Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/eg_EWLBhdLVxMIcLMXPGJnpNVTM.roa
File: eg_EWLBhdLVxMIcLMXPGJnpNVTM.roa (raw, json)
Hash identifier: q56XJmw5g88rWIwhFVQeETzr3ThwR2O/uWPVMxnnGJc=
Subject key identifier: 7A:0F:C4:58:B0:61:74:B5:71:30:87:0B:31:73:C6:26:7A:4D:55:33
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197844B9EE629EC50BDD8C3F95B07F68A80
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/eg_EWLBhdLVxMIcLMXPGJnpNVTM.roa
Signing time: Wed 18 Jun 2025 18:27:17 +0000
ROA not before: Wed 18 Jun 2025 18:27:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a09:da46::/32 maxlen: 32
2a0c:ac4::/32 maxlen: 32
2a0c:ac6::/32 maxlen: 32
2a0d:adc0::/32 maxlen: 32
2a11:21c4::/32 maxlen: 32
2a11:35c2::/32 maxlen: 32
2a11:3d02::/32 maxlen: 32
2a11:7080::/32 maxlen: 32
2a11:d385::/32 maxlen: 32
2a11:d701::/32 maxlen: 32
2a12:24c6::/32 maxlen: 32
2a12:35c7::/32 maxlen: 32
2a12:41c3::/32 maxlen: 32
2a14:9702::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Jun 2025 17:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:4b:9e:e6:29:ec:50:bd:d8:c3:f9:5b:07:f6:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jun 18 18:27:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a0fc458b06174b57130870b3173c6267a4d5533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7d:ef:5c:d9:b6:52:e0:26:89:4e:33:ff:1c:
1b:da:22:3a:05:f0:57:ca:3b:45:4e:12:88:16:ad:
86:17:ca:b9:07:20:b9:fb:6a:88:28:51:06:4e:08:
a0:2e:5f:c7:3e:82:4f:18:a0:f5:99:9a:b7:7c:bf:
9a:b7:7d:ec:1e:29:e4:d9:a0:52:92:4b:69:9b:ed:
f7:66:d5:24:20:41:db:58:49:7c:e7:71:c1:0c:d3:
34:a8:8a:07:58:5e:98:c4:e8:28:d1:d8:a5:f0:fd:
f0:0d:61:36:42:6b:58:e3:9c:8f:7e:9f:c2:f9:4b:
ae:81:d2:9e:b6:f0:eb:a7:13:97:16:46:10:f4:f0:
3d:91:93:6b:86:ba:77:11:26:db:f7:cf:89:43:8b:
de:28:dd:7b:d4:87:29:29:12:4a:6c:71:c9:9c:77:
d0:90:f5:5b:68:93:5c:f7:de:38:cc:fb:ac:f0:2e:
7b:03:f1:c1:45:e4:a4:28:0a:03:f8:7c:d5:26:e7:
f5:ee:1e:b0:c3:6b:a5:ea:8a:6c:4e:5d:d8:ba:94:
22:40:0d:d5:f9:d2:e7:36:79:62:bd:ca:a7:6b:15:
df:55:9b:0f:1f:25:0e:51:cc:59:11:7f:4f:0a:b5:
66:9d:07:05:52:ef:92:b6:e7:bf:da:11:10:2a:e6:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:C4:58:B0:61:74:B5:71:30:87:0B:31:73:C6:26:7A:4D:55:33
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/eg_EWLBhdLVxMIcLMXPGJnpNVTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da46::/32
2a0c:ac4::/32
2a0c:ac6::/32
2a0d:adc0::/32
2a11:21c4::/32
2a11:35c2::/32
2a11:3d02::/32
2a11:7080::/32
2a11:d385::/32
2a11:d701::/32
2a12:24c6::/32
2a12:35c7::/32
2a12:41c3::/32
2a14:9702::/32
Signature Algorithm: sha256WithRSAEncryption
7f:6e:50:42:08:58:e2:ce:61:32:f3:9c:68:60:31:a2:12:05:
be:3b:94:5f:38:ad:b0:40:44:c4:ba:bd:c6:d0:1b:3d:4c:f9:
a4:81:4c:38:93:42:f4:f8:05:4d:db:31:83:e7:24:8c:83:b7:
2c:72:f8:73:a1:be:fc:0d:09:ba:28:0c:d6:ca:2c:41:17:fe:
20:bc:1f:9c:88:9e:64:54:6a:5c:1b:4f:c6:9d:a1:9c:96:02:
d6:28:da:43:2d:ef:e3:7a:ae:15:51:62:14:55:87:d7:c1:d7:
31:ce:e1:7f:a6:a2:e1:51:07:2f:e5:7f:66:88:45:8f:d2:70:
52:cb:d4:ff:51:03:9f:bf:fd:3e:b0:c4:3f:ae:3a:09:c1:fe:
fc:45:65:aa:de:9d:df:fe:bf:19:3a:e6:36:90:dd:77:5f:b6:
d6:95:54:c6:37:31:3f:66:11:19:ce:d5:c0:88:11:00:f9:96:
08:80:15:47:7c:e2:af:cb:22:f2:42:e9:28:67:fd:b6:76:c1:
38:cd:1d:4e:5f:bc:96:66:8f:65:ce:8f:ff:41:fe:2f:0c:e7:
41:20:f8:c4:79:d9:ca:7d:13:6f:3b:78:91:68:bf:8c:a0:ca:
30:2d:7b:b6:a0:54:c2:10:df:4e:b3:eb:7a:70:03:4a:de:09:
d8:15:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:45 2025 by rpki-client