Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/xVjfZWZw10aAKxY2vDC4jLZs9wY.roa
File: xVjfZWZw10aAKxY2vDC4jLZs9wY.roa (raw, json)
Hash identifier: 428gAlc1UqF0g60/MLEb0uDC2oiQfyHCOnMYLfRD6fE=
Subject key identifier: C5:58:DF:65:66:70:D7:46:80:2B:16:36:BC:30:B8:8C:B6:6C:F7:06
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 0196389943C7AB73F8A4C2EB842905AF91A1
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/xVjfZWZw10aAKxY2vDC4jLZs9wY.roa
Signing time: Tue 15 Apr 2025 08:38:10 +0000
ROA not before: Tue 15 Apr 2025 08:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15557
IP address blocks: 2a13:7506:9004::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Apr 2025 13:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:99:43:c7:ab:73:f8:a4:c2:eb:84:29:05:af:91:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Apr 15 08:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c558df656670d746802b1636bc30b88cb66cf706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:ae:9c:b2:b7:fe:4a:0d:e5:fd:b9:fc:31:
ec:e8:4e:f0:b3:6e:33:cf:b6:ea:83:a2:c3:17:63:
0c:13:24:a4:f6:9b:a8:da:7d:64:65:ca:8e:0f:be:
b8:b3:f6:56:08:70:65:3f:e1:72:e2:89:b6:fd:73:
06:fd:7d:45:13:b0:cf:40:d3:0e:a5:30:bb:66:d5:
e0:af:b0:7c:09:69:3b:af:8d:ab:40:d9:ce:30:fa:
4d:f5:97:7d:72:a7:0f:61:02:b6:51:e2:7b:1b:f8:
dd:d9:9b:17:07:cf:ca:20:67:70:31:8c:44:ce:34:
0a:d1:36:3d:8f:f2:d2:5b:5c:19:e0:5e:4e:01:46:
15:32:d4:2a:0d:90:aa:77:02:c6:dd:82:f3:0d:2d:
07:6d:59:c2:41:23:88:57:fb:85:75:5e:cd:41:2a:
93:11:80:76:86:50:02:9a:b9:a5:15:32:d0:a4:8f:
84:30:de:40:f5:e0:ee:2f:ad:8b:74:0f:e3:d3:3b:
bb:90:76:28:01:42:a7:6f:2f:ad:be:54:c5:ff:20:
e9:25:4d:82:43:a6:58:cf:fb:da:cc:43:27:51:11:
32:1e:e5:2b:f9:ff:68:ef:e7:ec:4c:35:b7:83:91:
0d:54:6b:5a:88:9c:99:03:0c:5b:15:df:7b:b6:8e:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:58:DF:65:66:70:D7:46:80:2B:16:36:BC:30:B8:8C:B6:6C:F7:06
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/xVjfZWZw10aAKxY2vDC4jLZs9wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7506:9004::/48
Signature Algorithm: sha256WithRSAEncryption
91:74:ac:81:ca:3c:5f:cd:eb:66:8d:a3:06:c1:ea:25:e4:3d:
8b:1b:ea:e9:b8:47:f1:4b:61:4c:57:dc:b8:61:1e:a7:ca:a8:
a2:75:dd:d4:09:a9:1f:7e:ee:54:46:b4:a6:d7:4b:9b:f2:b7:
ef:07:cc:f1:d5:9a:60:c7:a5:d1:59:77:3d:b9:67:52:01:23:
e1:d6:07:0d:0d:b8:15:a2:8e:a1:03:c0:69:5e:0d:4b:86:32:
ce:9b:cb:91:01:34:4e:5a:6e:b3:82:42:5a:5e:ec:f6:d0:c5:
5f:fa:60:3b:cb:c0:e0:c1:0b:5d:e3:27:58:59:d4:5a:a6:14:
01:3b:7b:d7:b0:84:9f:fa:98:6f:10:93:4a:ed:45:17:fe:4d:
8b:5e:d5:4a:da:03:9e:41:13:48:40:4d:a5:1c:09:26:b3:98:
34:11:99:7e:b8:41:53:a8:e9:a9:84:6e:1e:76:73:a6:78:07:
a4:55:2b:c5:f7:d4:6b:22:0e:0d:fe:35:d9:c1:88:b0:c5:b2:
21:ff:d6:2b:ee:d0:35:f8:e5:95:e5:19:4e:33:c7:c4:3c:9e:
2d:f9:db:ec:ea:0f:68:50:35:43:92:50:05:c8:f9:e2:09:73:
43:4b:7c:9e:f0:50:5f:84:ea:6d:a5:75:e3:6b:b3:8f:bc:af:
77:cb:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:49:22 2025 by rpki-client