Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ssOJSkjOjLinsqHokV5FVi8en9E.roa
File: ssOJSkjOjLinsqHokV5FVi8en9E.roa (raw, json)
Hash identifier: qEiemOWlBPaknAUNdMoNepVvOB+OhUM6yudxDhqx5L4=
Subject key identifier: B2:C3:89:4A:48:CE:8C:B8:A7:B2:A1:E8:91:5E:45:56:2F:1E:9F:D1
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0196F3780FE708F1BAEF6F0DDC5B192DC4C0
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ssOJSkjOjLinsqHokV5FVi8en9E.roa
Signing time: Wed 21 May 2025 15:30:53 +0000
ROA not before: Wed 21 May 2025 15:30:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208487
IP address blocks: 2a0a:79c0:c00::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 21 May 2025 19:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:78:0f:e7:08:f1:ba:ef:6f:0d:dc:5b:19:2d:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: May 21 15:30:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2c3894a48ce8cb8a7b2a1e8915e45562f1e9fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:be:88:ea:2d:be:7f:e8:71:96:99:0e:d2:
a6:7a:df:73:23:c7:77:e3:ef:b1:80:9d:ad:0b:12:
d0:c9:7a:da:ab:27:75:84:8f:5f:ae:8a:36:db:f6:
cc:33:ea:53:77:4a:5d:0a:65:6a:51:a6:d3:c3:7f:
92:9f:6f:69:6d:0e:19:75:b5:b3:85:a1:5a:55:36:
ac:09:bd:1d:18:76:07:4f:24:bd:3b:64:a8:c9:6a:
d3:25:fd:68:3b:7e:e2:49:50:e3:15:59:e7:5a:67:
5f:37:36:3f:f7:3b:be:67:0b:b9:1c:e6:c3:b0:53:
43:bc:bb:5b:9d:28:cb:bc:f7:8b:c5:da:56:1e:14:
28:81:4f:ac:9e:23:8e:31:b1:f6:7b:a5:ad:e6:5c:
e2:f1:b2:d6:bc:d8:39:9e:5c:82:2b:9d:3a:4e:98:
70:9c:c4:8f:95:aa:52:66:6a:78:c4:61:70:bf:8d:
5b:d9:22:83:7c:38:2a:20:e9:01:b5:27:c7:53:5c:
8f:57:55:e5:8a:80:49:5b:a3:82:44:35:da:1e:4b:
ef:cf:cd:97:0f:56:80:53:ce:c9:a4:dc:61:81:83:
3e:8a:c1:75:05:1b:c5:60:4e:86:9e:ec:b8:00:d9:
ac:9f:46:97:02:de:cb:a9:40:27:e7:b2:31:65:9a:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:89:4A:48:CE:8C:B8:A7:B2:A1:E8:91:5E:45:56:2F:1E:9F:D1
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ssOJSkjOjLinsqHokV5FVi8en9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:c00::/44
Signature Algorithm: sha256WithRSAEncryption
09:68:e5:dc:f0:ae:89:c8:78:6e:94:e6:9d:71:0a:4e:61:10:
da:b6:48:39:ec:1c:63:12:a2:7b:bf:de:d5:f3:d4:bc:64:c5:
3c:7f:b5:14:0b:9a:d9:55:f5:36:7c:5a:49:db:d4:e5:09:63:
8d:c4:e0:2b:ce:0d:21:2e:99:d3:14:9a:91:6e:ff:6d:7e:53:
2f:bf:eb:a5:44:12:2d:f4:6c:45:eb:90:5a:a8:74:85:73:de:
60:f2:e1:69:08:65:fa:42:fe:35:fd:10:5e:f3:f1:38:e4:9a:
39:32:15:87:67:df:4e:d8:c5:e4:fd:5f:70:41:43:72:ae:86:
62:27:60:fe:81:64:90:e1:14:50:8b:ca:b9:56:f7:19:d2:6b:
58:93:e8:65:7a:ca:ab:27:24:c6:c8:1c:e2:4d:29:89:18:5c:
70:c4:fc:75:72:0a:2d:18:c4:69:2c:46:4d:62:18:51:e2:25:
01:4f:e2:64:26:4d:17:df:3c:2b:30:cb:13:42:ed:44:72:bb:
90:af:3e:44:74:fd:cc:c7:3e:20:7b:04:73:79:4c:ff:9f:aa:
38:c2:c8:eb:da:85:41:14:4c:89:28:6e:cf:88:ee:84:bb:95:
d5:a0:74:c9:ac:5e:04:75:47:e8:1f:91:3d:c0:79:81:a3:94:
61:1b:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:23:51 2025 by rpki-client