Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/hnT2tKwUMZWfaF3wc7A41v7QKec.roa
File: hnT2tKwUMZWfaF3wc7A41v7QKec.roa (raw, json)
Hash identifier: NA6Ak7uC7AZIyrqug4rjDQJSZv/CUbZrd2fKcSr7z40=
Subject key identifier: 86:74:F6:B4:AC:14:31:95:9F:68:5D:F0:73:B0:38:D6:FE:D0:29:E7
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01985CC2D4995ABD74D1D6B597F7DCCB0A76
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/hnT2tKwUMZWfaF3wc7A41v7QKec.roa
Signing time: Wed 30 Jul 2025 19:15:28 +0000
ROA not before: Wed 30 Jul 2025 19:15:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211009
IP address blocks: 2a05:1e47::/32 maxlen: 32
2a09:a802::/32 maxlen: 32
2a09:c707::/32 maxlen: 32
2a09:e701::/32 maxlen: 32
2a0e:5885::/32 maxlen: 32
2a0e:b200::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 06 Aug 2025 17:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:c2:d4:99:5a:bd:74:d1:d6:b5:97:f7:dc:cb:0a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jul 30 19:15:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8674f6b4ac1431959f685df073b038d6fed029e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:d9:70:9d:ce:cc:7a:b6:fa:b8:b4:d8:cc:
8e:37:a7:ac:8e:86:a5:93:c9:2e:97:c6:c0:ba:f1:
8d:69:0f:c2:6c:69:9d:06:80:10:cc:70:6c:41:fb:
74:10:e3:35:5a:d9:34:b1:9f:af:1f:29:58:db:93:
09:f0:b7:b7:65:eb:1d:72:18:16:0f:01:12:32:79:
8d:e4:82:0a:f4:8d:84:a2:8f:24:af:e0:e2:ca:4c:
7b:80:14:28:5b:85:d6:d6:1a:c7:bf:f9:3f:bc:f5:
e0:5e:ff:f8:a9:38:84:22:17:96:29:eb:57:33:f2:
3a:49:76:57:c4:01:56:00:17:5a:fd:a6:b0:64:43:
0e:de:d2:62:1f:8c:f4:c5:d4:28:44:7e:82:08:76:
94:76:ec:29:09:cd:65:45:1f:a2:1b:3f:bc:75:23:
6d:41:74:dd:c1:20:9a:39:00:32:3f:a4:d1:2c:2f:
b2:3e:6c:7d:48:04:f1:4f:fc:07:38:cf:f0:f8:f6:
a8:02:8d:e2:7c:86:ac:45:e6:71:8d:36:5f:e6:6f:
07:97:b7:82:58:75:df:3a:57:4b:24:0d:2f:87:60:
7d:cc:fd:4a:70:7d:2d:99:19:b1:97:a8:d5:f1:9c:
3a:8a:a9:44:dc:bb:f3:49:f7:a2:a5:8e:80:57:b7:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:74:F6:B4:AC:14:31:95:9F:68:5D:F0:73:B0:38:D6:FE:D0:29:E7
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/hnT2tKwUMZWfaF3wc7A41v7QKec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1e47::/32
2a09:a802::/32
2a09:c707::/32
2a09:e701::/32
2a0e:5885::/32
2a0e:b200::/29
Signature Algorithm: sha256WithRSAEncryption
ac:75:51:ad:5b:79:c8:da:33:c1:44:67:4a:a1:16:d5:83:fb:
66:83:bf:21:8e:64:3a:98:2e:81:a3:5c:2c:21:5a:e3:da:3a:
12:67:aa:2d:15:ab:30:1d:20:40:5b:9f:ec:a2:e1:43:bf:c7:
48:96:82:59:94:80:21:cc:0f:c5:25:a0:41:57:05:af:47:86:
e7:79:9b:c5:7a:65:48:23:9b:7b:1f:7c:1c:f6:09:f7:da:6d:
f1:e5:7c:95:63:50:e4:81:5c:e0:8a:e3:f4:e5:1f:75:ec:98:
e9:1a:53:1a:e1:f3:0e:f1:69:c0:f6:cc:0c:52:38:84:b9:c3:
a0:1a:82:7b:f2:91:cb:f7:02:92:42:3c:73:f0:6c:7c:20:79:
b7:f0:1f:d4:45:34:95:01:9a:35:e8:db:12:26:66:0c:41:94:
01:3b:3c:fb:71:48:e5:b4:35:7b:a6:7b:f8:af:23:40:4e:a8:
f6:30:e5:41:f8:91:e0:8b:06:87:6b:75:ea:9b:33:24:19:0f:
4d:66:c2:a4:0c:95:57:2e:56:7e:7c:c2:7d:2f:b9:90:3f:43:
62:5d:cc:19:1a:be:66:29:46:67:df:28:c3:42:57:83:6f:43:
b1:b6:8d:e3:4c:5c:be:cc:46:09:63:88:0b:aa:8c:40:f9:b2:
22:c9:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:32 2025 by rpki-client