Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6CYTiaaFOBVvY82jWImK4EV4cnM.roa
File: 6CYTiaaFOBVvY82jWImK4EV4cnM.roa (raw, json)
Hash identifier: KVi3hKQr88BTUj38gqcIkAZMsGJp60X3ZDtUxrY7l/0=
Subject key identifier: E8:26:13:89:A6:85:38:15:6F:63:CD:A3:58:89:8A:E0:45:78:72:73
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01971881470324995F74C5002ABA6F21D20E
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6CYTiaaFOBVvY82jWImK4EV4cnM.roa
Signing time: Wed 28 May 2025 20:06:54 +0000
ROA not before: Wed 28 May 2025 20:06:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:b480::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 30 May 2025 10:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:81:47:03:24:99:5f:74:c5:00:2a:ba:6f:21:d2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 28 20:06:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8261389a68538156f63cda358898ae045787273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:11:16:f1:49:9a:8c:89:1d:e9:70:06:ef:
fd:5b:ed:f2:5b:f7:f2:83:fd:e2:0d:79:8a:73:a4:
21:a5:5d:91:a0:58:74:56:91:3d:81:39:14:dd:c5:
1a:8d:d4:3a:8a:14:4d:26:c2:b8:e4:cd:d2:33:76:
51:cd:b6:9d:ee:e3:27:bc:13:84:53:b2:03:4c:09:
39:e2:7f:1e:b6:8f:81:17:2b:52:ac:32:3b:e9:17:
99:99:5f:9f:e2:fd:fc:14:df:b5:93:29:b0:06:ba:
2c:37:65:c9:6f:e6:00:7c:f3:38:9d:d8:e3:c4:da:
dd:0b:56:b6:5f:81:1e:ee:0d:9a:42:59:43:19:2c:
0f:e0:cc:f1:c5:fc:23:da:78:18:39:9d:ec:62:b1:
5a:d3:a4:96:e6:b2:11:20:7c:f3:42:19:9a:c5:6a:
4f:02:0d:8c:ad:75:71:34:3a:11:c3:49:8e:8f:8b:
16:ff:cf:e8:b3:c7:c4:93:a7:63:ea:aa:02:b4:52:
df:cc:31:fc:7e:33:4f:b9:b9:de:cb:77:3c:c7:fb:
cd:4f:b6:c2:70:9b:28:40:c2:a5:eb:2a:8a:6e:53:
1d:8c:02:ca:11:c7:8d:87:64:94:4a:32:82:0e:30:
83:dc:ba:27:c8:16:7b:41:ee:28:90:71:1e:aa:94:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:13:89:A6:85:38:15:6F:63:CD:A3:58:89:8A:E0:45:78:72:73
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6CYTiaaFOBVvY82jWImK4EV4cnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b480::/29
Signature Algorithm: sha256WithRSAEncryption
5f:16:04:57:99:53:b4:91:b8:9b:85:76:b2:b3:28:9c:4f:de:
c5:50:44:fd:c6:aa:0f:24:ee:80:41:74:6d:e2:71:5c:05:6b:
16:06:52:65:51:04:b4:da:55:f5:06:c7:0f:59:c5:aa:a0:d7:
6c:19:0d:84:17:26:01:ee:6c:2d:b6:ff:a0:c4:6f:c9:bd:f5:
76:c5:b1:49:21:6f:3b:c3:95:51:9f:21:07:e7:67:ad:40:44:
69:57:a0:50:8e:71:b5:cd:ff:b9:fe:22:9b:95:76:ac:af:6c:
75:bb:08:16:91:58:65:c8:e8:2c:b3:08:cc:79:85:a3:0c:ce:
6c:ea:06:97:01:fa:f7:86:ad:0b:a2:35:31:23:ed:cf:0f:a3:
a4:b5:2e:2f:14:77:d6:c5:90:bb:0c:de:72:ca:17:6b:56:0c:
31:96:69:ad:46:eb:cb:18:74:97:c3:6e:2e:7f:c1:e1:dd:58:
76:04:50:cf:b5:57:97:7b:7b:4f:04:9e:d2:4d:ac:26:17:5c:
53:21:36:4f:28:27:d0:2c:25:65:3d:c7:cf:94:1d:e4:6b:43:
26:b2:9b:96:dd:b6:bb:3b:b2:5f:fc:fd:d5:c4:01:e4:42:47:
65:ac:c1:77:a1:e0:f0:40:11:42:8d:f7:19:b6:f3:4d:ad:d5:
23:5d:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:47:11 2025 by rpki-client