Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/GDxaoZumSoDGqTO3M0pJi428wsk.roa
File: GDxaoZumSoDGqTO3M0pJi428wsk.roa (raw, json)
Hash identifier: Z7z32gY/YkpjiZo9RPMUtYmoH3DG2g4tYt6HGELgMbk=
Subject key identifier: 18:3C:5A:A1:9B:A6:4A:80:C6:A9:33:B7:33:4A:49:8B:8D:BC:C2:C9
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01987AA6D086E689F6C940953E1B8EC72B38
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/GDxaoZumSoDGqTO3M0pJi428wsk.roa
Signing time: Tue 05 Aug 2025 14:33:29 +0000
ROA not before: Tue 05 Aug 2025 14:33:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a05:1e40::/32 maxlen: 32
2a06:4380::/32 maxlen: 32
2a09:c700::/32 maxlen: 32
2a09:e702::/32 maxlen: 32
2a0e:3f40::/32 maxlen: 32
2a0e:5881::/32 maxlen: 32
2a0f:1807::/32 maxlen: 32
2a12:2fc6::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Aug 2025 19:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:a6:d0:86:e6:89:f6:c9:40:95:3e:1b:8e:c7:2b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Aug 5 14:33:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=183c5aa19ba64a80c6a933b7334a498b8dbcc2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:92:0c:30:58:06:86:c8:c5:ae:47:6f:0f:
23:f5:7f:c0:5e:e4:91:ca:0d:d3:cd:81:8c:1e:02:
e9:2f:9b:4a:29:07:13:1e:39:b6:81:5b:e3:f9:e3:
f6:9c:bd:62:ff:8b:c6:5f:a0:a7:9c:5b:65:44:03:
e0:77:ea:3b:a2:43:27:9b:79:4a:17:d7:d8:6b:91:
b9:e0:50:57:ec:20:48:93:bf:43:55:f3:bb:c2:f9:
25:a2:6e:7c:e9:81:96:21:a6:76:3b:70:7a:6e:8b:
34:e5:27:e8:7e:65:d2:ee:52:68:5c:54:2f:29:f0:
1f:1e:b2:b4:e0:28:e4:38:7c:be:cc:8b:38:ba:70:
10:86:5d:08:1b:62:41:82:e7:83:4f:65:cb:1f:1b:
57:29:c0:26:fc:0a:13:e4:dd:fd:f2:04:20:86:57:
36:81:c1:b3:d0:cd:1f:78:82:4a:f9:72:2f:36:02:
2c:3d:50:76:12:9e:03:e3:22:ca:c7:26:98:99:10:
d1:1c:8d:b2:93:00:cc:5d:63:89:3a:4e:91:f8:0f:
35:fc:f4:27:b8:07:9a:81:17:81:53:67:f8:f7:87:
14:98:b4:9f:c0:5d:a4:c0:d6:02:d1:8c:f5:62:dd:
09:c7:88:fe:16:e3:72:1f:54:72:7f:a4:21:da:e0:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:5A:A1:9B:A6:4A:80:C6:A9:33:B7:33:4A:49:8B:8D:BC:C2:C9
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/GDxaoZumSoDGqTO3M0pJi428wsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1e40::/32
2a06:4380::/32
2a09:c700::/32
2a09:e702::/32
2a0e:3f40::/32
2a0e:5881::/32
2a0f:1807::/32
2a12:2fc6::/32
Signature Algorithm: sha256WithRSAEncryption
3f:cb:ec:1d:b1:23:5d:2e:eb:70:01:08:53:eb:5e:2f:42:93:
b4:bc:61:48:d2:ac:a2:0b:e0:02:78:4b:5f:43:56:e5:de:b4:
c1:ca:1d:a2:14:15:a5:2a:73:f1:0d:b3:b9:d9:b9:24:fb:7e:
c2:4f:88:28:03:7b:8f:77:0d:b4:8d:19:4b:43:67:23:77:20:
6d:37:0b:2b:9f:25:58:54:cf:bc:e3:ca:8a:05:b8:0a:c7:16:
35:7f:ab:b4:16:76:5f:c9:06:43:e9:3b:8e:1b:1e:a4:f4:e4:
85:21:80:76:96:7e:2f:7b:8a:99:1e:0b:4f:0e:41:d8:46:71:
87:25:e0:aa:13:98:b2:61:8d:4a:a6:67:54:44:68:7a:4a:68:
18:de:88:fa:50:27:e4:b3:af:f6:6e:ef:ef:46:e3:4d:ff:77:
49:86:4d:3b:24:bb:a8:af:c5:f9:f8:7b:dc:40:eb:85:2e:b3:
5e:1f:93:36:e3:cf:e2:0b:7f:43:f0:e8:8b:47:ca:51:51:1e:
e8:92:ce:96:b1:d4:67:b0:72:ea:ec:56:ff:12:28:03:e0:9c:
82:61:92:68:06:16:37:96:1f:ef:ec:7e:04:ec:17:0f:ed:11:
16:81:ea:f9:0b:52:0c:06:4c:e2:7f:86:a7:39:88:17:22:70:
8b:2d:cd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:21:00 2025 by rpki-client