Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1-9XooepH3fJyC9YQU-Iy_utBKyg.roa
File: 1-9XooepH3fJyC9YQU-Iy_utBKyg.roa (raw, json)
Hash identifier: aqAwQd5/40+mmKgvVI0925xv1CuSvoL+1EMI8yz/OMw=
Subject key identifier: FB:D5:E8:A1:EA:47:DD:F2:72:0B:D6:10:53:E2:32:FE:EB:41:2B:28
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197CC1820E53D0100CB6CF643771786F6A3
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1-9XooepH3fJyC9YQU-Iy_utBKyg.roa
Signing time: Wed 02 Jul 2025 17:03:42 +0000
ROA not before: Wed 02 Jul 2025 17:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a11:d386::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Jul 2025 18:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:18:20:e5:3d:01:00:cb:6c:f6:43:77:17:86:f6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jul 2 17:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbd5e8a1ea47ddf2720bd61053e232feeb412b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:4c:fd:c7:e3:a7:6e:1e:8b:a8:52:06:d7:
ba:47:68:d9:d5:7e:82:a2:56:5d:04:e2:97:7c:dd:
c9:6b:f6:be:c9:21:11:f7:07:d5:bd:aa:6b:de:0f:
82:96:aa:41:df:53:13:e1:8a:da:4a:fc:25:78:89:
c1:c6:87:68:10:87:0f:f2:fe:df:9b:d1:a0:38:f0:
3b:a0:c7:81:83:2c:d0:11:15:a1:30:d3:16:d0:8c:
66:82:fa:47:24:5e:0b:35:3d:aa:c4:44:99:93:e0:
22:8b:13:ac:92:10:83:00:d3:fb:c2:a8:f4:97:2b:
be:53:f5:d0:ef:6d:4f:47:96:6d:0a:62:df:92:93:
b4:01:4a:ee:d4:a9:09:5b:8c:28:80:56:b6:59:3e:
24:92:45:b5:86:4d:5c:e5:28:12:a1:b2:3d:bf:2b:
ea:3c:38:0c:0d:a6:4e:27:3b:4f:b1:e8:32:5d:2e:
cd:72:9d:57:a6:07:06:74:fb:b9:96:9d:fd:f1:ba:
4f:c4:2f:ca:cd:71:e8:ab:a5:1d:21:8a:66:cc:fa:
67:ec:9f:87:b5:c5:78:a0:a1:fd:33:3d:e9:02:ce:
0e:8f:2b:78:a3:3a:fb:7c:a9:db:0b:10:67:4d:67:
0c:2e:cd:ad:3d:01:8f:32:46:2a:1e:6d:34:61:0e:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:E8:A1:EA:47:DD:F2:72:0B:D6:10:53:E2:32:FE:EB:41:2B:28
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1-9XooepH3fJyC9YQU-Iy_utBKyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d386::/32
Signature Algorithm: sha256WithRSAEncryption
c2:8c:9f:84:37:3b:f1:b7:70:b6:09:44:e8:c3:23:ea:5b:7a:
e9:7a:8d:6a:2c:a0:11:40:00:73:4c:ca:35:24:0a:f0:cb:84:
28:83:2f:fb:31:66:ef:0d:2a:4d:29:e2:f7:da:06:48:63:78:
07:26:fb:3b:9f:14:d8:d5:89:10:34:73:25:92:d0:e5:63:f0:
8b:d2:72:f0:1f:2d:a6:a8:44:40:62:5d:18:cc:5a:74:81:67:
75:82:e4:fc:46:7b:2b:5c:df:90:1c:20:87:74:7c:12:71:2e:
95:6c:e7:ec:cb:b1:91:72:2b:de:88:38:2e:92:27:d6:a2:ef:
26:b7:26:8d:f0:f7:ad:43:c2:b3:2c:04:6a:ad:ec:6b:e5:88:
4d:e1:e3:85:3b:49:2d:c6:af:f8:e0:71:26:03:30:fe:61:fa:
a1:60:8f:0a:2b:d9:14:f4:82:04:98:2c:1d:b0:e1:7f:7c:63:
6e:a2:96:4a:44:81:d1:14:24:2b:bc:48:bb:63:65:b9:42:5a:
55:bf:80:c4:c5:77:08:68:90:c7:f5:50:93:fc:66:b7:75:bd:
0b:1a:2e:69:f6:e3:e3:ae:61:e2:c6:6d:4b:a0:5e:57:5c:c3:
b9:1e:93:e7:5a:5c:5d:17:85:a4:8b:3e:92:e9:cb:a0:1e:18:
73:e2:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:25 2025 by rpki-client