Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/w0bZjD9XxVZaVndZ9hSQJipDKWE.roa
File: w0bZjD9XxVZaVndZ9hSQJipDKWE.roa (raw, json)
Hash identifier: zQ3c5XI0nqbrtLEsh+BSHiXCQUZEMQd1v+GeaiHY9iE=
Subject key identifier: C3:46:D9:8C:3F:57:C5:56:5A:56:77:59:F6:14:90:26:2A:43:29:61
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 019717C94167D4E955D9DC3BAA4B2A0A6A89
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/w0bZjD9XxVZaVndZ9hSQJipDKWE.roa
Signing time: Wed 28 May 2025 16:45:54 +0000
ROA not before: Wed 28 May 2025 16:45:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35661
IP address blocks: 2a0b:93c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 29 May 2025 07:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:c9:41:67:d4:e9:55:d9:dc:3b:aa:4b:2a:0a:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: May 28 16:45:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c346d98c3f57c5565a567759f61490262a432961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:15:85:b4:be:16:7c:aa:23:80:ab:12:80:
e6:9f:68:c0:6b:fd:17:8f:3b:80:58:eb:af:86:f8:
2e:c1:61:76:c4:72:54:f7:c9:d9:65:e3:51:59:b5:
e9:ed:c6:6d:45:c8:8c:b4:90:95:a5:8f:80:98:df:
e8:ef:0c:fd:72:e0:2c:89:89:40:14:ef:33:0b:da:
32:5b:fb:cc:8e:05:6d:2c:99:b8:c5:8e:d7:c6:7b:
f0:25:ee:c2:62:f5:54:58:bc:e7:23:00:22:72:3b:
1e:27:fc:5c:d3:48:99:97:ec:d7:03:3c:17:72:25:
a3:78:4d:92:0c:0c:18:16:67:e3:7f:cb:9f:13:58:
cd:28:aa:c7:bd:65:6e:5e:a7:02:70:3c:ab:c2:56:
3a:23:bf:39:44:9e:42:fd:f0:02:6d:c1:0d:7b:06:
16:67:6a:30:07:6f:c2:11:95:fa:36:42:20:a4:e9:
48:22:95:e0:52:b4:ff:18:43:29:5d:50:ab:30:86:
aa:e5:ee:6f:8f:5d:70:d4:df:58:c0:25:65:06:59:
3e:35:c7:6b:22:15:20:1a:0a:13:43:6e:07:c7:06:
5d:87:2a:3a:f7:8d:3a:82:0c:78:53:c5:ee:6f:9f:
f3:67:5c:14:c2:ec:67:83:4b:58:75:cc:8d:98:66:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:D9:8C:3F:57:C5:56:5A:56:77:59:F6:14:90:26:2A:43:29:61
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/w0bZjD9XxVZaVndZ9hSQJipDKWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:e5:b8:c0:8b:2c:66:72:e9:1f:1b:73:29:cb:a8:0c:84:2b:
80:88:2f:21:58:08:ce:95:e8:1c:24:dc:8a:78:d5:f7:a7:d0:
ca:21:4d:e9:b9:41:12:43:42:c8:a7:8c:7d:5c:80:26:98:67:
fd:13:d1:b9:b3:b9:f2:89:44:b9:84:a1:1c:41:12:9e:cb:04:
87:68:c6:24:9e:27:3d:71:e9:ab:90:5e:33:32:7d:cc:08:09:
04:e4:d3:a9:aa:59:81:56:f6:f2:de:4d:c1:f8:56:75:06:51:
8c:a0:be:72:97:40:23:8b:4f:33:4b:78:05:a8:93:5a:8f:2e:
32:73:d3:6c:60:6d:c3:7f:99:7a:dd:1c:02:ef:9e:ea:51:94:
42:b6:5c:5d:0d:29:1f:92:4c:e7:87:88:ed:92:c3:37:7f:e7:
49:b5:4d:57:16:f8:15:3f:38:17:ea:4d:43:90:d7:7a:a9:10:
2a:29:4e:29:a5:17:36:45:05:61:d7:42:57:2a:1d:84:1f:27:
00:a4:23:d7:a4:38:63:d9:da:a0:a7:b4:c9:99:2c:db:18:a2:
3c:f9:4d:3f:3a:d6:a0:e3:15:ce:ad:a1:ed:ec:7b:45:06:4c:
19:6d:cc:ce:4f:e4:e8:dc:39:94:c8:d9:3c:c6:80:22:8f:95:
d5:34:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:09 2025 by rpki-client