Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/BRr7uzlUm_m_yLctQDLp-VZQjBI.roa
File: BRr7uzlUm_m_yLctQDLp-VZQjBI.roa (raw, json)
Hash identifier: FJWVkEWnqdrXlfRGn511WTZN0Kzyn2VHLdgVlVV+aMg=
Subject key identifier: 05:1A:FB:BB:39:54:9B:F9:BF:C8:B7:2D:40:32:E9:F9:56:50:8C:12
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 0196F4AF5ACBDA95C5AE9195DCB8ACB157AB
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/BRr7uzlUm_m_yLctQDLp-VZQjBI.roa
Signing time: Wed 21 May 2025 21:10:54 +0000
ROA not before: Wed 21 May 2025 21:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205145
IP address blocks: 2a0d:7a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 01 Jun 2025 20:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f4:af:5a:cb:da:95:c5:ae:91:95:dc:b8:ac:b1:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: May 21 21:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=051afbbb39549bf9bfc8b72d4032e9f956508c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:15:ca:0f:68:8a:f6:58:9f:e8:ca:c7:87:
e1:a0:7c:92:26:a8:3e:37:8f:db:3b:34:16:bd:0c:
be:41:b1:3d:e9:cf:cf:4e:47:21:c8:6b:13:d3:47:
6c:ba:b7:94:8c:c1:e4:f8:6b:3d:24:80:cc:d3:f7:
b4:31:de:03:4a:e2:ab:d1:5d:4d:02:3b:8c:71:d1:
2a:17:76:c8:9e:47:1e:69:35:c5:2a:1e:4f:9c:e2:
fc:4c:92:9d:9f:d1:60:cb:ed:5d:62:97:13:ef:6e:
43:a1:49:8e:41:1a:a3:b5:6b:75:41:8f:97:42:48:
7f:8d:cb:d0:79:f0:39:28:4c:61:e2:be:01:86:19:
f8:bd:4f:13:99:f0:20:cb:cb:65:eb:05:b8:d2:44:
ed:06:89:97:1c:4a:d9:fc:62:a4:9e:2e:21:26:7a:
30:e9:c4:a6:fd:38:3d:d0:86:07:98:de:06:22:93:
95:e2:4b:d2:79:3b:7f:f2:94:09:9f:ea:a4:c2:3c:
d3:3d:52:2f:5c:2f:40:fd:2c:d6:b9:69:73:3d:46:
79:e5:62:e9:01:63:62:ab:cc:0d:39:25:b9:49:8f:
de:a9:e8:69:ba:c1:18:86:77:33:c3:d9:3b:b7:bb:
d8:f2:6b:04:79:25:42:85:56:c4:54:b0:7b:27:e4:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1A:FB:BB:39:54:9B:F9:BF:C8:B7:2D:40:32:E9:F9:56:50:8C:12
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/BRr7uzlUm_m_yLctQDLp-VZQjBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
3b:a0:27:6d:3c:57:56:d3:ef:05:80:bb:ca:ec:83:2d:00:49:
03:7d:39:44:71:2c:9a:5b:b1:af:5c:bf:d1:bb:bd:d8:e0:97:
b6:96:f6:53:62:b7:7c:e4:6c:e6:88:23:55:b0:c8:95:7e:a3:
b6:3a:5d:dd:10:97:5e:6f:6d:ae:a0:ab:2f:d4:22:5e:bd:e1:
0f:e7:12:fa:ca:93:b2:21:e2:59:c0:6b:8f:b0:79:e5:af:cf:
bf:b0:32:50:4c:df:9b:e6:48:9a:c3:33:ee:55:80:86:3d:92:
89:97:df:65:22:71:99:dd:83:de:3e:9f:50:78:1e:ae:3c:49:
25:c4:ef:a7:4a:86:8c:d6:79:4b:90:e7:9f:ed:26:82:68:18:
33:58:7e:74:40:c6:03:b6:85:d9:2e:26:34:c3:0c:60:26:1a:
84:ac:0b:98:e1:77:c8:4e:3c:95:79:49:93:61:c1:85:06:2d:
b4:b3:c4:87:97:5a:9b:e2:69:ad:47:c7:33:52:02:1f:d4:64:
be:6a:43:2e:1f:19:33:34:46:d0:63:20:14:9e:6e:7d:c8:a5:
5e:38:1d:18:3b:f4:fc:5b:de:03:6c:7d:4f:fd:d9:11:85:cd:
cd:57:dc:ef:ae:5b:0b:7f:43:ae:96:9b:70:2a:81:ca:cc:7e:
c7:ec:91:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:18:09 2025 by rpki-client