Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/syR8-PutE7WB1DOinwj8ghKef_4.roa
File: syR8-PutE7WB1DOinwj8ghKef_4.roa (raw, json)
Hash identifier: k9YDxezw6U1r5IFb5S3AGBY3EKxsKQ4Wzy8Bs2gcUnk=
Subject key identifier: B3:24:7C:F8:FB:AD:13:B5:81:D4:33:A2:9F:08:FC:82:12:9E:7F:FE
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01970E089DB92E7B6B5ADDA1370A6721E1E7
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/syR8-PutE7WB1DOinwj8ghKef_4.roa
Signing time: Mon 26 May 2025 19:18:55 +0000
ROA not before: Mon 26 May 2025 19:18:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4bc5::/32 maxlen: 32
2a0e:ccc1::/32 maxlen: 32
2a0e:ffc1::/32 maxlen: 32
2a0f:4346::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 02 Jun 2025 18:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:08:9d:b9:2e:7b:6b:5a:dd:a1:37:0a:67:21:e1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: May 26 19:18:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3247cf8fbad13b581d433a29f08fc82129e7ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:85:28:80:1c:4f:cd:49:25:dc:3e:94:e6:
db:2e:f0:f5:0a:c9:7d:ee:b3:a1:4c:6b:ab:80:ad:
e6:d8:08:89:81:72:bc:26:76:a6:ad:2a:d8:be:b8:
bb:8e:df:76:96:18:e0:45:8e:fc:ec:de:ac:7f:f3:
d6:b6:e6:94:66:b0:9e:a6:d2:cd:25:3e:c2:d1:6e:
3d:8a:d4:0a:af:f0:1a:03:e1:39:df:5b:ff:b6:1f:
4c:14:f7:b0:00:fc:94:e7:c6:1a:6f:52:3b:0b:dd:
01:04:6d:43:90:a5:b5:d7:f3:1b:41:c8:7f:fe:07:
07:b0:21:e0:b0:9b:d0:ee:ee:0c:df:24:38:66:7d:
04:1c:39:ec:4f:07:0c:b5:3c:2f:b0:5d:bc:52:db:
e3:49:65:b8:96:6e:f9:93:dc:0d:af:53:83:35:2a:
43:a0:43:01:fe:1c:72:50:95:8b:c2:a5:66:80:df:
37:b0:e1:33:9c:e6:c1:26:a7:7b:54:e8:7a:e7:5a:
33:40:ef:82:ff:28:b4:d6:f1:34:92:63:b8:db:3f:
e0:dd:4c:5b:39:05:a6:b0:c5:5f:b1:55:e2:b9:bc:
06:55:01:ca:21:ed:1b:eb:d7:a6:9d:4d:3b:d0:6b:
33:33:92:51:96:cb:00:5b:1a:28:18:29:fa:f0:0c:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:7C:F8:FB:AD:13:B5:81:D4:33:A2:9F:08:FC:82:12:9E:7F:FE
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/syR8-PutE7WB1DOinwj8ghKef_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc5::/32
2a0e:ccc1::/32
2a0e:ffc1::/32
2a0f:4346::/32
Signature Algorithm: sha256WithRSAEncryption
45:0d:9a:75:24:4d:58:05:38:29:e6:1c:42:fe:e4:38:ce:4d:
c9:52:5c:c4:6e:32:f0:ac:4b:b7:56:12:d5:75:b3:48:7e:d0:
82:f5:0e:ab:a3:f9:b7:e9:76:0f:cf:e9:c1:ad:28:c9:06:33:
aa:e9:71:00:f8:46:23:e4:08:be:9d:97:04:91:04:54:26:a6:
f5:7d:4d:7f:da:fd:7b:b5:1a:b0:14:66:8e:b6:79:8d:d7:1a:
ed:1e:49:31:a7:2d:9b:3e:02:df:6b:3b:75:59:f6:15:9b:40:
bd:90:59:57:e3:70:28:d2:67:04:80:6d:5b:4f:2c:76:17:40:
80:71:2a:38:c6:17:d2:2e:ec:9a:f6:3e:63:33:40:34:cd:ac:
dc:74:68:2f:c5:43:4a:9f:2e:ac:bc:7a:e8:d3:6c:02:c0:8a:
f8:18:2f:2b:67:cb:51:35:b4:a8:c2:5f:cd:17:35:ca:4a:b2:
b5:24:e0:a5:5d:fe:0d:01:61:44:a8:a0:39:aa:cb:5a:8a:3b:
a9:1c:da:ee:d4:53:f4:12:6b:a1:70:14:31:aa:ab:16:da:71:
20:b4:30:64:60:49:4f:10:0e:9c:75:64:8b:2d:db:b6:43:65:
f1:3c:8b:95:53:b5:08:4d:a8:26:1e:2b:1f:d6:46:7c:17:4b:
8e:34:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:30:15 2025 by rpki-client