Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/woHG9gNJP5QxP9JKOrmVa1Fc2Qk.roa
File: woHG9gNJP5QxP9JKOrmVa1Fc2Qk.roa (raw, json)
Hash identifier: u0Md/adqcTqscVehZkkXFQudDvyQA+CiLiuNQ+RMM4Y=
Subject key identifier: C2:81:C6:F6:03:49:3F:94:31:3F:D2:4A:3A:B9:95:6B:51:5C:D9:09
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0197573A265F439D96BF4EB551D577758755
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/woHG9gNJP5QxP9JKOrmVa1Fc2Qk.roa
Signing time: Tue 10 Jun 2025 00:25:18 +0000
ROA not before: Tue 10 Jun 2025 00:25:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0d:d940:1000::/36 maxlen: 36
2a0d:d940:1e00::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 10 Jun 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:3a:26:5f:43:9d:96:bf:4e:b5:51:d5:77:75:87:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 10 00:25:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c281c6f603493f94313fd24a3ab9956b515cd909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:3d:53:08:1f:e6:00:c7:c2:4d:75:fa:a9:
79:31:d4:25:fc:25:cf:e0:5c:80:84:72:43:82:af:
a2:e3:68:ba:1f:bd:f2:a2:df:dc:fb:d3:ea:c6:a4:
45:a9:4c:f7:e2:12:13:e9:eb:59:02:aa:03:09:cb:
71:15:57:f2:99:52:de:58:ca:44:cb:2f:b1:52:20:
a2:2e:d1:78:1e:fb:0b:26:bd:1d:95:18:41:a6:5c:
80:31:6c:cb:ae:24:03:74:18:10:63:96:6a:b1:fc:
15:9e:0d:23:e7:e5:a8:62:86:1a:29:25:ae:e1:c7:
87:9b:70:61:99:bd:b5:b4:18:10:5a:f6:1e:53:73:
78:54:19:08:0d:ff:0a:9a:19:2d:c8:b2:7c:8f:88:
f4:a0:fd:e2:a7:7d:2f:b9:15:d9:e2:55:69:0b:93:
c4:2f:5d:15:f7:a4:4a:7c:ee:fe:cc:d9:44:41:0b:
e3:d8:2b:77:09:d4:20:48:01:74:b3:1e:18:16:b8:
72:76:30:44:3f:a0:b0:d9:cf:f4:be:18:29:3e:05:
d7:27:ca:cb:0d:d4:28:fd:5b:df:5b:26:cb:7c:a9:
cf:dd:81:95:85:33:d5:df:24:cb:d6:b6:e0:da:47:
6d:ed:0e:6a:ad:59:07:a6:ae:6f:61:43:92:2e:7c:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:C6:F6:03:49:3F:94:31:3F:D2:4A:3A:B9:95:6B:51:5C:D9:09
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/woHG9gNJP5QxP9JKOrmVa1Fc2Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:1000::/36
Signature Algorithm: sha256WithRSAEncryption
39:68:c2:89:59:40:40:68:fb:9a:27:96:9c:cc:2f:c1:15:08:
24:21:cd:30:70:36:9f:44:51:0f:a7:55:13:6e:41:61:bc:72:
27:14:e7:fd:63:b5:13:d2:03:03:02:7e:cf:f7:b2:21:9a:56:
8d:c7:b9:8c:da:78:5a:71:83:f7:89:eb:b8:f8:59:c3:ca:44:
88:51:82:51:69:3d:b3:f5:b4:02:c7:fa:cf:20:0e:7a:36:f4:
33:36:e0:3f:14:03:11:57:06:fb:2e:4a:0d:7b:2a:82:36:19:
34:8a:f3:14:b2:e0:12:02:11:9d:a2:ff:11:dc:8c:1d:fa:3c:
6c:d0:13:05:47:86:74:57:bf:9d:7f:48:fb:fb:b5:8f:2a:86:
ce:79:57:87:1f:35:df:8a:18:b9:15:b6:4d:d4:41:88:dc:65:
71:c5:6f:3f:7e:1a:fc:f7:6d:99:c4:9e:fa:44:77:22:31:ec:
8c:db:d2:82:19:ee:db:72:c2:c0:19:bc:89:a6:b2:b1:0f:44:
3d:04:f5:9a:97:cf:f6:c5:ca:89:b8:f9:cf:71:e2:85:19:26:
2f:a2:6f:eb:2d:14:1d:b3:4e:95:85:41:7f:0a:ab:63:fd:fa:
82:44:56:8f:da:e6:ca:11:8d:12:9b:75:b5:9c:c0:09:eb:39:
fc:9c:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:38:27 2025 by rpki-client