Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KfURR6I-WfSDn-rlc1CFxI0ROyI.roa
File: KfURR6I-WfSDn-rlc1CFxI0ROyI.roa (raw, json)
Hash identifier: 64jcl1A5SGFFciAVu2ZXLb558K3QsMZ0ZgtDMA+85VY=
Subject key identifier: 29:F5:11:47:A2:3E:59:F4:83:9F:EA:E5:73:50:85:C4:8D:11:3B:22
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01970400906B64BC014F62FEB5E737BCE806
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KfURR6I-WfSDn-rlc1CFxI0ROyI.roa
Signing time: Sat 24 May 2025 20:33:55 +0000
ROA not before: Sat 24 May 2025 20:33:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206744
IP address blocks: 2a06:5fc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:00:90:6b:64:bc:01:4f:62:fe:b5:e7:37:bc:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 20:33:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29f51147a23e59f4839feae5735085c48d113b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:14:70:f7:d9:93:e0:24:5c:9e:f1:48:e5:
ac:40:e7:5e:13:02:9e:a2:8d:09:6e:6b:91:37:41:
be:cc:65:8b:03:12:6a:d1:89:a8:66:9d:53:42:31:
d1:a8:87:e7:ee:e6:f9:cc:e9:70:b6:e8:e1:8e:2a:
0a:87:4a:b0:b8:5b:da:e0:e9:51:3d:a6:e3:8f:43:
ee:78:e6:9c:2b:8a:10:4e:96:ad:47:76:58:a3:60:
75:78:fa:f5:09:06:0e:c6:e4:2d:6c:db:41:c9:73:
1a:7a:43:97:86:23:71:63:75:6f:5c:17:b5:6e:64:
1c:30:63:31:46:39:4d:d4:3f:2d:ff:ec:3d:48:3c:
e0:9f:f1:5a:10:b5:28:d4:a4:74:a4:89:0c:2d:50:
3e:72:f4:91:58:22:3f:c1:2b:c8:3c:8d:7b:31:bd:
d5:4e:89:8b:57:d6:b0:15:2b:44:ff:e1:70:0b:08:
ea:3b:e8:c2:39:e7:43:aa:e3:53:b7:6d:3d:e5:9a:
3a:fa:95:c3:d7:1c:91:d3:0b:58:b9:5e:c7:60:ae:
b8:ff:03:1d:38:f2:23:a2:ea:e1:14:69:a0:5d:15:
4a:bb:43:13:01:86:a9:30:5b:eb:79:4a:b5:a6:27:
fc:96:44:69:d6:13:af:fd:71:1c:d4:43:52:8d:2d:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:11:47:A2:3E:59:F4:83:9F:EA:E5:73:50:85:C4:8D:11:3B:22
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KfURR6I-WfSDn-rlc1CFxI0ROyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc5::/32
Signature Algorithm: sha256WithRSAEncryption
39:f8:d4:ce:19:7f:e3:dd:7b:cd:c5:f0:85:29:b5:40:cc:58:
b8:7b:8d:99:21:77:51:ff:45:2e:04:66:f0:22:af:95:2d:81:
89:e0:92:90:f6:5d:85:4b:4d:c0:fc:5b:8c:34:fb:d9:5d:c6:
92:06:92:96:e8:fa:4f:77:c5:b5:9d:eb:15:96:d1:63:ed:31:
32:b6:95:e5:87:99:90:4c:1a:23:3a:e0:db:df:52:1d:81:0b:
99:e4:4c:91:d8:9f:b9:e1:37:6b:14:a2:53:dd:d3:18:87:12:
63:ae:b9:b5:d5:ff:17:a6:86:a3:f1:d0:2e:dc:6f:bf:a1:05:
95:0c:27:1a:b8:8d:81:31:8a:81:c6:89:39:f3:00:4a:75:c2:
e9:5f:31:aa:f8:3c:46:38:b4:99:cf:dd:2c:7a:b6:47:29:07:
f2:84:a4:8f:93:7d:ec:66:d4:c6:e2:6e:1c:af:19:6f:05:5c:
4d:2b:e7:4d:50:9d:c5:65:6b:d1:1c:73:56:5d:10:93:23:02:
36:60:5a:80:65:c9:bc:6c:9e:64:2e:69:b2:5a:7a:0c:4f:36:
8c:4c:49:38:86:3f:0f:5a:5b:fe:80:bc:e9:4c:77:69:79:31:
45:31:d6:28:75:c6:78:ec:18:41:0e:1f:35:5a:a2:a4:48:93:
8a:e6:3b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:08:37 2025 by rpki-client