Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oVPC7aamr4COWumoX-6xms8DZ3E.roa
File: oVPC7aamr4COWumoX-6xms8DZ3E.roa (raw, json)
Hash identifier: B/0+3lbGfkrwMRozz7oDVdbl6BGeSp701r1xghrsWt4=
Subject key identifier: A1:53:C2:ED:A6:A6:AF:80:8E:5A:E9:A8:5F:EE:B1:9A:CF:03:67:71
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019704008F18BA637E4E3D024D77AE7EF092
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oVPC7aamr4COWumoX-6xms8DZ3E.roa
Signing time: Sat 24 May 2025 20:33:54 +0000
ROA not before: Sat 24 May 2025 20:33:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49443
IP address blocks: 2a06:5fc6::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:00:8f:18:ba:63:7e:4e:3d:02:4d:77:ae:7e:f0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 20:33:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a153c2eda6a6af808e5ae9a85feeb19acf036771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:c7:26:90:47:f0:0c:1f:51:38:f3:59:21:
e2:38:2e:ac:4c:3a:d6:9c:6c:37:e3:0c:f0:ae:3e:
7d:1c:05:0b:f3:c1:52:2c:7e:b9:81:09:88:10:3c:
ea:4e:ed:c9:38:19:a3:93:dc:2c:44:ce:54:ec:3c:
24:d5:4c:06:30:a1:78:99:62:6d:60:47:4a:4d:c3:
d8:84:c7:c0:55:a4:df:01:0d:e9:15:6b:30:b9:f7:
59:d9:c9:f0:03:b8:25:fa:38:6a:d5:a8:23:39:a1:
9e:4e:e1:b7:41:db:99:3a:67:70:b5:a4:a9:5b:57:
06:5b:d0:7d:8c:a8:fe:24:3f:d3:ba:19:ed:a8:01:
c3:14:1a:b1:7a:77:21:ed:96:09:e6:f8:23:69:88:
7c:33:b6:62:37:ec:b2:57:16:75:3f:35:1b:57:e0:
f5:13:d4:8a:50:0a:3d:f5:e5:c8:f3:fe:d9:82:07:
e5:1c:a5:81:5c:87:1c:66:e7:83:3d:54:e5:ca:c3:
3a:6a:4f:c8:40:b0:27:44:e4:76:1d:4d:69:2d:dc:
21:b0:84:54:b0:8b:98:44:9f:f4:6a:5d:1f:15:76:
ac:94:73:43:67:9b:b6:67:96:98:a6:8e:90:a5:aa:
8b:49:d8:eb:bc:e2:f3:28:02:ac:d5:6c:2a:1b:85:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:53:C2:ED:A6:A6:AF:80:8E:5A:E9:A8:5F:EE:B1:9A:CF:03:67:71
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oVPC7aamr4COWumoX-6xms8DZ3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc6::/32
Signature Algorithm: sha256WithRSAEncryption
59:81:50:be:4f:2e:7e:95:46:ba:22:8d:92:01:ab:97:5b:1a:
83:15:55:0b:04:d5:3a:16:f7:54:ca:92:d8:ef:00:15:f5:50:
da:30:63:be:5d:6a:b6:09:c5:db:00:88:ef:0e:8b:a0:08:46:
aa:ba:66:ff:47:31:ad:d8:2f:ef:81:84:6b:62:49:9d:9e:ee:
5d:95:fa:6f:32:7c:3f:e0:b7:61:e1:ab:0b:ad:60:89:a6:f9:
2c:ec:f6:65:0e:54:55:c8:ac:a2:3d:68:5b:48:3d:f3:20:5c:
cd:a6:7f:9f:cd:ab:74:27:64:1a:d5:64:ca:e8:1f:c4:3c:0e:
87:bf:3c:fa:ee:59:99:bb:fd:11:fc:a9:d2:8c:e2:58:d6:fe:
8a:e6:71:2c:9a:92:7f:da:8f:16:d0:ca:b3:d4:2a:26:8a:4d:
18:11:6d:77:8f:f6:71:4f:01:1e:36:2f:0c:a3:21:e5:f2:52:
28:59:67:11:07:a6:a7:33:cf:c9:08:ad:d1:af:0c:6e:e0:6e:
16:68:cc:78:b8:53:23:ef:67:09:c2:1e:2f:4d:3f:7a:7f:5a:
d7:61:53:4e:2a:ff:35:ae:95:bf:88:71:be:65:70:19:f5:72:
45:0d:7e:c9:fa:99:4c:cf:2d:80:86:c1:97:3b:3c:9e:ab:49:
b3:08:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:26 2025 by rpki-client