Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wPd18ezGWqiyTAKeMGSINCykm94.roa
File: wPd18ezGWqiyTAKeMGSINCykm94.roa (raw, json)
Hash identifier: MgrhEjqhbZmsNAFK+yfGob1NXeGcSG9XNf9Z6s+8BM0=
Subject key identifier: C0:F7:75:F1:EC:C6:5A:A8:B2:4C:02:9E:30:64:88:34:2C:A4:9B:DE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019763C228A7E7235D673297946A3CB85BD8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wPd18ezGWqiyTAKeMGSINCykm94.roa
Signing time: Thu 12 Jun 2025 10:49:18 +0000
ROA not before: Thu 12 Jun 2025 10:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57433
IP address blocks: 2a02:2fc0::/48 maxlen: 48
2a02:2fc0:1::/48 maxlen: 48
2a02:2fc0:3::/48 maxlen: 48
2a02:2fc0:a::/48 maxlen: 48
2a02:2fc0:b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Jun 2025 11:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:c2:28:a7:e7:23:5d:67:32:97:94:6a:3c:b8:5b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 12 10:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f775f1ecc65aa8b24c029e306488342ca49bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:2a:88:da:b0:32:5d:f7:60:00:93:a5:4f:
1a:c6:6f:73:9f:33:48:7d:e1:8f:f1:65:d4:7d:3c:
9a:57:bd:ae:45:83:b2:86:c1:f2:36:ce:92:2e:06:
1e:dd:0b:5c:55:0d:da:d6:7c:06:04:38:53:15:f9:
45:c8:08:1d:ed:3a:18:50:f7:2f:b1:ad:86:31:df:
c3:30:50:81:6e:8d:30:f1:30:78:eb:df:d7:c3:42:
b0:e6:21:a5:31:d6:72:62:ed:a0:09:4d:f8:d5:39:
be:5a:aa:9f:51:00:5d:16:c6:1b:c6:cc:fb:cf:90:
23:3d:18:8b:cf:60:b7:40:83:28:cf:4b:3f:de:d0:
0e:7d:69:23:f1:80:fc:e9:af:3e:6b:da:80:6d:d1:
04:5e:ee:6a:a7:2c:4c:a1:19:fe:fe:41:d1:02:fe:
25:3a:7d:6e:ec:eb:cd:dc:cc:eb:2c:2a:d3:99:38:
00:c6:86:64:bb:71:c8:03:ab:bf:1e:8f:32:14:98:
e6:25:3d:de:1b:11:7c:70:d7:a8:25:1a:7a:26:b2:
26:ac:15:b5:98:ad:7b:6a:c9:d0:73:be:17:49:9a:
09:d8:35:69:e5:ce:52:cd:5b:6f:97:93:a9:48:d6:
28:8a:03:2d:7d:8b:58:35:a4:a2:68:9f:a0:59:71:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:75:F1:EC:C6:5A:A8:B2:4C:02:9E:30:64:88:34:2C:A4:9B:DE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wPd18ezGWqiyTAKeMGSINCykm94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0::/47
2a02:2fc0:3::/48
2a02:2fc0:a::/47
Signature Algorithm: sha256WithRSAEncryption
20:31:8d:15:bf:82:1d:32:94:c7:e2:31:ad:bf:0a:96:9a:68:
f0:90:93:9e:0c:25:f6:e0:84:d2:b4:17:df:79:fe:09:96:73:
84:a5:5c:7d:b9:5b:44:74:ec:0b:8a:c9:85:d8:ae:91:a4:55:
19:60:1b:24:2d:d9:95:4b:7b:90:68:5b:01:ae:99:5d:61:44:
e2:07:cf:d5:ff:76:6b:d0:62:80:bd:44:c4:f3:c0:e4:d6:9b:
c2:8e:95:70:bc:7b:59:f9:c2:b7:4b:f7:5b:6e:b3:0b:a5:85:
c5:72:23:fc:6e:62:5d:5b:e8:fe:c8:a6:39:49:5a:39:be:98:
b8:7a:9a:9c:87:2e:73:53:f3:20:44:8e:52:7e:70:2e:a8:2b:
81:a8:71:e1:20:56:ee:5c:b8:ba:a7:33:7f:92:29:64:78:f0:
96:62:01:71:4f:f3:37:71:8a:ec:5d:ec:53:fe:c7:0b:1f:18:
66:c8:db:bb:5d:11:83:03:0f:d6:96:3a:b5:2e:39:83:e8:96:
d9:30:ad:b0:d3:3c:f3:e5:b1:1d:60:15:2e:fd:da:a8:4c:ee:
87:ed:1c:46:fb:db:07:64:0c:d9:87:93:9e:a1:df:45:1e:89:
24:b9:5c:37:c6:0c:5a:81:c3:61:f6:ad:d2:fa:ea:f9:28:cd:
03:cb:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:47:25 2025 by rpki-client