Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/IF4gftpmrFjp4_ogVJVl4KLCCI4.roa
File: IF4gftpmrFjp4_ogVJVl4KLCCI4.roa (raw, json)
Hash identifier: zv92yzdCZSrlFdU59TdSN69kosaHyHliy+LMbLunt6M=
Subject key identifier: 20:5E:20:7E:DA:66:AC:58:E9:E3:FA:20:54:95:65:E0:A2:C2:08:8E
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01978EAD2DF4F3BD1211C446761D7CE28732
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/IF4gftpmrFjp4_ogVJVl4KLCCI4.roa
Signing time: Fri 20 Jun 2025 18:50:03 +0000
ROA not before: Fri 20 Jun 2025 18:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:21c1::/32 maxlen: 32
2a11:21c6::/32 maxlen: 32
2a11:3085::/32 maxlen: 32
2a11:35c0::/32 maxlen: 32
2a11:35c4::/32 maxlen: 32
2a11:3d00::/32 maxlen: 32
2a11:3d04::/32 maxlen: 32
2a11:7083::/32 maxlen: 32
2a11:d381::/32 maxlen: 32
2a11:d703::/32 maxlen: 32
2a12:24c3::/32 maxlen: 32
2a12:35c2::/32 maxlen: 32
2a12:41c1::/32 maxlen: 32
2a14:9707::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 26 Jun 2025 19:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:ad:2d:f4:f3:bd:12:11:c4:46:76:1d:7c:e2:87:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jun 20 18:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=205e207eda66ac58e9e3fa20549565e0a2c2088e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a1:84:65:64:a3:61:f1:19:5c:23:8e:84:af:
65:12:c0:e4:35:67:30:be:fe:01:e4:07:0d:36:cb:
e5:8c:71:9c:47:01:2c:9b:df:f9:35:2d:dc:70:69:
ed:bb:34:51:39:2d:52:0d:29:71:93:e1:5b:94:04:
5b:66:82:1b:d1:14:70:ab:39:86:64:1c:c8:e4:b8:
20:e3:a3:03:00:ca:84:7d:21:dd:2d:03:8c:cd:2a:
6a:31:f9:4f:b6:09:4b:fc:db:10:12:ea:39:bb:05:
19:7b:86:39:90:4e:96:fd:44:c7:c4:47:7e:96:9f:
2d:84:f2:4c:2c:d8:de:74:39:38:e0:ea:f4:ba:4a:
5d:0d:73:8c:89:4b:3f:7f:2d:10:ff:7d:28:38:ae:
49:83:78:31:3e:c8:f4:c2:cb:d9:fd:c3:95:4e:a2:
0c:3f:e3:4a:41:88:d4:0b:8b:ed:e7:44:93:e1:29:
16:34:99:c5:5e:14:0f:41:71:45:9a:22:f3:37:e3:
fc:ee:72:5d:38:0f:5b:17:42:81:9c:3c:b4:fd:2a:
6d:9d:fb:11:f5:68:db:3b:d8:cd:ac:dd:c4:d5:ec:
1a:b1:a8:91:c7:f7:ae:be:ed:e2:79:14:2f:c5:bc:
9a:41:50:9a:f7:7b:aa:d6:0c:0b:2d:6e:87:f3:ef:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:20:7E:DA:66:AC:58:E9:E3:FA:20:54:95:65:E0:A2:C2:08:8E
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/IF4gftpmrFjp4_ogVJVl4KLCCI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:21c1::/32
2a11:21c6::/32
2a11:3085::/32
2a11:35c0::/32
2a11:35c4::/32
2a11:3d00::/32
2a11:3d04::/32
2a11:7083::/32
2a11:d381::/32
2a11:d703::/32
2a12:24c3::/32
2a12:35c2::/32
2a12:41c1::/32
2a14:9707::/32
Signature Algorithm: sha256WithRSAEncryption
65:cb:b0:04:3f:6c:8a:cf:4d:cb:05:34:ef:f6:7e:46:f5:72:
42:1c:ec:99:90:2c:f5:16:ac:2f:4e:1b:9a:8e:09:56:c3:fc:
04:09:ad:96:f9:ec:3b:37:b9:d9:34:a8:a6:f2:0e:78:be:1c:
fc:9e:6b:8b:bc:45:96:65:90:84:85:a0:ea:64:4b:5e:ae:de:
c0:1c:72:d2:2a:a6:fb:02:7f:0e:87:43:07:6c:df:bf:6b:40:
a3:3c:c5:73:3f:67:ca:14:b0:ff:82:89:0d:07:58:69:59:39:
0c:8b:b1:dc:67:10:aa:64:07:a6:ad:86:e0:7b:17:b8:1d:a5:
b9:dd:39:d4:64:04:aa:be:ec:33:76:e3:d0:21:43:af:e8:20:
80:7c:ed:96:41:77:c5:d0:22:35:85:a5:5e:5e:f5:75:2d:fb:
8e:a2:3d:3c:12:f0:b9:8d:f4:c7:86:c1:52:a7:56:f7:89:05:
a6:b7:90:b8:9f:56:44:72:53:68:8c:53:29:31:25:d1:3f:0e:
32:e3:f5:a6:76:f8:4b:31:cc:0c:a4:54:8d:f2:9f:95:ed:b0:
2a:6f:3f:7f:b4:3d:6f:c8:6a:34:25:81:d1:c7:09:71:23:f4:
56:ff:7d:d4:ee:c2:e3:04:85:84:f9:67:de:d0:96:f9:02:51:
87:60:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:48 2025 by rpki-client