Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8E6fxMVWF5OiWFxj1C_eKapWc3I.roa
File: 8E6fxMVWF5OiWFxj1C_eKapWc3I.roa (raw, json)
Hash identifier: bdvyNkwgaMheQmGchuIau1m64I45SlhSouYdKAqXA6w=
Subject key identifier: F0:4E:9F:C4:C5:56:17:93:A2:58:5C:63:D4:2F:DE:29:AA:56:73:72
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0199791B69D5B4FD4485411CD9E8A580C5DA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8E6fxMVWF5OiWFxj1C_eKapWc3I.roa
Signing time: Wed 24 Sep 2025 00:24:23 +0000
ROA not before: Wed 24 Sep 2025 00:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214630
IP address blocks: 2a12:bec4:1c40::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Oct 2025 19:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:79:1b:69:d5:b4:fd:44:85:41:1c:d9:e8:a5:80:c5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 24 00:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f04e9fc4c5561793a2585c63d42fde29aa567372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:eb:cc:f8:d6:18:e8:0c:19:32:72:83:ac:
17:9d:ac:6b:90:a1:b5:ec:ec:4d:ae:c9:15:28:d5:
f9:d9:fc:7b:57:e4:57:35:8d:fe:4e:6f:9a:72:da:
30:19:20:2e:dd:bc:da:c3:bc:0e:92:f9:54:3d:3c:
12:14:e9:80:55:24:dc:5b:3b:07:e0:9c:ca:78:ad:
85:85:51:72:74:37:ca:74:e1:b6:83:a1:c6:7c:6b:
ba:54:98:4d:4d:1e:a1:83:80:af:55:7a:36:fa:6f:
bd:60:b3:1a:2a:15:19:0b:e7:fb:03:00:56:de:dc:
cb:67:7c:a4:3d:67:be:3d:6d:f8:de:56:1d:44:69:
3c:7e:f9:29:bf:53:f8:1d:e8:17:b9:56:27:30:db:
fa:6c:de:72:65:d8:ce:12:b4:cc:ee:89:e8:5f:be:
7d:c6:1e:fe:df:03:26:f9:dd:5c:3f:a0:6e:0a:7a:
da:c2:c7:72:47:ca:f4:bd:75:9e:ee:74:69:ba:7c:
2d:3e:80:c0:2f:83:3a:d9:4e:ec:a6:0f:91:4d:89:
bf:90:9f:05:e7:a8:0f:25:81:7d:67:c7:8e:a0:f2:
5c:a1:a0:04:e4:c2:f7:57:c6:78:97:22:9e:2d:ae:
5a:b1:40:de:1e:c2:97:22:f1:c8:67:a4:27:24:db:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4E:9F:C4:C5:56:17:93:A2:58:5C:63:D4:2F:DE:29:AA:56:73:72
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8E6fxMVWF5OiWFxj1C_eKapWc3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1c40::/44
Signature Algorithm: sha256WithRSAEncryption
6b:bc:80:95:06:f1:4a:1f:79:7c:29:3a:47:6d:b3:4c:03:8c:
73:8d:ae:44:48:2a:40:4c:fc:23:3c:3a:cb:d5:c4:81:e1:b5:
8d:7c:85:a8:41:e4:cf:30:3f:44:25:93:90:05:2c:f1:8a:3b:
cd:31:ce:3e:21:57:3b:7e:4a:0b:b1:c2:6c:60:09:7b:c8:74:
55:04:8f:9d:3e:e1:bf:c6:aa:9d:6a:a6:b4:8d:be:94:1c:94:
13:f4:da:6c:56:40:5c:41:e9:2e:3e:fb:b9:bb:ff:bf:23:66:
0c:03:9b:56:0c:74:41:ad:fd:b9:25:ec:97:c0:2b:56:cd:e2:
d6:3b:6d:9e:70:d1:ad:c9:88:ef:2c:e3:ce:d6:e5:d6:e0:1d:
33:e6:81:5d:98:02:5f:97:78:c8:67:90:2a:39:27:bd:42:41:
2b:e8:b8:80:51:a6:f4:69:c7:3d:ef:a4:6c:ca:5c:66:d3:9a:
7b:a1:86:3d:fb:c5:8c:db:dd:ef:02:92:98:8b:9f:16:05:9a:
f2:4d:93:59:53:e7:09:39:12:28:d6:4f:23:59:71:51:b5:e0:
d6:48:3b:b3:67:06:3e:f1:30:75:20:33:fa:1b:72:93:02:98:
5d:87:0c:18:34:bd:58:f3:b4:31:ce:47:6a:0c:0a:9c:b0:e1:
94:a1:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:09:05 2025 by rpki-client