
32:0e:f8:08:d1:ba:42:e5:24:19:cc:78:fb:5d:53:52:37:95:
3f:fb:42:9f:0c:39:a5:96:a4:fe:d4:b0:04:df:b1:f1:5e:79:
d3:6b:51:44:95:d9:49:21:f9:54:6b:5c:43:ea:17:62:2c:3b:
44:84:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:48:56 2025 by rpki-client