Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/up3WmOhfkeisnCEbDxvnqsvIz84.roa
File: up3WmOhfkeisnCEbDxvnqsvIz84.roa (raw, json)
Hash identifier: rg8QfcfylwUN3vZBdmwiJSaob6dEgHvKlQsnS6FAc1w=
Subject key identifier: BA:9D:D6:98:E8:5F:91:E8:AC:9C:21:1B:0F:1B:E7:AA:CB:C8:CF:CE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019712A68F4950EE0635A1BAAAE4DE1BD777
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/up3WmOhfkeisnCEbDxvnqsvIz84.roa
Signing time: Tue 27 May 2025 16:49:54 +0000
ROA not before: Tue 27 May 2025 16:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 2a0f:b241:6::/48 maxlen: 48
2a0f:b241:c::/46 maxlen: 48
Validation: Failed, certificate revoked on Sun 01 Jun 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:a6:8f:49:50:ee:06:35:a1:ba:aa:e4:de:1b:d7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: May 27 16:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba9dd698e85f91e8ac9c211b0f1be7aacbc8cfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:93:e3:ac:7c:e5:6b:7a:68:3c:83:ae:8e:
5c:99:33:a9:d2:e2:d0:9b:ae:1d:7c:5a:de:a0:96:
92:23:7a:19:75:04:2f:bf:a1:67:f3:6d:5f:5c:b7:
2e:00:25:c7:99:c8:5f:7a:53:c2:00:e8:c4:fd:fc:
b4:90:77:1f:0f:de:2e:f7:13:1a:d7:fa:57:09:d9:
e8:60:61:50:09:d4:9e:a2:bf:2e:b3:f2:0a:dd:80:
da:f0:a5:47:5f:ff:14:cc:52:27:d2:79:83:c4:af:
31:a5:11:c2:06:7b:94:f1:a4:dc:fa:b5:73:67:0a:
53:65:55:78:2d:f5:64:70:b0:6e:96:0d:5b:92:0b:
90:63:81:bb:6e:f7:d0:f0:6b:af:b5:49:b0:8f:32:
8c:08:2d:f5:0d:a7:ef:1e:aa:78:d3:ef:29:3d:d7:
fe:3b:e7:39:8e:cf:1d:b2:ae:0c:a4:46:57:29:57:
04:e7:4d:58:08:96:a5:bd:85:ed:01:fc:b1:b6:d0:
2e:c6:1d:cf:d0:13:50:7c:ce:1b:15:2d:27:4c:da:
c9:d3:ec:36:19:d7:d5:e6:3f:79:36:96:df:58:f0:
d8:89:ea:ac:0f:81:35:31:2c:e9:f3:37:ee:4c:24:
90:ff:d6:be:b1:20:0b:bb:d4:e8:c2:39:eb:3d:ff:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9D:D6:98:E8:5F:91:E8:AC:9C:21:1B:0F:1B:E7:AA:CB:C8:CF:CE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/up3WmOhfkeisnCEbDxvnqsvIz84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:6::/48
2a0f:b241:c::/46
Signature Algorithm: sha256WithRSAEncryption
40:7c:9a:f1:8b:ea:26:c5:9e:92:10:31:0c:42:78:7a:6f:ec:
39:41:a8:3a:4d:7c:0b:a2:79:31:6b:1a:da:12:d9:2a:2d:9c:
d4:1e:15:e3:0e:d3:65:de:77:8c:ad:19:ed:2c:99:81:de:4d:
6f:f7:2d:6b:c4:dd:38:1e:5a:35:9d:5f:64:b2:15:d0:c3:32:
39:80:c5:ef:2e:02:bd:0f:75:99:d8:3c:b6:08:b4:ea:08:0e:
51:ae:41:29:62:84:ca:d3:b8:c3:4b:5a:b9:f2:21:a3:cc:4e:
1a:5c:83:a7:ef:ba:b1:7d:0a:42:e1:cd:8e:3e:36:cb:c7:07:
32:fc:88:c4:c7:37:bd:d5:90:de:f1:56:27:9e:e8:f3:5a:e3:
b8:87:fe:ca:29:bc:a0:b2:cd:a8:2a:f0:05:71:fc:dd:ac:0d:
bf:f6:ca:6a:8b:5c:88:64:24:1e:d9:0b:c0:15:da:e7:b3:e1:
86:e6:f6:1d:7f:1e:a7:34:82:b9:b8:71:e6:2a:4a:f1:fd:4a:
ae:39:d8:ec:d4:1c:06:c2:36:52:ea:ba:de:81:28:e5:77:e4:
85:69:be:31:50:10:17:ff:e4:0c:7c:78:25:05:86:e2:99:f5:
84:3b:81:1a:1e:ec:41:9f:f3:45:71:62:8c:e1:10:4c:8d:c5:
21:30:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:36 2025 by rpki-client