Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/9tdd-PcmY7fi9jkarvWld8AMia8.roa
File: 9tdd-PcmY7fi9jkarvWld8AMia8.roa (raw, json)
Hash identifier: XBVYk2ZvCH9Q4KvG7ohkgBAG5QlzH0+q4eH/+scCqAE=
Subject key identifier: F6:D7:5D:F8:F7:26:63:B7:E2:F6:39:1A:AE:F5:A5:77:C0:0C:89:AF
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019718790A63966A795E5ED8C059B8806C30
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/9tdd-PcmY7fi9jkarvWld8AMia8.roa
Signing time: Wed 28 May 2025 19:57:55 +0000
ROA not before: Wed 28 May 2025 19:57:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2001:3080::/29 maxlen: 29
2a0e:a780::/29 maxlen: 29
2a10:6c40::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:8000::/29 maxlen: 29
2a13:de40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 04 Jun 2025 19:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:79:0a:63:96:6a:79:5e:5e:d8:c0:59:b8:80:6c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: May 28 19:57:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d75df8f72663b7e2f6391aaef5a577c00c89af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:38:2d:ed:9d:5a:dd:b0:73:18:a0:69:f7:
ea:a9:aa:b3:49:a8:66:b2:80:ec:3d:a6:4a:5b:d8:
79:c9:89:17:47:e1:9e:40:1b:ee:af:ed:38:d9:06:
63:fc:60:f8:a1:a3:5e:d8:fd:87:ae:0a:46:0c:7d:
b7:84:82:2e:c4:2d:78:16:3c:5e:b6:50:1b:a4:1f:
e0:5f:a0:66:8c:d6:8f:a2:cd:b5:7c:2c:fc:9f:b6:
66:df:b8:93:fe:1d:36:a0:c4:2c:d3:da:15:6f:69:
e7:b9:11:b7:1e:20:95:ee:dc:c6:59:8c:08:ae:42:
20:8c:6a:cf:35:30:7b:7d:db:0a:71:d7:52:14:61:
60:9b:a2:0f:1c:32:d7:1a:75:17:72:fc:08:e0:42:
cf:c9:eb:b2:dd:83:f3:e6:7e:4f:73:b6:db:84:b8:
78:b5:18:94:12:0f:fe:39:45:19:07:80:ce:3c:04:
d2:c6:2e:9c:87:13:28:c2:58:84:5b:d8:18:d5:2f:
cc:9b:20:7f:de:a0:8f:ae:6d:f1:58:6b:1d:75:5b:
39:53:dd:89:63:35:c1:20:a0:6a:23:c8:85:42:9e:
be:27:30:82:94:b3:56:c4:3e:7d:61:00:a6:9c:ce:
f1:2c:ec:09:84:35:c9:de:26:c8:6f:a4:ab:c5:74:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:5D:F8:F7:26:63:B7:E2:F6:39:1A:AE:F5:A5:77:C0:0C:89:AF
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/9tdd-PcmY7fi9jkarvWld8AMia8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3080::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:8000::/29
2a13:de40::/29
Signature Algorithm: sha256WithRSAEncryption
88:93:19:d4:ff:a5:24:69:57:a0:c8:76:58:a2:ee:75:32:b9:
e1:97:0d:c4:57:4e:15:ff:7d:fa:d2:71:dd:33:37:4b:d8:11:
96:e3:ee:a8:fd:a7:b5:3a:fc:f1:d4:46:1a:a9:6f:ee:95:9f:
1b:f5:e9:24:5a:71:84:7b:f7:24:c7:eb:c2:89:8b:e0:73:8e:
34:04:45:59:0d:77:2d:51:78:1d:58:75:c7:cd:e3:66:46:46:
da:d9:ad:e2:68:37:15:8f:65:63:ea:c5:61:8a:1f:99:ac:47:
b9:7d:82:6a:28:01:f3:b8:33:28:bb:86:d3:31:ba:ba:ed:0d:
be:f1:c1:90:4d:88:b7:b0:75:d7:60:8c:97:7a:64:55:fd:5a:
b2:4d:b2:f0:cc:0d:48:af:f4:e4:93:5e:d6:87:0b:6e:0b:1f:
c5:82:0f:90:2d:ee:df:d9:05:f4:fb:7a:02:9e:82:ec:25:0e:
0c:10:2e:bd:3e:23:d5:7f:3f:c6:53:39:d0:eb:b1:81:ae:1c:
97:2b:9e:f5:29:8d:2d:41:d7:ab:53:4a:af:db:7a:3d:64:70:
66:4b:63:e4:94:22:dc:c3:e7:5c:70:a4:37:b3:f2:a5:5b:32:
52:df:c7:0a:5e:a9:6b:16:63:61:0b:f8:f0:6b:07:2f:6d:25:
54:e9:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:57:12 2025 by rpki-client