Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0AhTGLl_y7OdtCBOGRT_dBasnHg.roa
File: 0AhTGLl_y7OdtCBOGRT_dBasnHg.roa (raw, json)
Hash identifier: OW5xp6hs0cuzFEqqtOxaBoF2LTBhJEpTnUPWwy+R2yg=
Subject key identifier: D0:08:53:18:B9:7F:CB:B3:9D:B4:20:4E:19:14:FF:74:16:AC:9C:78
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01975F62774D543DA700E47278A89EF9A755
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0AhTGLl_y7OdtCBOGRT_dBasnHg.roa
Signing time: Wed 11 Jun 2025 14:26:17 +0000
ROA not before: Wed 11 Jun 2025 14:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207113
IP address blocks: 2a0c:9a40:8f70::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Jun 2025 19:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:62:77:4d:54:3d:a7:00:e4:72:78:a8:9e:f9:a7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 11 14:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0085318b97fcbb39db4204e1914ff7416ac9c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:03:f3:e5:4b:96:c0:64:0f:d6:52:a1:cb:
ac:03:a0:40:ee:5f:ff:46:08:9a:4c:97:09:83:ba:
13:8a:73:00:6a:8f:d3:5c:58:c0:a0:e2:a3:22:ac:
8c:50:fe:d1:ad:49:90:5e:7d:b4:e7:ee:9f:10:28:
e0:76:a8:f8:5b:e9:aa:83:95:74:22:84:5c:4e:98:
17:a2:2a:a3:62:f9:c3:a9:97:b4:a3:09:9f:d5:b8:
dc:d8:48:d4:21:dc:03:28:51:09:66:31:ec:ae:54:
cb:bd:85:b5:dd:66:e2:00:7e:b5:72:06:c1:06:1d:
e0:7d:76:61:07:07:f9:aa:1d:00:b3:a0:17:51:56:
c6:fa:5e:41:d9:17:34:a1:b2:f1:1f:b6:63:01:6f:
17:e3:f1:35:88:4d:b3:de:4f:68:57:72:20:f0:a4:
8a:76:5e:a3:1f:e6:d0:2e:1c:e3:ef:a5:cf:3a:77:
75:54:cf:95:1d:99:0f:1e:5c:6c:f3:4f:19:7e:04:
7c:59:2f:bb:f0:da:27:ad:9e:a3:57:c4:84:b9:01:
6d:fb:96:06:c2:dc:9f:50:9c:b3:62:b0:44:dc:b5:
de:6f:0e:6c:5b:35:7b:f2:e3:1f:4f:20:df:90:3c:
8a:a1:c9:1e:c6:b6:0a:ef:dd:7d:99:3d:d0:38:f0:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:53:18:B9:7F:CB:B3:9D:B4:20:4E:19:14:FF:74:16:AC:9C:78
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0AhTGLl_y7OdtCBOGRT_dBasnHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8f70::/48
Signature Algorithm: sha256WithRSAEncryption
a2:04:a0:a1:ea:b2:e0:99:10:3b:c1:15:43:fe:d9:6b:eb:e8:
82:5b:7e:56:3b:b0:fb:3c:01:05:e1:69:60:03:70:4b:2d:18:
b3:a8:13:f3:e0:29:90:3b:f5:b7:cf:94:f1:b9:39:51:64:c6:
92:30:1a:ed:4a:ef:53:43:f3:c2:c4:a8:14:b3:62:0d:fe:3e:
38:ff:e9:30:c3:13:d2:26:8a:af:79:d3:a6:dc:e1:35:27:74:
b8:31:26:8c:18:33:a2:11:2d:af:21:41:1e:69:04:f7:f7:86:
48:31:93:aa:ac:8f:0b:4c:65:aa:9b:f8:f9:cf:6d:ca:46:4e:
79:91:2c:6b:9b:eb:72:1d:dc:e2:4b:27:1d:aa:21:03:e5:51:
b6:46:cd:50:f2:bf:e0:84:89:9b:53:4c:a0:62:44:a1:22:b6:
9a:2e:fc:3b:3e:85:01:8f:1b:9f:38:a5:d2:7b:01:23:cf:39:
ba:eb:95:6b:a4:6e:f4:3a:ab:a9:e5:17:ea:58:dd:14:62:47:
65:07:87:c6:a8:a6:d1:98:4c:04:58:3a:9c:f3:15:a0:39:79:
44:2e:81:49:ba:e2:77:5b:57:18:f1:4a:f4:27:9e:8d:70:f1:
84:a0:8f:13:0c:7e:ae:9b:36:ed:8a:5b:14:ae:42:d8:c2:58:
b7:a8:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:05:54 2025 by rpki-client