Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/z-wdmWJ2qrDNp8MyjnZhWa9mmFc.roa
File: z-wdmWJ2qrDNp8MyjnZhWa9mmFc.roa (raw, json)
Hash identifier: H59W+P/EzVDfw3MekOvf6VcNtFBCljBMAWFmgG33fz0=
Subject key identifier: CF:EC:1D:99:62:76:AA:B0:CD:A7:C3:32:8E:76:61:59:AF:66:98:57
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197F50A658066241EBDEE43D9D5BC784239
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/z-wdmWJ2qrDNp8MyjnZhWa9mmFc.roa
Signing time: Thu 10 Jul 2025 15:53:08 +0000
ROA not before: Thu 10 Jul 2025 15:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a09:da41::/32 maxlen: 32
2a09:da42::/32 maxlen: 32
2a0c:ac0::/32 maxlen: 32
2a0c:ac1::/32 maxlen: 32
2a0c:ac2::/32 maxlen: 32
2a0d:adc0::/32 maxlen: 32
2a0d:adc1::/32 maxlen: 32
2a0e:dfc0::/32 maxlen: 32
2a11:21c0::/32 maxlen: 32
2a11:21c2::/32 maxlen: 32
2a11:21c5::/32 maxlen: 32
2a11:3084::/32 maxlen: 32
2a11:3087::/32 maxlen: 32
2a11:35c0::/32 maxlen: 32
2a11:35c1::/32 maxlen: 32
2a11:35c7::/32 maxlen: 32
2a11:3d03::/32 maxlen: 32
2a11:3d05::/32 maxlen: 32
2a11:5a42::/32 maxlen: 32
2a11:7085::/32 maxlen: 32
2a11:7087::/32 maxlen: 32
2a11:d380::/32 maxlen: 32
2a11:d382::/32 maxlen: 32
2a11:d384::/32 maxlen: 32
2a11:d386::/32 maxlen: 32
2a11:d700::/32 maxlen: 32
2a11:d701::/32 maxlen: 32
2a11:d704::/32 maxlen: 32
2a12:1540::/32 maxlen: 32
2a12:1541::/32 maxlen: 32
2a12:24c0::/32 maxlen: 32
2a12:24c1::/32 maxlen: 32
2a12:24c2::/32 maxlen: 32
2a12:24c4::/32 maxlen: 32
2a12:35c0::/32 maxlen: 32
2a12:35c5::/32 maxlen: 32
2a12:41c0::/32 maxlen: 32
2a12:41c6::/32 maxlen: 32
2a12:7300::/32 maxlen: 32
2a12:7302::/32 maxlen: 32
2a14:9700::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Jul 2025 17:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:0a:65:80:66:24:1e:bd:ee:43:d9:d5:bc:78:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jul 10 15:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfec1d996276aab0cda7c3328e766159af669857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:ba:15:9a:26:e9:c3:71:59:86:56:38:c6:
54:03:ea:eb:1f:99:40:f7:94:23:04:69:2f:6a:bc:
0c:35:3e:67:2b:95:c6:b2:df:d7:c7:7f:c1:1e:be:
72:46:7e:ce:3e:3b:9a:22:79:f0:01:c3:e6:63:e0:
c7:f9:16:ae:ad:ac:aa:a7:a3:28:65:01:e6:3d:b7:
54:30:5c:00:fc:2d:11:29:e4:b4:ef:36:da:36:37:
83:a5:89:1a:30:07:65:15:c2:48:2e:51:19:2e:88:
61:c8:67:ab:f7:1b:3f:3b:55:49:84:0f:b4:dc:67:
15:e8:a4:16:a8:39:b7:ce:24:25:b8:1f:ec:0a:6a:
52:46:f8:2d:96:dc:9a:d3:a2:8e:13:fe:d2:39:a7:
13:d3:1c:00:57:1d:d8:a8:ad:03:c0:7d:23:94:a9:
6a:84:3c:55:c8:70:a5:7c:ff:74:50:e6:f7:3f:a9:
ed:a1:6c:88:b4:47:57:c6:08:a0:c0:c6:c3:5f:3b:
8a:08:e9:d4:ad:b0:2f:83:eb:76:c7:fd:dd:9a:4d:
a1:8d:f6:4d:3a:55:c9:4a:33:33:d7:49:98:28:ce:
d5:e0:d7:c0:76:67:95:df:94:4d:67:7a:14:45:73:
18:d2:84:2d:61:27:47:1a:81:2b:83:34:0a:ee:2e:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EC:1D:99:62:76:AA:B0:CD:A7:C3:32:8E:76:61:59:AF:66:98:57
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/z-wdmWJ2qrDNp8MyjnZhWa9mmFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da41::-2a09:da42:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:ac0::-2a0c:ac2:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:adc0::/31
2a0e:dfc0::/32
2a11:21c0::/32
2a11:21c2::/32
2a11:21c5::/32
2a11:3084::/32
2a11:3087::/32
2a11:35c0::/31
2a11:35c7::/32
2a11:3d03::/32
2a11:3d05::/32
2a11:5a42::/32
2a11:7085::/32
2a11:7087::/32
2a11:d380::/32
2a11:d382::/32
2a11:d384::/32
2a11:d386::/32
2a11:d700::/31
2a11:d704::/32
2a12:1540::/31
2a12:24c0::-2a12:24c2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:24c4::/32
2a12:35c0::/32
2a12:35c5::/32
2a12:41c0::/32
2a12:41c6::/32
2a12:7300::/32
2a12:7302::/32
2a14:9700::/32
Signature Algorithm: sha256WithRSAEncryption
9f:e5:11:ce:9b:50:4e:9b:b6:cf:88:20:7e:ec:35:9b:af:a3:
c1:bc:b5:1a:e9:dd:b9:bb:65:04:31:9d:42:e5:3e:0c:57:47:
73:c8:be:a1:7d:89:da:93:75:19:d4:b5:07:8e:4a:73:c7:61:
7d:48:d4:f8:80:e2:28:3e:9f:db:8e:77:8e:60:2e:59:a2:e8:
c9:9d:94:4c:b4:a8:a8:99:dc:f3:79:33:6c:1e:01:c8:ea:65:
b1:a1:5f:15:ee:fc:3b:a1:80:4c:bf:74:46:92:8d:52:bc:3a:
4c:04:91:ec:cb:5e:1b:a7:77:d9:a1:e6:31:30:2f:cd:9e:3a:
42:8f:ae:3d:81:b5:8b:a3:45:b3:50:13:cb:cc:a5:97:73:08:
e6:ea:b3:16:af:a6:b5:cd:58:e2:bd:5f:0f:e0:3c:76:c9:21:
d7:a2:b1:35:f0:14:0e:a2:d7:f4:8a:56:36:77:75:f3:48:43:
60:1e:81:31:57:be:28:a5:3b:b4:b7:d3:98:57:06:e2:30:e8:
13:24:c4:7d:77:cf:b8:bb:1a:e9:60:3a:50:1e:4e:e0:43:5f:
d8:1b:7f:f3:bc:5f:1b:62:af:c0:df:99:9d:f0:ec:0f:dd:0b:
37:be:36:6a:27:3f:be:6f:61:8a:67:cf:5d:ce:fd:0e:43:81:
e1:2d:c1:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:37 2025 by rpki-client