Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0qqMxRRHUGPzUPjIryUt8Rk-TCI.roa
File: 0qqMxRRHUGPzUPjIryUt8Rk-TCI.roa (raw, json)
Hash identifier: 9ZFBlgrRzBbonmcAqjzSY9PR0iFjHbP1DHX/ekwTv4I=
Subject key identifier: D2:AA:8C:C5:14:47:50:63:F3:50:F8:C8:AF:25:2D:F1:19:3E:4C:22
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A2627A42EA228DC27E382DE9CD300D87C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0qqMxRRHUGPzUPjIryUt8Rk-TCI.roa
Signing time: Mon 27 Oct 2025 14:52:03 +0000
ROA not before: Mon 27 Oct 2025 14:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215614
IP address blocks: 2a10:7f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 03 Nov 2025 17:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:27:a4:2e:a2:28:dc:27:e3:82:de:9c:d3:00:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 27 14:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2aa8cc514475063f350f8c8af252df1193e4c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:db:07:7d:1b:6a:36:d5:51:c7:1a:34:d3:
b2:2b:9b:29:e0:84:89:53:b9:5c:ca:c3:23:4c:78:
de:91:e9:8b:41:83:3a:34:39:9a:9a:c1:88:e2:96:
e1:aa:a4:07:f0:ad:a9:d3:b6:91:5d:72:49:ea:f5:
c6:23:2b:c4:9e:da:5a:0e:5c:63:37:4b:dd:9d:fa:
a0:b3:23:93:f4:e0:a7:ca:dd:50:a8:fb:ee:ae:dc:
f8:8a:cf:c9:3e:37:bc:4a:b4:33:a2:28:56:8e:d4:
9d:d0:36:7f:f5:f8:22:34:db:a4:28:8d:9f:f0:a0:
f6:47:e7:cc:45:3c:a3:9d:a7:5d:0c:d5:eb:95:75:
71:3d:32:1a:b2:da:2d:d9:05:e8:5f:f4:17:2f:1c:
38:ba:a9:52:64:be:f4:96:e4:d9:83:dc:48:34:e0:
5d:80:9d:3a:56:d2:93:06:b1:90:1c:8e:6d:c4:f0:
c6:7a:ec:34:b3:6f:b9:fd:c1:8c:89:fa:ac:f9:23:
ef:20:d9:b6:20:d6:fa:fc:44:36:65:b6:c6:87:42:
4d:14:e6:10:85:f6:4d:96:17:23:11:3b:a5:0c:5c:
20:87:36:73:c2:90:0f:bc:59:20:41:a3:05:20:64:
76:61:27:e3:a4:ab:23:92:c0:9e:98:0d:9a:43:25:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:8C:C5:14:47:50:63:F3:50:F8:C8:AF:25:2D:F1:19:3E:4C:22
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0qqMxRRHUGPzUPjIryUt8Rk-TCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
66:f8:8f:19:19:fd:0e:24:e1:f0:9f:94:cd:49:ce:7c:da:bb:
40:3d:49:5e:c0:5b:1b:a7:0b:02:5a:91:5e:dd:a0:cc:93:4e:
b8:fd:d1:d7:2d:27:57:24:4a:53:5b:7e:ea:32:41:a6:54:87:
80:27:56:0d:e9:06:0e:68:f9:f7:c1:1b:59:f4:93:5b:1f:ee:
df:50:0b:50:e4:a8:b3:98:5d:bd:d3:97:0a:d6:d0:e1:59:16:
d8:f4:a3:95:20:11:f9:76:2f:1b:44:6f:81:1f:c4:ef:de:65:
70:31:2b:83:7f:48:2b:11:1e:0a:5f:cc:6c:3a:5e:18:4f:1d:
8c:eb:a2:bb:f0:86:1e:31:8c:f8:24:59:48:15:87:46:fb:1c:
74:23:81:fd:cc:be:bf:59:fd:08:27:fb:5b:e2:2a:97:8a:73:
e0:1a:7d:ba:22:34:6a:95:5a:63:5d:83:9a:cf:05:f4:52:95:
9c:c8:90:70:8e:23:15:f7:55:2a:06:00:82:d6:d7:d2:d1:8a:
29:cb:83:4b:0d:ef:4c:62:ba:ef:32:8c:0f:d8:ef:50:c0:b8:
84:92:27:21:ae:31:b3:c9:15:ea:ce:0d:5b:8e:5e:58:7f:54:
63:e1:50:6b:0c:d2:f9:49:89:15:47:fa:ab:66:45:8f:d3:81:
57:8e:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 23:00:10 2025 by rpki-client