Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/06V7kN6GK_IzinaUohd4fBtWuPg.roa
File: 06V7kN6GK_IzinaUohd4fBtWuPg.roa (raw, json)
Hash identifier: DvrD9EIKqv0UHzci73dn3B2iOfUxhwHsGsytkQoxwwo=
Subject key identifier: D3:A5:7B:90:DE:86:2B:F2:33:8A:76:94:A2:17:78:7C:1B:56:B8:F8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196CB2214601DE0025176ADC38FEC127DE2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/06V7kN6GK_IzinaUohd4fBtWuPg.roa
Signing time: Tue 13 May 2025 19:32:10 +0000
ROA not before: Tue 13 May 2025 19:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a09:4500::/29 maxlen: 29
2a13:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:22:14:60:1d:e0:02:51:76:ad:c3:8f:ec:12:7d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 13 19:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3a57b90de862bf2338a7694a217787c1b56b8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:86:68:f0:a6:f0:d9:84:2d:ce:77:cd:b7:
02:2a:2b:16:4a:60:82:bc:0c:a4:1d:19:f2:a2:ed:
e5:99:9c:23:81:5a:8d:ce:d5:46:ae:84:87:75:b1:
ed:44:e0:ac:01:01:98:ac:4a:95:53:5d:47:a5:28:
3d:1c:fe:91:a0:14:34:cc:2c:65:36:54:4f:2b:17:
60:e6:73:a5:5b:1e:2b:33:eb:1c:2b:78:eb:e5:8e:
f3:c4:d6:73:c4:e6:f0:5d:06:f6:d5:e3:95:f6:a6:
d0:bb:ac:9b:8c:e0:65:03:5c:56:63:e8:a5:0b:e7:
ea:40:bd:d7:40:fd:8b:69:64:7d:3f:39:be:d7:f7:
bb:bd:4c:02:08:73:1d:0f:d0:98:47:db:fe:e7:62:
f8:6a:08:d3:e1:0f:e7:45:35:da:4e:5f:41:ea:f2:
8b:9e:3d:28:ce:d0:7a:4c:1a:65:22:2a:35:bf:f8:
df:ac:2a:90:d7:8d:fc:13:45:b8:f0:9b:3b:0b:5f:
56:8e:f6:47:3b:02:b3:3a:6a:5b:b3:27:38:73:42:
a9:0c:ea:36:1a:57:59:cd:e7:18:3a:b0:a7:2f:d2:
dc:22:22:60:c3:17:76:18:fa:93:21:b2:ff:64:ff:
5a:d7:25:7e:0c:fc:c4:26:e3:37:38:83:4b:d8:5b:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:7B:90:DE:86:2B:F2:33:8A:76:94:A2:17:78:7C:1B:56:B8:F8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/06V7kN6GK_IzinaUohd4fBtWuPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:4500::/29
2a13:f40::/29
Signature Algorithm: sha256WithRSAEncryption
78:de:ed:c0:eb:a2:13:19:69:40:db:e0:ab:81:a6:5e:73:55:
84:72:59:56:6b:18:d0:90:55:5b:83:ac:0e:2a:95:c2:49:ce:
59:38:42:f1:25:b8:2f:4d:e2:07:95:28:29:73:12:fb:6c:4c:
f4:ba:02:6f:3a:14:c4:30:ff:62:06:95:1b:f4:64:03:2b:31:
0d:f8:fe:cf:65:b2:4c:e9:11:54:a6:d9:1d:0e:21:7c:ea:e0:
43:39:e5:83:41:4e:0a:14:ce:99:a1:b6:61:bd:75:b5:db:57:
10:da:0c:5c:bc:e8:06:73:ca:80:66:81:d8:6a:6d:f6:21:17:
7c:db:18:18:e7:df:77:36:52:de:85:7f:e8:66:0e:e3:31:5c:
54:24:c6:e6:5b:78:43:ac:79:25:f7:b2:e2:14:e4:82:4d:b0:
bd:7e:80:0d:18:12:8e:e6:38:78:db:60:d1:7c:5d:6c:c1:76:
fc:9a:ae:43:9f:40:b6:f0:1f:44:2f:ca:e8:5d:6b:95:35:b9:
07:34:3e:da:58:f3:3c:9a:f9:86:1f:5a:19:5b:aa:3d:70:89:
a7:7c:4c:1d:dc:b2:0d:c1:97:1c:98:fd:f5:73:a3:bb:d3:ed:
b2:92:bf:0c:7f:2b:80:53:e1:4b:58:01:ad:da:cf:6a:ef:c1:
8a:74:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:20:20 2025 by rpki-client