Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/JZdvcT3e63WWWo8LJCV_KnSXAP8.roa
File: JZdvcT3e63WWWo8LJCV_KnSXAP8.roa (raw, json)
Hash identifier: /DLLQNbRriIQQIiQMR4Iwn/uKT9LbkNxpABOKjpi0pU=
Subject key identifier: 25:97:6F:71:3D:DE:EB:75:96:5A:8F:0B:24:25:7F:2A:74:97:00:FF
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01978CEC93D5745A8B9E56E81F34E26A16DE
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/JZdvcT3e63WWWo8LJCV_KnSXAP8.roa
Signing time: Fri 20 Jun 2025 10:40:03 +0000
ROA not before: Fri 20 Jun 2025 10:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:15c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Jun 2025 18:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:ec:93:d5:74:5a:8b:9e:56:e8:1f:34:e2:6a:16:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jun 20 10:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25976f713ddeeb75965a8f0b24257f2a749700ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:8d:d7:cc:48:3b:15:3f:b8:75:42:e8:40:
19:53:fb:04:32:99:1d:67:e5:50:b4:37:72:09:29:
fb:85:e9:13:35:b4:f8:8b:62:2f:12:ed:76:78:bf:
01:02:56:4c:ca:44:6a:13:f5:fc:87:a7:3d:cf:fe:
44:cc:7a:28:ca:69:32:c5:1d:1f:9b:df:5d:a7:31:
1a:e5:59:ed:44:30:5f:bc:ab:42:aa:3f:07:21:04:
2d:94:6e:3c:69:dd:da:e6:bc:9a:36:de:6e:10:c0:
4b:3f:4c:2a:5f:f4:40:f0:c9:ff:7d:e1:9d:3d:4a:
7e:e4:d1:b3:94:5e:c9:bf:d4:69:b7:ca:f0:17:26:
78:2c:18:db:94:f2:68:5a:dd:19:57:45:b6:a2:99:
5a:ff:a7:e4:e2:de:b3:02:64:04:85:8e:6f:15:ef:
7f:c2:fc:ed:f5:5a:2b:43:26:68:b5:a7:98:09:65:
2d:e2:67:91:0b:c1:45:ed:1a:18:4e:c4:72:89:7a:
38:6a:d7:0f:72:dd:ea:b1:60:82:66:52:42:84:0b:
e2:65:c5:2c:41:5b:2c:01:43:69:ce:41:4b:b5:68:
c1:d3:f2:70:b0:7c:2d:4b:7a:2a:97:d9:4a:7b:7e:
ee:3d:a2:9e:78:8a:97:f5:0f:86:f9:c3:47:de:96:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:6F:71:3D:DE:EB:75:96:5A:8F:0B:24:25:7F:2A:74:97:00:FF
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/JZdvcT3e63WWWo8LJCV_KnSXAP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:15c1::/32
Signature Algorithm: sha256WithRSAEncryption
0d:0b:cd:26:c0:47:cb:ab:6d:41:9a:48:07:d8:aa:d9:4c:a8:
dd:8a:06:36:7d:50:d3:d3:57:68:ae:af:d6:5c:62:1a:be:52:
20:00:f7:ab:ab:83:66:c3:70:0d:61:0d:12:62:49:9d:f7:15:
ce:a5:8c:fa:4d:b2:47:65:47:8c:02:1f:b9:45:5f:e1:24:ac:
ad:ac:c5:fa:53:e6:db:28:6b:d0:d4:8b:87:fc:70:66:95:cf:
e5:c0:b0:92:36:f5:56:2f:98:78:a4:95:ba:c7:a2:d4:0d:73:
7e:9f:81:7f:53:64:1a:0c:87:c5:7e:75:e8:a7:5d:39:29:a1:
70:70:8c:55:94:4c:06:7c:3b:69:62:43:e7:51:37:dd:8a:f5:
49:2f:be:42:40:bd:0a:28:46:5e:db:eb:ae:f7:0b:25:07:7b:
1b:9d:b4:ee:d5:f8:2d:c2:8e:e7:88:7a:ac:2c:4d:da:14:8c:
32:e5:3f:2a:b4:65:d7:55:f9:16:4a:cf:a8:cf:40:55:26:b8:
7e:6b:e8:39:ac:9d:0a:ef:a0:ee:b5:ad:0c:40:9c:16:d7:4d:
5b:fb:54:77:19:9b:0f:4f:47:70:02:26:66:88:62:60:eb:73:
db:27:7e:60:29:84:60:d3:95:f2:9c:5e:ef:3c:9f:67:87:fa:
14:71:c6:27
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZeM7JPVdFqLnlboHzTiahbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl
N2IwYmUwHhcNMjUwNjIwMTA0MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTk3NmY3MTNkZGVlYjc1OTY1YThmMGIyNDI1N2YyYTc0OTcwMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NGN18xIOxU/uHVC6EAZU/sEMpkd
Z+VQtDdyCSn7hekTNbT4i2IvEu12eL8BAlZMykRqE/X8h6c9z/5EzHooymkyxR0f
m99dpzEa5VntRDBfvKtCqj8HIQQtlG48ad3a5ryaNt5uEMBLP0wqX/RA8Mn/feGd
PUp+5NGzlF7Jv9Rpt8rwFyZ4LBjblPJoWt0ZV0W2opla/6fk4t6zAmQEhY5vFe9/
wvzt9VorQyZotaeYCWUt4meRC8FF7RoYTsRyiXo4atcPct3qsWCCZlJChAviZcUs
QVssAUNpzkFLtWjB0/JwsHwtS3oql9lKe37uPaKeeIqX9Q+G+cNH3paUQQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCWXb3E93ut1llqPCyQlfyp0lwD/MB8GA1UdIwQY
MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt
NDFiYjIxYWMyODAxLzEvSlpkdmNUM2U2M1dXV284TEpDVl9LblNYQVA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx
LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEVwTAN
BgkqhkiG9w0BAQsFAAOCAQEADQvNJsBHy6ttQZpIB9iq2Uyo3YoGNn1Q09NXaK6v
1lxiGr5SIAD3q6uDZsNwDWENEmJJnfcVzqWM+k2yR2VHjAIfuUVf4SSsrazF+lPm
2yhr0NSLh/xwZpXP5cCwkjb1Vi+YeKSVusei1A1zfp+Bf1NkGgyHxX516KddOSmh
cHCMVZRMBnw7aWJD51E33Yr1SS++QkC9CihGXtvrrvcLJQd7G5207tX4LcKO54h6
rCxN2hSMMuU/KrRl11X5FkrPqM9AVSa4fmvoOaydCu+g7rWtDECcFtdNW/tUdxmb
D09HcAImZohiYOtz2yd+YCmEYNOV8pxe7zyfZ4f6FHHGJw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:29:49 2025 by rpki-client