Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/WF4BYRJBbgYySWw6dtFEzVI6bSs.roa
File: WF4BYRJBbgYySWw6dtFEzVI6bSs.roa (raw, json)
Hash identifier: HXRHqF0/KU8Z2Tz4gAewUXPBpqc295RANtDzKEzZm3k=
Subject key identifier: 58:5E:01:61:12:41:6E:06:32:49:6C:3A:76:D1:44:CD:52:3A:6D:2B
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 01973F40743718848366EAE761C886601D42
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/WF4BYRJBbgYySWw6dtFEzVI6bSs.roa
Signing time: Thu 05 Jun 2025 08:41:17 +0000
ROA not before: Thu 05 Jun 2025 08:41:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207345
IP address blocks: 2a06:2c80:2000::/36 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Jun 2025 13:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:40:74:37:18:84:83:66:ea:e7:61:c8:86:60:1d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Jun 5 08:41:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=585e016112416e0632496c3a76d144cd523a6d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:e6:ec:57:30:c6:1b:76:e7:c9:21:b0:b8:
eb:ad:57:11:69:c0:28:c9:43:07:48:ae:74:06:7a:
d0:5e:55:1d:1d:e0:3b:3b:01:8b:22:ad:17:bd:80:
69:f9:2a:c9:c7:84:1f:03:f7:e4:fe:23:ab:64:2d:
db:dd:a5:2a:66:fc:d0:31:f7:47:47:1e:d8:71:23:
03:6c:ff:e9:52:36:ac:75:9a:1e:cc:8e:8d:8a:90:
e6:8e:83:68:fd:6d:b9:91:f0:5a:85:64:e5:4d:c8:
64:0e:26:25:62:3f:04:30:27:55:02:16:f5:22:1c:
72:fa:0f:fd:33:c4:5a:1d:ae:aa:84:c2:40:ff:2f:
08:98:99:5e:c7:37:f4:cf:45:4e:37:27:39:7b:7c:
78:12:cd:aa:68:08:bc:55:6a:27:1b:8e:a7:0a:18:
cc:6b:ea:96:63:87:4a:3b:5c:82:03:6e:07:81:cc:
75:70:02:6c:b4:0e:a2:6b:87:9b:c7:29:e9:32:1c:
d6:4a:9b:19:9e:48:16:15:a4:19:6e:47:55:41:cd:
b2:37:a4:fe:a0:09:a5:b0:03:27:18:2b:24:0a:e2:
21:4b:46:0a:c8:82:da:c2:98:bf:4e:c5:cd:aa:ce:
06:c5:a1:a5:62:c7:9b:a6:25:0f:c7:61:f0:4a:44:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:01:61:12:41:6E:06:32:49:6C:3A:76:D1:44:CD:52:3A:6D:2B
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/WF4BYRJBbgYySWw6dtFEzVI6bSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2c80:2000::/36
Signature Algorithm: sha256WithRSAEncryption
96:9f:4d:c0:5d:3b:27:0c:15:d3:77:89:b3:15:69:3b:50:00:
ca:50:1b:72:59:d9:f3:90:41:d9:51:86:05:ec:fe:7c:b5:64:
5b:b0:57:7a:93:b6:71:bb:56:41:33:10:10:c9:b4:f9:0a:8f:
7b:3d:5d:d8:3f:31:0d:58:1d:79:b7:1c:49:ce:c8:30:cc:f7:
74:b9:6a:f8:02:58:df:81:ba:f7:cf:55:4c:72:54:5a:a2:25:
c0:a0:34:a8:c9:65:6a:13:87:85:1d:a0:1d:f0:75:e3:34:c2:
f9:57:15:59:a4:cf:0b:fa:b2:7c:b2:7f:81:a2:61:24:1b:f1:
08:61:6e:05:40:d5:12:23:0b:f5:0b:4b:23:13:2a:7c:97:38:
78:ce:b5:05:34:78:ce:17:49:a7:b9:33:cf:7c:e6:80:19:c4:
83:6b:84:92:7d:48:14:f0:a6:38:80:b5:d2:2e:e8:58:1e:d8:
71:2c:ec:19:41:07:cb:0d:99:28:c5:ca:f3:39:33:6e:18:56:
c3:0a:29:ea:eb:04:f4:89:70:1c:04:30:21:79:34:a9:8f:85:
d3:e2:a4:4d:3c:03:78:3d:49:1a:f6:8e:70:35:08:5b:d2:39:
be:21:16:f3:89:9d:6b:8c:05:86:00:5e:47:22:9c:d5:78:c3:
5d:7b:c4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:14 2025 by rpki-client