Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LlWQzaCGW7breGDwr9woM8k8IVU.roa
File: LlWQzaCGW7breGDwr9woM8k8IVU.roa (raw, json)
Hash identifier: 8WBmfYaceMlzOxNwKizctyDuQPrkY/lnPlCakZ9Eo9Y=
Subject key identifier: 2E:55:90:CD:A0:86:5B:B6:EB:78:60:F0:AF:DC:28:33:C9:3C:21:55
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019743F71DFED1457CA014DA76D5878B4086
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LlWQzaCGW7breGDwr9woM8k8IVU.roa
Signing time: Fri 06 Jun 2025 06:39:17 +0000
ROA not before: Fri 06 Jun 2025 06:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a11:5c80::/29 maxlen: 29
2a13:9380::/29 maxlen: 29
2a13:9f00::/29 maxlen: 29
2a13:cf00::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Jun 2025 07:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:f7:1d:fe:d1:45:7c:a0:14:da:76:d5:87:8b:40:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 6 06:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5590cda0865bb6eb7860f0afdc2833c93c2155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:05:5c:9c:dc:db:87:56:01:d6:9f:5b:a9:
76:98:0c:44:36:82:9e:1d:26:76:fd:15:28:f0:16:
f0:bc:60:7f:ab:5b:95:cd:06:d4:d8:cb:59:ee:64:
e0:16:c9:c9:bb:13:b5:54:c8:16:ca:ca:9d:0d:21:
ea:85:0a:7c:0f:4b:da:60:cb:ee:9a:c0:0d:63:d4:
11:40:4d:e4:7c:f0:70:40:a4:8f:31:de:e4:52:cb:
3a:ea:47:4d:bf:bc:d5:e8:d8:3d:62:42:2e:9e:07:
a4:84:7a:d8:a4:64:6a:ae:96:c7:73:ce:52:e2:b6:
6a:38:bc:0e:47:6f:b9:cd:cc:92:4b:85:f0:dc:c9:
e8:21:31:a6:34:01:73:ee:ab:1e:42:02:8c:67:e1:
bb:11:04:f9:fe:67:72:ab:dd:c9:b7:94:58:70:fd:
e5:75:03:f1:5b:2b:a7:2a:2c:be:30:f9:77:95:60:
c9:b4:ce:8a:17:67:60:6d:5a:3c:1f:0f:38:c9:e7:
41:55:da:8e:0a:e6:90:4a:07:af:80:06:12:aa:72:
15:b6:50:61:5a:24:00:c4:e5:3d:11:b5:82:87:84:
27:67:7b:c7:fe:27:40:9a:04:4d:53:a0:48:b2:50:
f8:e3:3c:5e:8c:fa:7e:f6:c9:29:dd:89:90:10:12:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:55:90:CD:A0:86:5B:B6:EB:78:60:F0:AF:DC:28:33:C9:3C:21:55
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LlWQzaCGW7breGDwr9woM8k8IVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5c80::/29
2a13:9380::/29
2a13:9f00::/29
2a13:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
1f:44:49:39:0b:52:cd:7e:4c:74:9b:3e:e1:89:f9:12:a2:29:
75:41:e3:8b:95:b0:6f:8b:14:0e:1b:88:ba:4c:de:7e:fd:85:
c7:67:0c:a3:32:4c:f7:81:a5:d1:ec:90:60:43:55:c0:9f:15:
b7:00:58:b4:65:87:3f:e2:7f:c9:d5:54:88:5c:e2:a3:fc:a8:
f8:63:14:8d:d3:83:09:f9:fb:a9:37:2b:04:a8:bc:35:8a:af:
ec:74:6b:f2:87:5a:3e:0c:fb:a9:4d:78:b6:cf:a0:a2:e9:f9:
dc:ec:2a:22:51:d4:80:4c:76:6e:25:9a:3f:57:d9:cb:e7:f7:
ce:af:f5:42:0b:f0:e1:f0:4e:83:38:3e:74:d2:98:35:1d:6a:
da:d8:6f:ec:39:7f:5d:49:cd:67:b4:6c:cf:63:cd:5b:de:71:
2a:7c:d2:7d:fd:0d:5f:3d:cb:50:b4:0f:33:cd:14:46:f5:55:
ab:5a:b3:a0:24:28:d9:e3:e3:7a:eb:ab:d8:29:ae:b9:9d:2d:
24:07:6b:06:d9:8d:d7:25:bd:7c:08:e4:81:e4:33:52:d7:f5:
55:5a:9a:ee:3f:d7:e9:2b:2c:53:a9:af:91:ab:ff:11:c9:07:
f9:e4:ce:2d:f3:72:bc:3b:24:96:be:0b:cc:ba:9b:df:3a:ea:
ad:29:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:02 2025 by rpki-client