Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/7JbG6twNb3L07OWqBdmW06SxxYM.roa
File: 7JbG6twNb3L07OWqBdmW06SxxYM.roa (raw, json)
Hash identifier: B1W6AFWCH/BQ2L0ucdhr4/XJ3BMQCzn4HB3smCm4Kis=
Subject key identifier: EC:96:C6:EA:DC:0D:6F:72:F4:EC:E5:AA:05:D9:96:D3:A4:B1:C5:83
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 0197A29DCE429EEE117CA34C63D646887EE1
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/7JbG6twNb3L07OWqBdmW06SxxYM.roa
Signing time: Tue 24 Jun 2025 15:45:40 +0000
ROA not before: Tue 24 Jun 2025 15:45:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a13:4a80::/29 maxlen: 29
2a13:df40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Jun 2025 18:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:9d:ce:42:9e:ee:11:7c:a3:4c:63:d6:46:88:7e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Jun 24 15:45:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec96c6eadc0d6f72f4ece5aa05d996d3a4b1c583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:1a:8e:d3:23:7b:93:76:4c:bc:b7:24:70:
9a:c2:97:e4:56:cb:de:61:34:86:bd:ba:81:6d:1e:
50:58:3a:59:bc:e9:26:f3:26:ee:7a:fc:fc:71:29:
4f:77:2a:96:c7:ab:a1:69:e4:6c:19:7e:a9:c6:e4:
7c:35:8e:15:81:79:b9:2b:bf:cb:1d:16:d2:af:7c:
a7:69:7e:ba:36:12:5d:31:4d:65:5d:d6:8d:86:5b:
f7:8b:4d:2a:3c:c6:72:c4:ce:18:96:95:c4:2b:00:
29:ec:4c:b6:b5:c6:a0:cc:88:6e:92:a8:ea:50:87:
84:1b:26:f5:a5:5d:e4:b9:79:1e:dd:2b:57:b0:4a:
18:66:5f:c8:10:ec:84:51:7c:f1:28:69:5f:09:c1:
9f:48:2b:45:ab:db:de:e7:ec:16:c6:ec:89:6f:16:
57:be:de:b6:62:b4:e6:84:ae:f9:17:03:55:09:26:
e4:56:17:d9:a1:be:ae:aa:fa:18:d3:73:fe:66:c5:
d3:21:04:01:7e:d4:f4:ac:3d:44:25:35:bf:2f:2d:
b0:60:e8:05:62:71:0a:65:7f:bd:0c:fd:03:2a:40:
37:6f:32:06:2e:e0:b2:4d:21:4a:13:36:ea:55:1d:
ce:94:82:0a:7b:7a:20:1d:b9:d0:0b:8d:3b:34:42:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:96:C6:EA:DC:0D:6F:72:F4:EC:E5:AA:05:D9:96:D3:A4:B1:C5:83
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/7JbG6twNb3L07OWqBdmW06SxxYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4a80::/29
2a13:df40::/29
Signature Algorithm: sha256WithRSAEncryption
5a:ab:a8:c0:d7:3b:b4:7d:2f:c6:94:7f:ee:2a:43:49:99:69:
c6:9b:cd:5e:c2:a7:cd:50:96:b5:25:ce:33:ca:99:11:94:7c:
3e:87:bb:5c:33:6f:dd:e1:25:6f:31:25:31:09:15:29:52:cf:
86:83:e6:a6:db:35:82:19:06:6f:37:70:01:f3:1a:f7:d5:34:
c9:8c:01:c2:f9:1b:bd:a6:4b:c4:18:1b:f6:41:9d:68:8f:04:
ea:8e:5b:2d:8a:e9:c1:d4:4a:5d:38:55:1a:4e:43:4a:42:0a:
78:7c:01:b1:3a:82:80:95:60:6b:14:a6:fa:a4:a7:aa:12:15:
26:d9:ec:dc:85:49:7b:98:87:56:a2:51:e8:8b:d6:97:b4:70:
31:0f:5b:67:3e:b8:9b:73:94:e7:81:b1:6e:df:ab:7b:5e:2f:
92:b6:a7:e6:8a:a3:24:c2:00:96:57:f5:df:95:b3:94:89:cb:
6f:ee:d6:86:3b:53:f1:40:83:55:83:e5:09:98:f9:41:04:99:
33:6f:24:6e:b7:8c:ff:7d:54:35:dc:f7:b6:59:4d:d3:83:5e:
21:84:28:6a:51:f7:8e:77:3e:2a:0d:d1:8b:8a:38:51:b2:43:
bd:06:f7:65:14:ca:39:5a:a0:39:88:d4:3e:40:12:27:34:38:
ce:af:40:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:22:48 2025 by rpki-client