Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nvDvcrbPVq5C99U--KS6Pe_WulM.roa
File: nvDvcrbPVq5C99U--KS6Pe_WulM.roa (raw, json)
Hash identifier: FBG5mKT4HUP42L5qlRrHEAVhmU1R4IzNulhzkjE7ZYQ=
Subject key identifier: 9E:F0:EF:72:B6:CF:56:AE:42:F7:D5:3E:F8:A4:BA:3D:EF:D6:BA:53
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01967D1B1A57DDE568B63BFCEAA09D93886A
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nvDvcrbPVq5C99U--KS6Pe_WulM.roa
Signing time: Mon 28 Apr 2025 15:54:10 +0000
ROA not before: Mon 28 Apr 2025 15:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:7887::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 29 Apr 2025 15:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:1b:1a:57:dd:e5:68:b6:3b:fc:ea:a0:9d:93:88:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Apr 28 15:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ef0ef72b6cf56ae42f7d53ef8a4ba3defd6ba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:24:99:90:61:49:81:2d:dc:31:e1:74:87:
53:ef:23:7d:a1:cb:9c:40:2c:f9:22:69:15:07:3d:
e8:7c:26:32:a6:04:11:11:e1:2f:3f:b2:03:c6:21:
f1:e3:e8:26:12:7d:25:20:d8:17:cb:52:7f:ab:ba:
ac:93:69:45:74:75:c3:82:88:70:dd:6e:02:87:19:
23:ff:b8:f7:cf:b5:fe:43:5d:9f:90:0d:30:d7:91:
db:40:41:5b:ae:15:a6:47:a7:f1:89:ee:9f:16:39:
00:e2:4b:f9:9e:f6:20:16:f7:71:41:27:20:12:d0:
97:72:fb:97:d8:c7:68:75:d3:2f:50:5a:4e:52:cc:
e1:33:b5:29:b6:2c:29:c9:75:1e:35:0d:08:25:34:
07:f8:70:cd:99:5a:f5:91:ba:3b:b9:65:6b:74:5a:
f5:37:f1:36:c4:a0:e8:fe:f7:8f:27:c8:4c:bb:57:
db:7b:3b:91:2b:da:e4:16:0e:64:eb:de:8f:9f:d2:
fc:3a:4e:89:ce:aa:f9:93:a1:9b:d7:40:ed:cd:4b:
11:e9:05:35:f2:e0:a8:f9:1e:83:9c:a1:87:8c:c3:
75:0b:ad:e5:a3:9c:18:a9:d8:66:09:bb:e2:70:4e:
3e:3f:39:8d:b1:28:e9:e3:ed:49:77:5d:4a:03:73:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:EF:72:B6:CF:56:AE:42:F7:D5:3E:F8:A4:BA:3D:EF:D6:BA:53
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nvDvcrbPVq5C99U--KS6Pe_WulM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7887::/32
Signature Algorithm: sha256WithRSAEncryption
a7:b8:66:0c:03:f1:ad:e9:8d:e8:8b:b6:0d:61:88:07:38:28:
f9:73:60:d2:7e:cb:23:47:f6:06:4c:3e:be:ca:31:cb:dd:76:
b4:84:15:b8:0e:bb:26:1f:4d:57:01:12:a7:65:76:db:d9:55:
70:a7:9b:78:65:f6:9b:6a:21:c0:25:a3:db:3c:fd:74:52:c6:
ff:73:5c:a2:9b:b6:29:11:b7:14:33:7d:c3:60:3a:e7:6f:89:
f4:0b:c9:af:04:34:a8:6d:02:e6:91:0b:b0:ad:4e:90:4d:af:
39:ba:10:ce:9f:a9:99:55:9b:6d:2f:45:69:c3:35:ec:08:6e:
b3:84:a0:ce:30:fe:08:e1:ff:de:4b:4e:35:5a:74:aa:b9:30:
fc:6b:f5:cb:bf:bd:fc:b6:92:8f:9a:2d:8b:01:07:2c:fc:58:
7e:72:bd:e4:d6:ee:a5:1c:e5:61:e4:10:2e:07:0c:65:a3:c3:
aa:a4:f0:39:1b:f8:42:db:c8:60:67:ff:49:ee:f5:f1:53:ff:
8e:09:13:16:98:d5:b5:8b:c7:0d:ab:4e:f8:00:ea:a3:64:1e:
4b:31:31:ac:ea:2f:78:da:35:1e:bb:cb:85:1b:e2:5f:84:9b:
d8:9c:25:fe:6b:a0:a7:f8:1f:51:66:b4:b6:8b:4e:91:34:4d:
b7:3e:46:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:49:25 2025 by rpki-client