Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1vc_71Qzr7kQlwPmYSWFYRMYWeE.roa
File: 1vc_71Qzr7kQlwPmYSWFYRMYWeE.roa (raw, json)
Hash identifier: 4cYEucejR8rW+hBXW1MyY4w77CsDABVFh9Sfni1dNPw=
Subject key identifier: D6:F7:3F:EF:54:33:AF:B9:10:97:03:E6:61:25:85:61:13:18:59:E1
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197F4FBC0E572392EA372A55CA715963F7B
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1vc_71Qzr7kQlwPmYSWFYRMYWeE.roa
Signing time: Thu 10 Jul 2025 15:37:08 +0000
ROA not before: Thu 10 Jul 2025 15:37:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:3082::/32 maxlen: 32
2a11:3d03::/32 maxlen: 32
2a11:7085::/32 maxlen: 32
2a11:d380::/32 maxlen: 32
2a11:d700::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Jul 2025 15:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:fb:c0:e5:72:39:2e:a3:72:a5:5c:a7:15:96:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jul 10 15:37:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f73fef5433afb9109703e661258561131859e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:46:96:5d:66:4d:46:d6:48:8a:6b:50:47:
bf:7e:e4:5c:e6:e2:16:d1:3b:b7:70:98:36:26:7b:
bc:3b:33:30:27:c3:b7:05:f1:75:b5:a1:00:55:84:
a4:80:0c:9a:a0:d9:0f:b9:aa:0f:bc:6a:44:a1:f6:
e1:a3:b2:cc:64:48:d3:04:b1:84:a5:87:94:de:17:
aa:63:d5:0e:e7:bc:34:00:d2:42:f3:0c:8d:88:c7:
24:3e:0a:75:91:47:b3:84:47:88:86:37:40:7b:99:
e4:89:13:bc:e0:ff:63:66:d6:29:aa:6c:87:72:02:
23:e2:20:93:36:3d:df:a4:a3:9e:be:68:51:69:dd:
d3:e4:63:1b:79:79:8d:b9:dd:87:0e:6e:ba:02:b1:
f6:8e:89:36:7c:6e:c7:24:ff:5e:69:2f:e9:29:13:
1e:0b:91:47:cd:e4:2a:53:9d:79:4f:6c:2c:1c:c1:
7d:1d:5a:73:64:63:9d:a5:77:3f:9c:8b:ef:01:d8:
80:08:80:9e:39:00:ac:c1:d9:ed:03:88:5f:5d:19:
82:0b:71:fa:54:b9:c6:86:cc:ef:c9:f0:31:07:b9:
0f:dd:13:7e:02:ed:36:2d:74:a7:9b:94:74:b9:50:
b1:de:e7:84:bd:d8:93:df:42:ed:e4:14:8d:de:c5:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F7:3F:EF:54:33:AF:B9:10:97:03:E6:61:25:85:61:13:18:59:E1
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1vc_71Qzr7kQlwPmYSWFYRMYWeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3082::/32
2a11:3d03::/32
2a11:7085::/32
2a11:d380::/32
2a11:d700::/32
Signature Algorithm: sha256WithRSAEncryption
93:f7:15:19:f8:33:c2:fc:3c:21:58:65:43:b5:fc:aa:a9:b0:
74:e1:df:7b:71:c3:47:5a:ee:2d:0c:43:23:d7:de:d3:eb:34:
d8:45:86:a1:66:09:6d:21:9c:1a:f7:98:b4:2b:50:68:9a:95:
39:93:28:16:67:da:ec:fe:83:2c:e6:1e:2f:45:d5:b8:47:8c:
79:cd:d0:b6:ae:c7:f9:80:5a:90:f5:b7:e9:ce:43:29:a0:a6:
a4:07:e0:dd:d3:4c:26:c8:29:33:80:cb:ef:44:73:c8:3f:10:
6f:11:6a:95:48:b4:4f:38:b4:4b:7a:ef:8e:76:1f:03:43:fd:
0d:bd:e6:74:ed:ca:98:58:d9:2c:7c:11:c6:d8:ac:4d:54:c7:
64:cb:8f:a2:6e:4e:b5:cb:01:61:d8:7b:25:db:68:73:e0:3a:
44:5c:da:9f:97:2d:55:4e:ae:fe:fd:0d:05:30:35:99:49:89:
68:15:24:38:3d:57:9f:a8:92:d7:a8:0b:aa:cb:49:91:c6:42:
68:f6:39:a4:ad:01:bd:d8:b9:ab:5a:75:30:7d:96:5a:85:87:
42:6b:8b:35:d4:af:60:8a:4e:13:4f:68:af:96:27:ed:3d:76:
f5:16:8d:c6:14:58:07:bb:c5:b2:e4:95:4b:7c:a6:bb:1a:d0:
60:13:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:26 2025 by rpki-client