Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qohLShi5_g12N3eieKlfkEIAqUw.roa
File: qohLShi5_g12N3eieKlfkEIAqUw.roa (raw, json)
Hash identifier: OZLzDScDGvGXjeXb/1GhKCm58xFGBeyC/3PBYWflmhM=
Subject key identifier: AA:88:4B:4A:18:B9:FE:0D:76:37:77:A2:78:A9:5F:90:42:00:A9:4C
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019718814777918B235C5DDEABC6BF461C6C
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qohLShi5_g12N3eieKlfkEIAqUw.roa
Signing time: Wed 28 May 2025 20:06:55 +0000
ROA not before: Wed 28 May 2025 20:06:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a0f:e3c0::/29 maxlen: 29
2a10:a9c0::/29 maxlen: 29
2a13:5040::/29 maxlen: 29
2a13:bec0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dcc0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 04 Jun 2025 19:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:81:47:77:91:8b:23:5c:5d:de:ab:c6:bf:46:1c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 28 20:06:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa884b4a18b9fe0d763777a278a95f904200a94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:e6:a1:44:80:0a:47:91:bf:bb:f0:d7:06:
2f:a5:36:d9:1b:bd:13:9f:44:e7:c1:07:24:21:86:
56:57:72:aa:2d:c2:48:80:cc:4b:83:13:03:83:6a:
46:94:9c:d3:5c:11:f7:ab:9c:96:74:ad:71:e9:f2:
f5:f5:c5:b1:62:d9:1d:14:96:0c:6d:83:8e:33:91:
73:1e:bf:69:5a:51:03:14:bd:52:7b:5b:dc:b3:9b:
48:12:c0:72:5f:fe:2a:17:94:bc:c8:31:a1:fe:5d:
a3:c5:b3:47:54:39:40:9b:f6:42:81:9d:53:0f:9f:
0c:b9:5f:56:15:b5:ad:63:12:8b:8a:58:14:d6:33:
67:ef:1b:c3:ea:0b:5e:3a:22:8f:78:26:5b:22:71:
a7:06:91:d0:e3:7d:08:7e:14:26:f0:6e:33:77:ad:
92:3e:29:d4:f8:4c:56:01:60:fc:7c:09:a0:ca:94:
38:0f:b0:fd:b5:f7:d3:39:32:e0:52:8e:d2:1d:e7:
86:fa:92:69:cb:c1:62:af:94:78:9a:b1:a2:61:00:
7e:2f:ae:56:0f:f2:1a:4b:03:56:8e:0f:07:fa:fa:
d5:99:76:f0:c9:0c:26:b8:64:44:1a:46:8a:fb:fc:
c8:24:92:25:cb:bb:1c:b9:8b:09:97:5b:6b:64:9c:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:4B:4A:18:B9:FE:0D:76:37:77:A2:78:A9:5F:90:42:00:A9:4C
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qohLShi5_g12N3eieKlfkEIAqUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c0::/29
2a10:a9c0::/29
2a13:5040::/29
2a13:bec0::/29
2a13:d1c0::/29
2a13:dcc0::/29
2a13:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
c3:2e:02:5b:6a:48:78:49:20:0e:f5:59:1e:9c:70:a9:75:a7:
da:84:a2:73:67:4c:8d:37:39:78:f9:51:8c:a1:4f:1c:21:c0:
3a:86:50:dc:32:7b:97:0f:4d:38:18:74:66:19:82:8c:45:cc:
df:a3:3d:8e:19:45:16:21:14:ca:fa:1d:82:77:ba:9c:70:d9:
6c:f9:55:3b:5b:bf:99:6c:94:69:8f:81:15:a9:99:da:2f:c1:
c7:27:6e:f0:cc:2d:f1:8c:e3:a4:03:d8:32:48:32:5b:ef:24:
4e:2d:cc:c6:1d:47:56:41:13:c5:72:f6:8a:07:cd:5a:88:19:
0e:31:e4:fe:2e:85:fe:59:f5:ea:38:b0:3b:5f:42:d6:db:27:
eb:67:cd:65:b5:f9:c0:03:64:8e:6c:dc:95:7e:fa:04:80:a1:
ea:58:38:0b:ff:9f:bf:1d:7c:10:a7:57:89:d1:f9:2f:9f:ca:
2b:45:9d:3c:01:42:4d:84:16:bd:cc:b4:e8:2f:3c:b3:66:e8:
93:e0:44:58:0d:59:2e:cb:79:fe:fa:83:41:9c:ce:45:6b:c1:
b1:10:d5:e2:1b:9a:5b:cf:18:f6:67:b2:24:15:2e:dd:af:a4:
e6:50:3e:dc:67:da:cb:bc:44:fa:80:6a:b9:74:ef:aa:93:e6:
d2:33:aa:c6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAZcYgUd3kYsjXF3eq8a/RhxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwNTI4MjAwNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTg4NGI0YTE4YjlmZTBkNzYzNzc3YTI3OGE5NWY5MDQyMDBhOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4onmoUSACkeRv7vw1wYvpTbZG70T
n0TnwQckIYZWV3KqLcJIgMxLgxMDg2pGlJzTXBH3q5yWdK1x6fL19cWxYtkdFJYM
bYOOM5FzHr9pWlEDFL1Se1vcs5tIEsByX/4qF5S8yDGh/l2jxbNHVDlAm/ZCgZ1T
D58MuV9WFbWtYxKLilgU1jNn7xvD6gteOiKPeCZbInGnBpHQ430IfhQm8G4zd62S
PinU+ExWAWD8fAmgypQ4D7D9tffTOTLgUo7SHeeG+pJpy8Fir5R4mrGiYQB+L65W
D/IaSwNWjg8H+vrVmXbwyQwmuGREGkaK+/zIJJIly7scuYsJl1trZJysbwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFKqIS0oYuf4Ndjd3onipX5BCAKlMMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvcW9oTFNoaTVfZzEyTjNlaWVLbGZrRUlBcVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDKg/jwAMF
AyoQqcADBQMqE1BAAwUDKhO+wAMFAyoT0cADBQMqE9zAAwUDKhPdQDANBgkqhkiG
9w0BAQsFAAOCAQEAwy4CW2pIeEkgDvVZHpxwqXWn2oSic2dMjTc5ePlRjKFPHCHA
OoZQ3DJ7lw9NOBh0ZhmCjEXM36M9jhlFFiEUyvodgne6nHDZbPlVO1u/mWyUaY+B
FamZ2i/Bxydu8Mwt8YzjpAPYMkgyW+8kTi3Mxh1HVkETxXL2igfNWogZDjHk/i6F
/ln16jiwO19C1tsn62fNZbX5wANkjmzclX76BICh6lg4C/+fvx18EKdXidH5L5/K
K0WdPAFCTYQWvcy06C88s2bok+BEWA1ZLst5/vqDQZzORWvBsRDV4huaW88Y9mey
JBUu3a+k5lA+3Gfay7xE+oBquXTvqpPm0jOqxg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:20:12 2025 by rpki-client