Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/RHaw0_fF18Scf54VvcxA_7jUMk0.roa
File: RHaw0_fF18Scf54VvcxA_7jUMk0.roa (raw, json)
Hash identifier: c/8JbxGekE2WfdMloXAgSpSlZNl1MGuwCpdbS+xAPi8=
Subject key identifier: 44:76:B0:D3:F7:C5:D7:C4:9C:7F:9E:15:BD:CC:40:FF:B8:D4:32:4D
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 01982DFD69F7A8727969FE8B6CC7D3845727
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/RHaw0_fF18Scf54VvcxA_7jUMk0.roa
Signing time: Mon 21 Jul 2025 17:17:19 +0000
ROA not before: Mon 21 Jul 2025 17:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5400
IP address blocks: 2a00:2000::/23 maxlen: 23
2a00:2200::/25 maxlen: 25
2a00:2200::/40 maxlen: 40
2a00:2200:200::/40 maxlen: 40
2a00:2200:300::/40 maxlen: 40
2a00:2200:900::/40 maxlen: 40
2a00:2200:b00::/40 maxlen: 40
2a00:2200:d00::/40 maxlen: 40
2a00:2200:5300::/40 maxlen: 40
2a00:2280::/25 maxlen: 25
2a00:2300::/25 maxlen: 25
Validation: Failed, certificate revoked on Thu 24 Jul 2025 14:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:fd:69:f7:a8:72:79:69:fe:8b:6c:c7:d3:84:57:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Jul 21 17:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4476b0d3f7c5d7c49c7f9e15bdcc40ffb8d4324d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:27:fa:9b:88:40:b3:be:d1:7a:0e:57:aa:
a5:8b:f0:56:bc:c5:0f:71:c4:80:2f:d9:d4:c7:2b:
34:a5:0a:10:e0:03:96:91:f9:49:38:d2:36:bb:3d:
c4:a6:dd:7a:8e:3f:4d:36:3e:41:9a:aa:4e:bb:9f:
d0:ec:6a:ae:d5:06:e3:f1:2d:02:91:c5:71:83:a1:
48:f5:0c:11:3c:3e:05:1e:22:e5:1d:b2:7b:af:05:
00:1c:9e:9c:25:84:c1:f3:39:ed:82:ea:87:2d:00:
bb:d0:d8:c0:a8:23:e3:ee:9f:e1:2b:bd:0b:d2:13:
87:ac:fe:cc:9c:ea:e1:af:d6:47:44:08:29:6a:9a:
84:40:69:27:cf:ff:0e:11:45:19:22:8a:7a:8f:13:
44:18:5f:67:4a:75:cf:40:1b:26:4f:47:6f:a8:f6:
63:de:78:0f:29:8e:44:6e:f5:94:72:8c:1c:eb:04:
2d:ad:ff:a7:38:26:fe:c0:79:a1:eb:88:91:66:70:
b4:08:7d:84:77:dc:37:64:9c:57:42:8d:9d:77:bb:
69:6d:b6:55:bd:3b:72:80:66:38:15:11:ab:ed:9e:
91:e2:06:7a:43:10:43:4c:66:c0:e5:80:41:a9:5c:
96:7a:be:f1:b8:2d:aa:a1:0c:cc:11:b8:6c:12:27:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:76:B0:D3:F7:C5:D7:C4:9C:7F:9E:15:BD:CC:40:FF:B8:D4:32:4D
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/RHaw0_fF18Scf54VvcxA_7jUMk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:2000::-2a00:237f:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:9b:3b:d7:0d:81:86:8a:d2:bf:2f:23:06:34:05:94:e7:27:
46:f7:99:7d:56:83:5f:62:fc:bc:cd:37:37:e7:3d:7d:bc:d7:
04:e9:bd:c5:c7:b0:07:f5:96:47:ed:fe:ee:af:fb:92:ae:84:
aa:09:79:b7:6c:99:a9:ed:3c:e6:0f:4a:d3:88:93:d1:e9:0f:
00:c5:6e:9a:27:65:a1:05:4a:ed:21:70:c7:69:db:8c:79:e4:
4f:c2:bf:05:7c:e0:fe:6c:03:4d:68:e4:ff:ba:9d:50:40:e2:
89:ad:df:72:56:f7:38:ca:83:42:c6:1f:9b:b0:7c:55:91:3a:
40:fb:83:d6:b1:fd:01:df:32:77:66:7c:3d:f2:db:e0:b4:a3:
15:a3:78:fb:ba:c8:5c:1e:87:2c:1d:b1:df:cc:68:ed:1d:08:
74:63:15:ed:1f:7f:68:b3:22:8a:8e:69:0f:97:75:e7:b7:bf:
10:32:96:1c:64:d1:16:9a:fd:7a:f5:ff:3f:01:90:86:53:45:
e8:1b:f6:c5:48:e4:13:7b:3d:e2:e2:84:9d:e6:fc:69:20:c0:
45:e4:87:04:2a:d9:68:8f:20:37:45:6f:3a:c2:80:87:a2:0a:
f5:db:d2:5d:1c:d9:36:56:4b:66:f6:6d:76:fe:15:54:8f:32:
30:7f:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:44:44 2025 by rpki-client