Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/wuXRycgMOxMPULOEixMWrjmXDYE.roa
File: wuXRycgMOxMPULOEixMWrjmXDYE.roa (raw, json)
Hash identifier: 3S6BTMBs8WsSfQ4Kh4zfAzRNizgE+JtaW4gwfKtGJz4=
Subject key identifier: C2:E5:D1:C9:C8:0C:3B:13:0F:50:B3:84:8B:13:16:AE:39:97:0D:81
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0196ED059E24EFD6C82C8A5C540871355F99
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/wuXRycgMOxMPULOEixMWrjmXDYE.roa
Signing time: Tue 20 May 2025 09:28:10 +0000
ROA not before: Tue 20 May 2025 09:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
2a07:3501:1032::/47 maxlen: 48
2a07:3501:1050::/48 maxlen: 48
2a07:3501:1060::/48 maxlen: 48
2a07:3502:10e0::/48 maxlen: 48
2a07:3502:11c0::/48 maxlen: 48
2a07:3502:1210::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 May 2025 11:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:05:9e:24:ef:d6:c8:2c:8a:5c:54:08:71:35:5f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 20 09:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e5d1c9c80c3b130f50b3848b1316ae39970d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:43:b2:19:d9:c6:e6:8a:a1:b8:80:12:f4:
6c:4d:7f:e2:db:2a:17:25:1a:50:c5:9c:75:e8:75:
55:07:04:49:5b:77:c7:ee:a3:2c:8e:69:bd:d4:b0:
94:df:a6:2f:e5:b0:cd:16:1a:26:2e:19:28:85:b5:
77:04:8b:63:f5:c7:1e:70:90:3b:87:7f:d7:83:d0:
93:85:7b:87:75:45:46:20:ce:55:a3:64:ea:85:77:
67:84:53:60:dc:b4:bf:f1:b5:28:1e:d6:1a:e5:84:
60:17:e7:7f:3e:7b:4e:f0:67:f3:b1:8c:cd:d6:80:
51:fb:e8:6d:45:4f:05:14:b7:e4:cf:8f:c9:45:2c:
f7:b6:5f:1e:9d:01:73:6a:6d:ff:7c:c9:3b:99:24:
3b:be:ab:dc:e0:be:b8:a1:e5:7a:db:4a:f3:45:62:
bd:5f:28:48:3f:4f:3e:63:fa:04:ae:6d:ae:5c:2a:
6a:3e:9b:e2:e9:36:61:e8:9d:c5:2f:8b:00:65:98:
7d:bf:2a:b0:9b:70:dd:cd:f0:51:d1:6f:41:8f:ee:
a2:04:13:e6:f0:f4:78:65:79:ea:8c:59:f8:96:3f:
19:6b:f5:00:77:bf:ac:fb:69:ce:7a:03:a5:11:95:
d5:71:27:eb:cc:37:b8:0c:0b:54:af:2d:da:ea:f4:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:D1:C9:C8:0C:3B:13:0F:50:B3:84:8B:13:16:AE:39:97:0D:81
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/wuXRycgMOxMPULOEixMWrjmXDYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
2a07:3501:1032::/47
2a07:3501:1050::/48
2a07:3501:1060::/48
2a07:3502:10e0::/48
2a07:3502:11c0::/48
2a07:3502:1210::/46
Signature Algorithm: sha256WithRSAEncryption
9d:24:c3:08:85:b2:50:3f:6d:26:ee:22:67:aa:e5:5b:f6:4a:
06:1a:ad:6b:b1:b3:8d:74:56:a1:c2:65:1d:36:ff:c7:38:8c:
92:e6:4e:89:57:66:a8:83:41:36:19:ab:c3:45:92:85:1d:60:
c5:34:d5:0c:df:d2:fd:c4:cd:93:9d:f0:86:52:3f:65:a6:85:
b6:3c:7f:44:51:e3:f7:b2:cb:d6:22:9e:c9:e4:4d:5c:af:a8:
f1:33:c0:81:05:99:ff:d8:3e:1f:6f:bf:c5:fc:2f:4b:c4:11:
07:6b:68:59:6e:ca:2d:89:e4:88:7c:f0:40:ff:b8:48:a6:78:
43:dd:e4:e7:4b:46:de:ad:3d:7b:f6:85:e8:b9:f9:0b:ba:05:
7f:03:89:5e:37:6f:18:5f:8d:b1:99:6d:15:cc:ef:4a:77:d2:
e9:3e:99:2b:a0:4d:47:68:f7:12:aa:a3:da:ab:02:3c:98:61:
df:e0:25:7c:eb:ec:a6:95:b3:23:ef:1c:ad:a7:87:ad:e5:89:
4d:12:ad:22:e2:be:9b:08:d2:af:4d:01:b9:c5:d7:09:ae:6f:
9e:bc:0d:67:7b:e9:99:02:b2:39:90:41:b7:7c:5d:02:5e:6c:
e4:ad:58:04:2c:a2:e1:04:cb:32:48:75:85:ff:ae:36:71:bd:
ab:ec:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:58 2025 by rpki-client