Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/f-hXathyAvRN2ld-uSSE-vjwvew.roa
File: f-hXathyAvRN2ld-uSSE-vjwvew.roa (raw, json)
Hash identifier: 48UobrIHEUtM4KgYc61yXNFSUSaIokWVah91EZhf+Gk=
Subject key identifier: 7F:E8:57:6A:D8:72:02:F4:4D:DA:57:7E:B9:24:84:FA:F8:F0:BD:EC
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 019687D69A32ACD9CA1ECF09DF17EB9E6A71
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/f-hXathyAvRN2ld-uSSE-vjwvew.roa
Signing time: Wed 30 Apr 2025 17:55:10 +0000
ROA not before: Wed 30 Apr 2025 17:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0e:67c2::/32 maxlen: 32
2a0e:8542::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 15 May 2025 17:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:d6:9a:32:ac:d9:ca:1e:cf:09:df:17:eb:9e:6a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Apr 30 17:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fe8576ad87202f44dda577eb92484faf8f0bdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:cc:40:46:79:d3:40:88:63:86:47:38:93:
0d:48:37:1a:56:3e:74:fa:f6:cd:2c:4f:e3:a5:be:
47:fa:58:ec:89:57:26:b9:98:f8:1b:3b:3b:1a:de:
ff:2c:22:c6:b5:8d:d0:18:6c:39:97:5a:91:bf:5e:
4b:b2:5a:f0:c1:d8:85:d5:0e:ce:20:5b:cb:2f:8c:
b7:42:01:f4:8c:c3:c1:5e:fd:2e:4a:39:69:b2:c2:
56:32:52:47:8c:4e:97:a6:c3:61:25:5d:33:4d:79:
f3:5a:7e:6f:75:d3:d6:87:92:a4:0d:93:7c:6c:23:
47:8c:4e:2d:cb:d4:ea:80:88:ef:f3:c7:e3:6f:55:
de:cf:df:a6:e2:7a:04:c2:d0:3a:c8:82:8e:64:91:
e5:da:f4:9e:14:a1:de:fc:2d:08:84:da:0e:c7:b3:
fc:03:2a:86:47:28:fd:12:a0:1f:d1:1c:23:5d:d3:
26:1f:9b:c7:35:16:1a:c5:59:fc:9a:6d:56:28:e4:
0e:94:44:70:16:c9:dd:de:8f:ef:61:c3:de:00:93:
f5:3b:75:b7:8d:5a:de:76:d3:47:97:09:d0:d7:c1:
25:70:ab:2a:84:2a:b0:de:b6:73:b5:fa:6e:fa:a4:
b4:b4:7a:1c:4b:f1:79:38:28:b4:40:af:8e:69:ce:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:57:6A:D8:72:02:F4:4D:DA:57:7E:B9:24:84:FA:F8:F0:BD:EC
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/f-hXathyAvRN2ld-uSSE-vjwvew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:67c2::/32
2a0e:8542::/32
Signature Algorithm: sha256WithRSAEncryption
34:c7:2a:05:ed:0f:af:b1:3c:94:ad:13:51:70:a5:95:61:77:
ef:5f:58:a1:9d:c4:0f:b6:4c:95:07:97:f2:de:c5:79:f0:3e:
92:d0:b6:0c:ab:02:6f:55:59:b8:74:d7:4f:72:95:7a:f1:60:
7d:c4:c3:b0:f6:2c:2d:8b:5f:40:79:8d:68:bb:c3:d3:56:84:
c0:6d:51:d9:f2:c7:01:9b:e8:63:c5:ca:ed:c3:8b:12:c4:0a:
0d:09:bf:25:24:2b:ac:24:0c:2a:b2:25:ad:ec:a4:46:1b:03:
dc:ac:b4:e3:26:13:ff:81:61:dc:53:ea:e3:e1:d9:42:df:71:
9e:7a:f5:65:8f:9a:a0:9d:0d:06:5a:84:6f:8f:ee:13:ba:b5:
bf:cb:47:28:79:43:b4:44:67:ac:00:54:ac:f0:91:11:78:7e:
d4:2b:31:0a:6e:50:05:6a:7e:89:73:f4:8a:6f:43:5d:33:22:
8e:a8:b8:77:9e:9b:43:2f:84:e5:1d:51:a1:2c:31:b1:5e:a5:
44:a1:c9:89:08:0c:92:90:29:a3:38:6a:11:06:fc:cb:88:31:
b7:31:f6:10:76:cd:9f:4d:4a:af:8d:d0:a1:e9:91:0a:ce:22:
ff:cf:40:44:16:4a:97:f2:d0:c3:d2:93:42:de:31:a0:f1:6e:
2c:36:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:16 2025 by rpki-client