Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/wpHu7PmobROHLnmGNc51P1d5MCE.roa
File: wpHu7PmobROHLnmGNc51P1d5MCE.roa (raw, json)
Hash identifier: NBlc1zZHE0+7DuTBtU+rdLWUFogjMMenQ6FPsfb2nas=
Subject key identifier: C2:91:EE:EC:F9:A8:6D:13:87:2E:79:86:35:CE:75:3F:57:79:30:21
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0195CEE2E0C7A6AFD65B9C38367B8AAB4F57
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/wpHu7PmobROHLnmGNc51P1d5MCE.roa
Signing time: Tue 25 Mar 2025 19:58:49 +0000
ROA not before: Tue 25 Mar 2025 19:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a11:9fc7::/32 maxlen: 32
2a11:c447::/32 maxlen: 32
2a11:d087::/32 maxlen: 32
2a11:fec2::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Apr 2025 14:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:e2:e0:c7:a6:af:d6:5b:9c:38:36:7b:8a:ab:4f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Mar 25 19:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c291eeecf9a86d13872e798635ce753f57793021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:f3:8a:67:85:a3:93:ea:d8:a1:32:0b:eb:
73:af:0f:b0:86:8a:14:82:e5:cf:a6:21:3f:12:09:
99:58:23:62:b1:a4:56:ae:ac:36:c9:e4:30:10:ca:
f8:fd:b8:1e:42:d5:c3:b6:95:ad:8c:d6:42:fe:5c:
77:f0:cb:a1:42:38:2b:aa:ff:6e:2e:d5:85:24:01:
69:14:b3:56:71:11:0b:55:57:67:b1:fc:18:a6:00:
08:bf:37:c3:39:c2:1c:d4:f7:ab:cd:54:61:31:e5:
9c:e6:aa:b2:ff:79:df:0a:0f:d0:a6:ba:90:44:45:
ba:97:f7:5d:58:f5:1b:15:f0:9d:b4:b4:90:7c:13:
f3:43:8e:98:e9:b3:91:2b:a2:a1:1b:67:06:ee:05:
a1:d5:20:bd:cc:8a:4f:33:b2:52:4d:d6:88:6f:9b:
4f:28:20:44:80:8a:c0:4d:f2:8f:70:47:ff:44:67:
56:5d:65:9d:0f:b4:8c:fe:71:e8:39:b5:e2:75:44:
85:4f:a4:cc:8c:09:04:9d:77:3e:b7:98:b0:e3:53:
6e:70:62:86:a3:d6:9e:0d:80:99:d2:ab:b4:63:ac:
4f:a0:85:d9:86:8c:bf:22:5a:27:11:22:64:ee:9e:
d2:0e:6d:74:72:96:6d:b6:23:f4:4a:30:ce:82:fb:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:91:EE:EC:F9:A8:6D:13:87:2E:79:86:35:CE:75:3F:57:79:30:21
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/wpHu7PmobROHLnmGNc51P1d5MCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9fc7::/32
2a11:c447::/32
2a11:d087::/32
2a11:fec2::/32
Signature Algorithm: sha256WithRSAEncryption
a8:7d:f9:66:0f:5f:d4:4e:62:68:5d:8e:74:7e:7a:89:cb:cc:
77:a8:fa:7f:53:23:f9:d5:11:26:11:dc:dd:ea:b7:c9:8f:db:
16:96:45:d9:56:f2:49:6e:ec:11:e0:dc:cd:b2:6f:bb:56:a8:
57:a4:c5:d6:57:c8:ea:d9:ed:56:b3:1e:64:75:b3:52:0c:7c:
2b:f0:73:7e:67:3e:f8:2a:d8:55:87:e4:f0:22:fe:c5:20:a6:
05:d4:8c:3d:20:1b:f0:52:fb:b7:fe:c7:06:98:9c:94:f8:58:
ef:87:b8:12:76:4e:22:05:f9:70:9b:41:35:f9:ba:cc:92:8c:
a2:82:69:89:7b:e1:39:e7:44:9d:06:0f:21:3e:a8:49:b2:70:
36:bd:36:57:08:3c:ab:01:98:93:58:17:56:41:c5:f4:79:52:
88:8c:06:be:60:b4:14:56:d1:73:58:47:bf:85:3b:35:cb:a7:
e0:b4:5a:15:38:ca:c5:3a:b7:c4:67:4a:d2:0a:e9:e4:1f:bc:
2a:6b:8e:c7:e8:78:a9:b1:db:2b:04:ba:e5:83:9d:dc:b6:46:
e2:fc:30:8b:d3:71:2c:1b:23:ed:ba:91:cb:60:4a:11:b1:c8:
f2:1e:24:f3:12:50:db:64:0d:d9:25:d2:89:f3:68:44:f0:13:
2a:c9:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:23:36 2025 by rpki-client