Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/IcdaJLOmpi7hD21NkUgoasEh1vY.roa
File: IcdaJLOmpi7hD21NkUgoasEh1vY.roa (raw, json)
Hash identifier: P2ms0KbogvwySO85UfWurj+iW3R3+qdyvNXY7tLv8RM=
Subject key identifier: 21:C7:5A:24:B3:A6:A6:2E:E1:0F:6D:4D:91:48:28:6A:C1:21:D6:F6
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01978EAF01AEBCAECFFF296F489C0C3CAFFA
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/IcdaJLOmpi7hD21NkUgoasEh1vY.roa
Signing time: Fri 20 Jun 2025 18:52:03 +0000
ROA not before: Fri 20 Jun 2025 18:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:15c1::/32 maxlen: 32
2a11:15c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 23 Jun 2025 19:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:af:01:ae:bc:ae:cf:ff:29:6f:48:9c:0c:3c:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jun 20 18:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21c75a24b3a6a62ee10f6d4d9148286ac121d6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:00:c4:cd:cb:1b:33:e8:2c:b3:96:27:03:
ea:63:f6:a7:99:03:dc:26:d8:f4:da:90:fe:cf:cb:
24:68:24:0b:21:cf:b6:a6:30:0c:eb:e8:c9:5e:25:
91:ee:63:86:6f:13:13:e0:77:76:f6:ab:39:90:82:
b4:12:31:94:24:c3:e6:bf:48:3a:b3:87:33:5b:e9:
c0:44:f3:87:ca:80:90:cf:4a:06:2f:76:72:26:f1:
14:cf:26:5d:45:fc:b7:6b:e7:82:e1:33:56:46:40:
12:d3:e2:e2:62:9a:1f:48:97:7e:5a:e6:19:ac:33:
75:67:27:88:14:d0:99:24:d2:93:70:6e:f2:f4:16:
6a:df:56:b8:b6:b7:e3:71:08:68:ad:50:be:76:e2:
3c:21:50:79:c3:6d:8e:03:8b:92:dd:47:db:03:ba:
4a:08:d4:4d:53:c6:71:07:7d:86:90:ef:f2:87:46:
64:40:7f:47:df:3b:4e:76:01:06:36:e7:cc:9d:2c:
8d:6e:8c:6c:8f:f4:10:7a:36:82:05:df:39:de:70:
fa:96:93:7c:1c:92:38:72:d4:67:c8:10:a3:ee:4f:
9d:2f:34:74:06:74:8b:cc:52:d4:fb:d1:c3:be:2e:
45:15:b1:c2:d9:c0:25:e8:5d:05:00:12:a0:3a:dc:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:5A:24:B3:A6:A6:2E:E1:0F:6D:4D:91:48:28:6A:C1:21:D6:F6
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/IcdaJLOmpi7hD21NkUgoasEh1vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:15c1::/32
2a11:15c6::/32
Signature Algorithm: sha256WithRSAEncryption
e1:c9:67:95:56:b4:44:43:6a:26:12:4b:17:c3:f2:8c:99:74:
de:f8:2b:4e:23:11:d0:d3:0d:80:f1:97:1a:e6:38:ee:48:36:
2d:1f:08:9b:4f:9d:1b:54:07:ce:e6:ea:59:6a:fb:f4:9c:98:
26:20:73:91:68:db:a5:fa:13:9e:52:a2:29:fa:4b:2a:54:b0:
f8:3f:ed:66:c7:7b:fc:98:67:ee:f3:2c:a8:9d:69:67:b5:c9:
3c:35:7b:61:86:4d:d4:77:cb:11:1e:b0:20:e4:bf:2c:15:20:
3a:5e:c6:f2:a8:19:8c:ae:cc:53:f9:9b:ea:ac:e9:7b:69:5d:
b3:b8:b9:23:9b:5f:2d:d9:2c:13:21:ca:b5:ed:f5:ec:d4:2e:
eb:4a:d8:4f:66:85:49:90:ab:ff:f0:1c:84:7f:94:04:9a:98:
3a:90:b7:95:1b:29:32:b4:b5:b7:29:28:ce:25:48:d7:dd:d6:
96:af:85:b8:77:41:46:3b:27:27:1b:a1:a0:1c:58:a0:a8:81:
a4:98:71:c0:75:78:8d:23:3f:e9:b5:e7:60:7c:e8:99:5d:c4:
c1:e1:6e:c4:c7:f9:23:d8:c3:4d:c6:c8:f2:6e:29:24:7a:71:
7f:8c:6d:08:00:d0:3e:bc:7f:99:9e:0f:4e:38:0a:8a:85:ab:
68:cd:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:22:14 2025 by rpki-client