Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/HBoaEbEi4i_zRCqtl9u6CeHc73U.roa
File: HBoaEbEi4i_zRCqtl9u6CeHc73U.roa (raw, json)
Hash identifier: A2r4KAO4LIUdp4ZZOF5vE/NL9lvCqWqIzzGX/SI6mAs=
Subject key identifier: 1C:1A:1A:11:B1:22:E2:2F:F3:44:2A:AD:97:DB:BA:09:E1:DC:EF:75
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 01972324F856592062254486C0315229C5B1
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/HBoaEbEi4i_zRCqtl9u6CeHc73U.roa
Signing time: Fri 30 May 2025 21:41:54 +0000
ROA not before: Fri 30 May 2025 21:41:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 2a06:8ac0::/45 maxlen: 45
2a06:8ac0:8::/45 maxlen: 45
Validation: Failed, certificate revoked on Sat 31 May 2025 15:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:23:24:f8:56:59:20:62:25:44:86:c0:31:52:29:c5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: May 30 21:41:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c1a1a11b122e22ff3442aad97dbba09e1dcef75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:67:f1:ad:a8:33:95:da:b4:dc:b4:26:62:
e8:39:70:2d:f5:4f:92:66:42:6a:06:f6:7b:94:7a:
1d:3d:81:01:ac:25:58:bc:95:7a:0f:6d:54:2c:94:
90:67:2a:4a:14:1d:d4:bf:6f:ed:8e:2c:46:a4:66:
3e:3f:03:0e:d9:cf:c3:40:62:7b:c6:d8:56:75:18:
cc:bc:ea:c7:4a:11:f8:8c:6b:00:9b:3d:e9:18:4b:
1d:2b:59:38:ff:e2:a9:76:57:a0:55:13:68:8e:74:
8e:cd:03:51:6c:69:19:18:62:9a:bb:d2:1e:02:b2:
1a:0b:cd:f3:4a:e4:df:d4:f9:d0:67:4e:a3:df:a9:
df:86:41:e6:60:45:96:d3:b4:36:9d:e8:73:e7:89:
5e:86:ff:1d:9e:32:62:c4:39:c2:d1:26:07:1e:93:
f2:02:18:b7:c6:b0:0d:5f:95:67:65:4a:df:9d:3e:
89:1b:e5:41:f8:69:4a:58:27:b8:56:d3:ec:df:68:
46:dc:37:aa:b0:03:9d:e3:11:fe:07:60:79:9d:ed:
fb:a1:83:73:4b:c4:b7:77:52:bc:a6:41:3a:42:14:
32:fc:ca:6c:31:93:44:8a:c7:db:b2:7c:65:76:e2:
4b:9c:e4:86:fc:ac:2d:53:55:97:0f:f2:fc:19:3a:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1A:1A:11:B1:22:E2:2F:F3:44:2A:AD:97:DB:BA:09:E1:DC:EF:75
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/HBoaEbEi4i_zRCqtl9u6CeHc73U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:8ac0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:0c:92:10:e3:23:ab:27:e2:20:53:e1:49:49:91:ce:31:74:
2e:f9:e3:e2:52:78:1b:1a:1c:7b:27:a6:1c:ee:4f:19:7e:6e:
5c:3e:02:85:3a:12:52:03:71:c7:3f:83:3c:08:ee:26:fc:72:
18:06:ed:c0:12:ee:65:01:d4:b9:74:55:7d:cf:85:8e:ff:25:
94:81:13:bb:4b:29:a1:8c:cb:1d:24:61:fd:3d:c9:36:d2:84:
6c:02:f6:84:47:57:66:8c:f5:39:dd:53:f9:f1:1b:9f:a6:f0:
a9:92:85:c0:d4:18:76:60:c0:07:0d:8f:a0:00:c7:c9:ea:04:
03:a9:47:7d:c4:e1:08:c0:7c:1d:03:21:4f:ec:13:5a:eb:e0:
a1:86:14:d3:28:92:89:2c:0c:bd:d1:06:8e:25:27:58:ce:a8:
01:70:b8:85:ff:81:ce:ad:f0:90:e4:b2:cd:6f:2b:6c:af:c6:
ba:84:a3:b6:d5:f4:00:f9:90:e7:33:07:56:e7:9b:9e:8b:06:
ff:ac:6a:45:35:cc:4c:28:65:b4:14:3d:5d:e3:87:c5:11:f2:
29:b8:0a:fe:10:39:dd:f0:dc:33:87:4a:5a:fa:5a:18:4c:58:
79:6f:d5:9f:81:10:39:b8:17:36:22:c5:a0:ef:2d:7c:f3:d1:
03:e0:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:08:26 2025 by rpki-client