Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/o_iLxjJjDtTSZh_mtHwcrPJtGQk.roa
File: o_iLxjJjDtTSZh_mtHwcrPJtGQk.roa (raw, json)
Hash identifier: 84OH4062/CZ3CB0zTm0NDGa0PW4het/UzlCY7d5IiVA=
Subject key identifier: A3:F8:8B:C6:32:63:0E:D4:D2:66:1F:E6:B4:7C:1C:AC:F2:6D:19:09
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0196F2D08544821B013F9CD028636D9137FB
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/o_iLxjJjDtTSZh_mtHwcrPJtGQk.roa
Signing time: Wed 21 May 2025 12:27:53 +0000
ROA not before: Wed 21 May 2025 12:27:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139309
IP address blocks: 2a01:3e6:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 13:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:d0:85:44:82:1b:01:3f:9c:d0:28:63:6d:91:37:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: May 21 12:27:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3f88bc632630ed4d2661fe6b47c1cacf26d1909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:e5:2a:a5:a3:d3:be:6e:11:b0:98:05:bc:
01:de:f5:c2:62:fe:f1:af:15:a5:47:4d:37:52:4b:
47:39:1f:a5:2a:b0:75:2a:42:05:fa:af:e3:ba:09:
7a:e5:83:f6:94:1a:38:36:57:86:25:4e:34:6c:1c:
97:c5:c6:ad:8c:a1:3f:ae:f4:dd:8c:f5:01:15:3e:
f1:b1:75:08:64:11:8c:47:01:2d:b9:ff:c3:54:8f:
50:5f:f6:7e:a6:40:d3:9e:56:61:ae:7c:6a:62:7f:
b1:a0:91:67:24:39:c0:0c:86:e9:5c:a3:4f:6e:7a:
68:11:98:02:de:10:7c:b6:a4:ff:4a:13:d9:47:f4:
de:d6:f9:3e:e2:be:14:cd:47:67:22:0a:76:7b:6c:
e7:ee:8b:d3:de:dd:f1:59:38:63:06:96:32:80:22:
4f:28:61:23:50:1a:a0:4b:47:27:21:5b:1a:ed:2f:
b1:13:9a:74:fd:e8:e0:cc:1a:55:fd:01:07:52:d7:
6a:7d:7f:90:22:1e:b3:6c:e7:2d:f7:a9:e0:bf:64:
69:e5:50:35:1f:2c:06:39:fb:b6:20:2e:48:6b:2d:
da:ab:d4:18:47:3c:0f:df:72:64:c6:28:3a:c7:30:
d8:1b:27:4d:43:ee:a6:86:e1:a5:42:6a:d5:36:76:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:8B:C6:32:63:0E:D4:D2:66:1F:E6:B4:7C:1C:AC:F2:6D:19:09
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/o_iLxjJjDtTSZh_mtHwcrPJtGQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:3e6:1::/48
Signature Algorithm: sha256WithRSAEncryption
75:40:4d:4b:65:97:ca:ff:d3:3c:3d:61:0e:a2:43:cf:39:f0:
0a:c0:05:78:bc:b8:37:d4:14:49:85:cf:e4:27:50:46:59:f5:
b5:79:e5:25:2d:90:b1:ba:9c:e5:4a:4d:ce:67:2c:8f:91:f4:
ea:1f:77:a7:54:86:97:d9:ab:8f:9d:f5:33:b8:5c:a1:a5:10:
26:c8:d2:ee:2f:ed:7a:f9:db:84:31:da:b3:21:45:06:2e:5c:
c7:78:30:3d:32:71:77:8a:7e:94:5b:7d:41:19:a7:32:17:ff:
93:85:38:e8:45:79:18:03:df:3f:bf:88:cc:b6:d1:3f:54:34:
29:35:7c:44:f9:c3:df:5c:9f:1f:c4:e6:48:55:81:a7:af:de:
7b:65:35:50:f9:67:a2:f4:a2:90:55:51:de:59:c1:4a:4d:a2:
25:10:4a:07:3b:fb:a8:8f:8d:44:44:7d:1e:70:17:75:a2:fa:
c9:56:5e:73:a2:fc:20:c6:69:52:0c:4b:09:8b:6d:9f:79:f5:
a4:1a:9e:f8:79:65:4e:40:7c:e8:f8:55:23:7d:8c:85:df:b0:
ce:23:2e:11:86:bd:49:ab:20:f3:b2:7a:13:01:54:ac:80:2e:
bf:ac:52:31:27:cc:94:57:6c:d1:0a:0f:26:42:52:d0:72:7f:
f1:de:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:18:36 2025 by rpki-client