Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/N08Ocph3rchVkwk-raZFYQvwMo4.roa
File: N08Ocph3rchVkwk-raZFYQvwMo4.roa (raw, json)
Hash identifier: SoYd7+6kJJt139d4CpHD69+Hx/Thsmgsftj7FjDNicI=
Subject key identifier: 37:4F:0E:72:98:77:AD:C8:55:93:09:3E:AD:A6:45:61:0B:F0:32:8E
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197CC699B865D2802A3FB7B345E75987C4B
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/N08Ocph3rchVkwk-raZFYQvwMo4.roa
Signing time: Wed 02 Jul 2025 18:32:42 +0000
ROA not before: Wed 02 Jul 2025 18:32:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a11:21c0::/32 maxlen: 32
2a11:21c7::/32 maxlen: 32
2a11:3080::/32 maxlen: 32
2a11:3087::/32 maxlen: 32
2a11:35c6::/32 maxlen: 32
2a11:3d05::/32 maxlen: 32
2a11:3d07::/32 maxlen: 32
2a11:7087::/32 maxlen: 32
2a11:d382::/32 maxlen: 32
2a11:d387::/32 maxlen: 32
2a11:d704::/32 maxlen: 32
2a12:24c0::/32 maxlen: 32
2a12:24c7::/32 maxlen: 32
2a12:35c0::/32 maxlen: 32
2a12:35c1::/32 maxlen: 32
2a12:35c3::/32 maxlen: 32
2a14:9706::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 03 Jul 2025 09:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:69:9b:86:5d:28:02:a3:fb:7b:34:5e:75:98:7c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jul 2 18:32:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374f0e729877adc85593093eada645610bf0328e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:ac:bc:44:da:79:80:bf:47:8f:c3:a4:4f:
e9:2c:3c:9f:fb:8c:5d:f0:ee:2f:c4:17:23:90:29:
e5:e1:53:c6:fb:ad:fb:95:fa:39:33:ce:5a:08:39:
54:ce:72:46:53:55:da:6f:d8:b4:8e:b3:bf:48:5c:
95:25:f2:06:75:b5:db:88:6f:d4:57:38:13:b8:9a:
4b:73:59:49:b0:47:02:8d:44:bf:f7:f8:63:57:81:
2a:0b:03:eb:29:54:24:d5:95:3a:fe:97:de:ee:97:
a4:e7:b5:04:70:26:95:12:a4:3c:d6:19:bb:71:18:
ac:bb:a1:a6:e3:b7:87:35:26:c0:7e:8b:eb:24:34:
b4:cd:03:99:a6:c9:67:b7:28:ac:06:8e:ed:19:ed:
85:fd:e0:25:c9:b9:1a:ac:13:b4:62:fd:4f:19:65:
c4:b6:34:dd:19:dd:27:24:01:96:f5:a9:7d:f5:9e:
91:8d:1e:42:d7:99:43:d2:53:53:0c:71:da:b5:15:
3a:72:d8:c3:f1:87:e5:c4:f7:bd:5b:d1:72:28:a2:
a3:8a:87:ca:3a:38:89:8d:f2:3c:e6:f2:d0:8d:dc:
49:2a:f7:fe:aa:38:1b:5d:11:f8:63:1c:89:76:b3:
c9:4c:2e:65:70:74:3b:30:e9:7a:8d:b1:fb:77:28:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:0E:72:98:77:AD:C8:55:93:09:3E:AD:A6:45:61:0B:F0:32:8E
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/N08Ocph3rchVkwk-raZFYQvwMo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:21c0::/32
2a11:21c7::/32
2a11:3080::/32
2a11:3087::/32
2a11:35c6::/32
2a11:3d05::/32
2a11:3d07::/32
2a11:7087::/32
2a11:d382::/32
2a11:d387::/32
2a11:d704::/32
2a12:24c0::/32
2a12:24c7::/32
2a12:35c0::/31
2a12:35c3::/32
2a14:9706::/32
Signature Algorithm: sha256WithRSAEncryption
03:a4:d3:25:06:4e:87:b1:4c:81:83:db:0e:a7:62:7d:4a:a3:
ec:6b:c4:55:9a:3c:a6:0c:2a:04:39:2f:7f:cf:17:d6:29:b1:
7a:c4:fb:71:94:bd:a7:13:d7:cc:47:ae:32:38:3b:fe:93:31:
88:62:98:3b:5f:89:91:f4:9c:5b:22:8f:8b:88:a8:f4:44:cf:
88:e6:8b:b6:95:ab:db:df:4d:6a:b2:77:1a:68:eb:81:26:f0:
2b:9b:d8:d2:23:ad:16:eb:01:88:e8:33:ab:46:a1:cf:cb:c9:
83:6c:62:9b:02:af:44:ca:6e:b1:79:d5:b0:58:dd:51:b8:70:
ae:f9:ce:7f:f3:aa:80:b5:b1:0e:c6:c2:47:ed:b6:5b:a4:52:
71:10:7d:5c:93:26:da:bd:0b:00:81:ee:e4:eb:95:9c:87:40:
a9:bb:f4:36:d1:8b:ab:ef:5c:64:7f:59:7c:9f:ed:57:b0:52:
4f:54:87:0d:3a:19:94:c2:ae:77:dc:d4:d2:c3:eb:29:54:26:
82:7a:6c:99:07:52:80:a3:31:08:9d:01:a4:d4:4f:4a:fe:0b:
0d:1d:fe:d3:cc:82:cd:a7:71:84:5b:32:d2:54:e1:4d:45:24:
bb:7b:b5:86:ad:d4:b7:29:a1:a9:c5:b4:20:26:a2:7e:a1:60:
7d:4e:55:9a
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAZfMaZuGXSgCo/t7NF51mHxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjUwNzAyMTgzMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzRmMGU3Mjk4NzdhZGM4NTU5MzA5M2VhZGE2NDU2MTBiZjAzMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01GsvETaeYC/R4/DpE/pLDyf+4xd
8O4vxBcjkCnl4VPG+637lfo5M85aCDlUznJGU1Xab9i0jrO/SFyVJfIGdbXbiG/U
VzgTuJpLc1lJsEcCjUS/9/hjV4EqCwPrKVQk1ZU6/pfe7pek57UEcCaVEqQ81hm7
cRisu6Gm47eHNSbAfovrJDS0zQOZpslntyisBo7tGe2F/eAlybkarBO0Yv1PGWXE
tjTdGd0nJAGW9al99Z6RjR5C15lD0lNTDHHatRU6ctjD8YflxPe9W9FyKKKjiofK
OjiJjfI85vLQjdxJKvf+qjgbXRH4YxyJdrPJTC5lcHQ7MOl6jbH7dyhS6QIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFDdPDnKYd63IVZMJPq2mRWEL8DKOMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvTjA4T2NwaDNyY2hWa3drLXJhWkZZUXZ3TW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAIwcAMFACoRIcAD
BQAqESHHAwUAKhEwgAMFACoRMIcDBQAqETXGAwUAKhE9BQMFACoRPQcDBQAqEXCH
AwUAKhHTggMFACoR04cDBQAqEdcEAwUAKhIkwAMFACoSJMcDBQEqEjXAAwUAKhI1
wwMFACoUlwYwDQYJKoZIhvcNAQELBQADggEBAAOk0yUGToexTIGD2w6nYn1Ko+xr
xFWaPKYMKgQ5L3/PF9YpsXrE+3GUvacT18xHrjI4O/6TMYhimDtfiZH0nFsij4uI
qPREz4jmi7aVq9vfTWqydxpo64Em8Cub2NIjrRbrAYjoM6tGoc/LyYNsYpsCr0TK
brF51bBY3VG4cK75zn/zqoC1sQ7GwkfttlukUnEQfVyTJtq9CwCB7uTrlZyHQKm7
9DbRi6vvXGR/WXyf7VewUk9Uhw06GZTCrnfc1NLD6ylUJoJ6bJkHUoCjMQidAaTU
T0r+Cw0d/tPMgs2ncYRbMtJU4U1FJLt7tYat1LcpoanFtCAmon6hYH1OVZo=
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:34 2025 by rpki-client