Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/plPzGQ7H0QZCFJ8mVlpWoVnIo6s.roa
File: plPzGQ7H0QZCFJ8mVlpWoVnIo6s.roa (raw, json)
Hash identifier: DD2axg+uqAL2JA1RgTjHgW6Q6ee3euZRRpuk8c4wwyM=
Subject key identifier: A6:53:F3:19:0E:C7:D1:06:42:14:9F:26:56:5A:56:A1:59:C8:A3:AB
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0196DAD62943AB54034B42BCFD94624F87F8
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/plPzGQ7H0QZCFJ8mVlpWoVnIo6s.roa
Signing time: Fri 16 May 2025 20:43:10 +0000
ROA not before: Fri 16 May 2025 20:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a0e:7780::/29 maxlen: 29
2a11:3b40::/29 maxlen: 32
2a12:6640::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:f40::/29 maxlen: 32
Validation: Failed, certificate revoked on Sun 25 May 2025 14:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:d6:29:43:ab:54:03:4b:42:bc:fd:94:62:4f:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 16 20:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a653f3190ec7d10642149f26565a56a159c8a3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:e2:7f:21:af:be:e8:71:74:58:8f:59:61:
98:22:d0:91:40:36:60:0e:05:a9:6d:83:fe:ad:77:
2a:81:7b:1b:50:5f:80:39:3b:80:62:f1:12:33:29:
27:03:ef:4b:bc:5c:09:70:5a:49:45:d6:be:70:d1:
c4:19:2e:15:2a:f9:97:61:de:25:b5:8d:70:40:d1:
d3:81:27:89:ed:21:d6:37:d0:85:d0:36:7d:8e:42:
90:ba:f2:05:45:b5:be:bc:e1:76:1d:3f:c8:72:81:
f4:1d:53:6f:c6:41:32:57:fd:91:39:e0:b6:85:86:
26:61:82:8e:3d:75:af:2a:b6:bd:c2:ca:c4:6f:b7:
30:8e:8b:da:91:e6:17:3c:62:a1:65:b4:1a:91:05:
20:37:5b:86:c3:96:43:1d:0a:59:be:b8:4e:eb:f4:
15:66:b9:7e:1e:b8:9f:dd:43:e6:de:89:ca:e4:30:
22:88:79:dd:36:63:11:30:97:b0:de:3d:aa:54:7f:
11:ef:29:ed:ac:c7:5a:a0:e7:3b:ea:78:cf:a4:d5:
ae:14:de:0f:31:49:9b:a5:35:70:f8:6a:1a:2d:6a:
48:36:b7:ff:db:49:04:6d:62:a8:14:0e:c6:c7:91:
2e:19:30:e6:a6:2e:26:19:67:4e:3a:5e:99:e7:b5:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:53:F3:19:0E:C7:D1:06:42:14:9F:26:56:5A:56:A1:59:C8:A3:AB
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/plPzGQ7H0QZCFJ8mVlpWoVnIo6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7780::/29
2a11:3b40::/29
2a12:6640::/29
2a13:ba00::/29
2a14:c0::/29
2a14:f40::/29
Signature Algorithm: sha256WithRSAEncryption
bc:f2:9f:a1:ce:35:af:fd:75:8d:8a:26:5e:af:11:73:92:82:
c2:32:97:6b:0c:5d:90:ea:19:56:92:d4:f8:e7:22:74:23:dd:
3e:d5:58:04:e6:6d:f8:b8:b9:cb:75:72:80:40:f6:f4:a2:39:
3f:cb:78:31:9e:87:2c:ea:20:61:a8:2a:b2:77:ff:a4:cb:01:
91:a9:42:db:d5:6e:b3:c4:c2:56:4f:b1:04:fd:6a:4a:5d:ae:
66:7c:1e:2b:1a:94:99:61:e0:13:c7:1a:ac:59:d3:b8:9c:14:
7d:a6:71:93:ee:38:d4:1e:a6:88:07:7e:da:72:c8:7e:d7:8e:
06:d8:12:71:17:93:0e:0c:79:94:96:df:d9:04:56:f6:fd:a5:
e4:33:6e:b2:d5:24:93:16:59:9a:7a:6b:5a:88:a4:13:5c:3a:
61:81:67:d2:7c:df:18:13:75:a4:28:48:1c:e7:8d:cd:4c:5c:
fe:0b:c6:4e:ea:93:72:c6:e8:24:dd:a7:46:24:bf:2a:4c:a8:
ed:57:10:d7:fc:e5:c5:68:ef:aa:04:52:aa:50:5e:7a:3f:4e:
25:7d:c8:04:27:cb:0d:3a:5d:1a:9f:ca:11:c4:26:6f:00:20:
95:75:5b:01:3a:19:28:1f:7d:22:5a:0d:56:17:df:61:42:ae:
84:ad:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:48:27 2025 by rpki-client