Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/6l79bTxrN6KeLA3jp6xPdqUA5JM.roa
File: 6l79bTxrN6KeLA3jp6xPdqUA5JM.roa (raw, json)
Hash identifier: yehy9hhgTz9qGd7G5ki+pJCXvNx/1ujyB+52C5RA3lI=
Subject key identifier: EA:5E:FD:6D:3C:6B:37:A2:9E:2C:0D:E3:A7:AC:4F:76:A5:00:E4:93
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 019643B0510612B11977F18C0550B2230B11
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/6l79bTxrN6KeLA3jp6xPdqUA5JM.roa
Signing time: Thu 17 Apr 2025 12:19:10 +0000
ROA not before: Thu 17 Apr 2025 12:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0e:f02::/32 maxlen: 32
2a0f:bb07::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 28 Apr 2025 10:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:b0:51:06:12:b1:19:77:f1:8c:05:50:b2:23:0b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Apr 17 12:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea5efd6d3c6b37a29e2c0de3a7ac4f76a500e493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:3b:af:a7:72:c7:f1:19:b5:37:4c:d2:29:
3e:fb:35:ba:bb:70:47:db:25:6e:bf:a5:9f:3d:00:
de:be:7f:02:9c:e8:27:1a:99:7a:a1:ab:b5:d2:68:
7f:8b:f1:93:91:ab:bc:02:23:fe:65:83:c2:d0:6d:
7e:65:69:f2:0d:14:4b:a8:cb:47:23:04:7d:b5:f2:
7a:4c:2a:dc:fd:ec:0b:53:fd:79:ca:d6:20:44:3d:
35:d4:55:59:d6:cb:79:f9:32:11:a7:c8:e8:82:25:
78:bc:7b:b3:8c:de:26:84:b6:2d:14:16:a5:61:36:
24:ce:7b:33:53:b8:9a:e4:d3:4b:51:72:22:87:b3:
fc:61:30:27:7f:1e:5a:36:1f:c1:8d:39:fe:06:fe:
fb:8c:04:1f:16:06:3c:2d:79:4e:54:60:bc:be:4f:
86:74:37:7e:af:45:18:e8:75:43:d2:13:f2:3d:85:
03:c4:0e:79:cc:ba:a3:fd:6c:17:67:f5:85:d9:6c:
68:f9:62:84:80:05:52:41:53:49:aa:c8:d6:4d:3d:
56:84:fd:d9:e2:c1:88:71:a8:9a:53:d3:5c:cf:ce:
c1:e6:96:3e:5c:f6:40:66:bc:9e:31:0d:92:c2:8c:
ca:b1:99:17:99:a8:f4:98:83:42:52:50:17:ee:7f:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5E:FD:6D:3C:6B:37:A2:9E:2C:0D:E3:A7:AC:4F:76:A5:00:E4:93
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/6l79bTxrN6KeLA3jp6xPdqUA5JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f02::/32
2a0f:bb07::/32
Signature Algorithm: sha256WithRSAEncryption
64:ee:a6:4c:a1:82:fb:77:de:3b:2b:b9:62:ee:71:79:2b:71:
10:e0:bc:f4:21:1c:fa:e2:43:d5:d9:51:0d:b2:af:3a:b6:e5:
03:cf:19:7c:14:45:c4:b4:3f:b7:a6:0b:4a:92:80:f6:e6:73:
0b:4c:85:57:31:64:77:f7:f8:6b:4b:96:67:97:a5:ff:9d:4d:
3d:6e:c3:6d:f8:f8:93:3f:90:dd:86:3a:e8:91:a8:56:cf:94:
47:86:ba:62:ed:d7:7d:8c:57:4a:8a:c6:0e:6b:3d:27:27:38:
2c:b5:65:0f:fa:2c:ce:54:56:fb:6d:98:68:17:7e:36:de:81:
40:ed:40:cb:49:f8:63:61:b5:f4:7a:02:b3:5f:3e:ab:23:aa:
33:e3:e3:92:4b:1f:bc:de:e0:11:a0:1e:80:80:0e:c1:b5:70:
e1:fa:d3:c1:05:0e:a3:23:35:e7:9b:6d:d6:81:4c:f3:9f:76:
06:bf:14:3b:63:2d:6c:fa:5b:c6:68:1e:b6:06:6f:a3:15:9e:
4f:2d:7c:39:7c:5a:dc:34:52:6e:55:9d:fc:85:24:ff:c1:57:
31:70:f0:73:ec:36:05:16:da:4d:9a:1e:0f:1a:6b:d2:32:d4:
86:ae:c2:e0:35:aa:39:2e:37:89:8e:ea:90:ef:cb:bb:19:88:
9d:e6:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:44:21 2025 by rpki-client