Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/u5wx1IbadMpn2fljynw53O8hDLE.roa
File: u5wx1IbadMpn2fljynw53O8hDLE.roa (raw, json)
Hash identifier: trEe5y2d06DvtgvMeLf2Cq+lXBGSNLQXl5bAewFgb2g=
Subject key identifier: BB:9C:31:D4:86:DA:74:CA:67:D9:F9:63:CA:7C:39:DC:EF:21:0C:B1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019704008FCA69234D78826B792C572C2772
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/u5wx1IbadMpn2fljynw53O8hDLE.roa
Signing time: Sat 24 May 2025 20:33:54 +0000
ROA not before: Sat 24 May 2025 20:33:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206005
IP address blocks: 2a06:5fc3::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 May 2025 09:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:00:8f:ca:69:23:4d:78:82:6b:79:2c:57:2c:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 20:33:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb9c31d486da74ca67d9f963ca7c39dcef210cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:40:58:16:69:a1:9b:c9:d0:24:b8:06:68:
75:41:d6:94:61:5c:b6:8d:ba:f9:7d:c1:51:dc:7b:
5b:dd:a4:12:36:3d:19:cc:87:8f:2c:4e:98:f1:51:
b2:03:67:d1:e7:ec:bc:91:b0:ef:bc:09:1e:39:ba:
84:4e:ef:ef:6f:fa:3f:28:37:26:3f:51:61:82:4d:
ed:83:fb:91:0c:3e:39:95:0d:2a:4a:21:46:e0:30:
bd:8d:49:a2:fa:79:bd:04:8d:07:b8:d6:4e:5f:a3:
5b:72:33:2e:12:a0:fe:ef:db:04:17:cd:a7:57:33:
89:8b:8c:5a:cc:6c:6f:51:a2:7f:f0:2c:25:e0:c5:
26:de:16:45:32:49:2c:f7:50:25:5f:0d:76:f6:fd:
cf:72:62:64:f8:66:12:d2:33:5e:c1:bd:3d:0d:df:
94:05:e8:33:3b:6d:58:eb:f5:00:e5:f3:6e:07:4c:
04:70:2b:cb:5e:0e:6d:ab:f6:78:15:68:c6:d2:2a:
c5:b4:66:14:4c:9c:b6:25:7c:53:37:ad:bb:19:67:
f8:be:ac:ae:da:74:9f:b5:40:ff:86:7f:c4:4a:80:
85:98:52:ec:f8:89:53:90:ab:4f:d2:db:d2:2a:5c:
0c:72:5e:f3:6f:60:d0:c0:a2:1d:4e:71:a0:41:50:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9C:31:D4:86:DA:74:CA:67:D9:F9:63:CA:7C:39:DC:EF:21:0C:B1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/u5wx1IbadMpn2fljynw53O8hDLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc3::/32
Signature Algorithm: sha256WithRSAEncryption
b8:37:51:bf:ea:9c:1f:01:f7:e6:86:89:d3:ba:d8:3d:ac:9c:
2f:41:d4:03:6d:17:09:f8:8b:14:24:ba:4f:e4:08:13:d7:d1:
9e:ea:0e:f2:3d:40:22:5a:64:f3:10:3d:79:2b:1d:43:15:cc:
a5:7e:fb:9d:05:8d:37:13:ad:81:1d:d5:8f:8d:64:71:7e:3e:
b3:de:6e:de:f0:fc:c9:bb:63:e1:48:83:01:89:22:2d:1a:9e:
9a:57:04:36:2c:8c:51:25:28:b3:01:7d:96:67:fc:f7:4c:21:
e6:ba:8d:51:5d:a5:87:2b:dd:d2:0b:d3:20:8f:7c:35:7c:50:
dc:bd:09:4f:e9:4a:a6:cc:57:39:ff:e5:f5:2b:91:c6:ac:a7:
e4:51:32:0e:ab:13:77:3a:75:9f:da:ae:fe:5d:48:a3:3f:9f:
26:97:01:1d:91:e1:e2:ed:81:04:7c:07:23:5d:56:16:51:94:
ac:cd:1e:f1:db:4e:a8:ec:12:5c:cf:fa:ee:45:3d:68:33:e0:
c3:a6:ec:2a:be:b0:71:5d:02:f5:29:34:d3:00:ba:79:21:4f:
28:12:19:94:a7:45:c2:56:2b:68:a6:1b:0e:9c:a6:a4:9f:85:
ef:1e:fa:9f:4a:01:41:72:6a:92:5b:60:7d:bf:73:66:0c:72:
04:13:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:59:20 2025 by rpki-client