Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/RzAa9Hxe-6tZK33Swx4XPGN02BU.roa
File: RzAa9Hxe-6tZK33Swx4XPGN02BU.roa (raw, json)
Hash identifier: lYbJPY+1idJgr45KAo14900I3WQmurJD0WXnfJrDwww=
Subject key identifier: 47:30:1A:F4:7C:5E:FB:AB:59:2B:7D:D2:C3:1E:17:3C:63:74:D8:15
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 01970CB706E1E29D335C6349B3570373C0B9
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/RzAa9Hxe-6tZK33Swx4XPGN02BU.roa
Signing time: Mon 26 May 2025 13:10:10 +0000
ROA not before: Mon 26 May 2025 13:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210772
IP address blocks: 139.28.140.0/22 maxlen: 22
2a09:740::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Jun 2025 13:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:b7:06:e1:e2:9d:33:5c:63:49:b3:57:03:73:c0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: May 26 13:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47301af47c5efbab592b7dd2c31e173c6374d815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:2b:3f:2d:79:38:e8:00:5f:78:b1:3b:89:
a7:67:e0:0c:a9:d4:87:2e:22:60:73:e2:93:a7:26:
60:a4:8f:c6:46:fd:52:c2:0c:0f:7d:94:bb:d2:ec:
39:6b:ef:74:77:22:07:e9:38:3e:a7:f6:b3:69:a0:
b3:f7:93:32:19:80:be:74:8b:fa:9a:41:f7:7a:90:
46:63:04:39:c6:2a:79:66:45:22:a7:ad:18:3b:ba:
96:5b:ff:76:b6:9a:56:05:26:41:79:9c:e1:3a:a4:
f4:f0:45:08:b6:2b:34:c7:37:5a:0b:a5:30:36:7a:
65:6f:f5:65:c1:65:f3:94:c3:88:3b:28:8b:66:4e:
11:a2:14:aa:44:e7:af:2f:7e:e7:ef:cd:c9:e3:1c:
c8:de:10:44:d8:2f:52:03:64:d0:0c:58:21:46:ea:
ce:46:6a:fd:6c:8d:ff:57:fe:5c:3f:38:48:6f:89:
54:ae:03:c7:95:52:88:3f:76:a1:16:b9:c9:95:6f:
a6:0a:8e:0a:6d:f6:48:09:fd:dc:ce:30:1b:cb:a8:
b9:da:8b:8b:28:99:7d:37:3f:ec:b4:0d:c8:45:c2:
88:68:94:65:a6:f2:3b:a6:1b:9d:9f:8e:03:39:ad:
45:d5:bb:40:17:cb:61:c2:59:7d:0e:6e:6f:b7:af:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:1A:F4:7C:5E:FB:AB:59:2B:7D:D2:C3:1E:17:3C:63:74:D8:15
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/RzAa9Hxe-6tZK33Swx4XPGN02BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.140.0/22
IPv6:
2a09:740::/32
Signature Algorithm: sha256WithRSAEncryption
2a:3b:a6:00:2e:7b:df:99:25:b4:5d:31:f5:b9:5e:5e:c5:20:
bb:b1:4c:58:19:da:85:b0:32:2e:a8:42:df:2e:92:0b:3b:b6:
62:ea:4f:b8:8d:18:a2:64:cc:df:5a:3f:e0:20:82:7f:52:e8:
95:40:69:8d:25:4d:85:fd:63:c6:4a:be:4f:cd:b3:39:07:5f:
39:84:e7:b7:01:a1:40:78:ab:46:7a:aa:5a:52:08:e0:8c:7a:
10:26:80:a5:fb:f0:6a:6c:97:82:a8:87:2b:92:ba:69:c9:70:
74:89:fa:f8:d5:44:f0:39:5d:bc:2a:48:ea:7c:78:a2:1b:d6:
2d:2b:f0:28:63:2b:d3:41:a2:37:99:f0:ca:c4:8d:77:cb:52:
ab:da:f5:7d:6a:68:08:aa:b1:c3:81:1d:2c:75:06:e3:63:11:
0f:7d:b9:37:23:49:c0:0d:e3:0c:e6:1c:b2:2b:e1:aa:a8:1d:
e7:ee:5e:0f:0e:5b:80:9c:03:9a:3d:59:ec:27:0a:9c:5d:cc:
61:0a:31:5f:ba:19:33:63:4c:92:28:5b:c2:a8:aa:3d:13:90:
3a:4a:a4:ee:3f:7a:95:a8:f2:36:c6:41:fa:37:b3:ab:6c:ec:
83:c4:32:bf:2a:f9:a7:5c:84:78:5a:9c:61:fe:ba:22:fd:f5:
0d:7f:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:48:31 2025 by rpki-client