Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6xh0MviyksceXZ38GXFOf4NvzUQ.roa
File: 6xh0MviyksceXZ38GXFOf4NvzUQ.roa (raw, json)
Hash identifier: cHeTy05RiVV6Eilgsu1H/jVqloQVmmm9ggE1NYXdumw=
Subject key identifier: EB:18:74:32:F8:B2:92:C7:1E:5D:9D:FC:19:71:4E:7F:83:6F:CD:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01987E5E338535C5BF5631D1C3AB62963F58
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6xh0MviyksceXZ38GXFOf4NvzUQ.roa
Signing time: Wed 06 Aug 2025 07:52:39 +0000
ROA not before: Wed 06 Aug 2025 07:52:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215614
IP address blocks: 2a0e:97c1::/48 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 09 Aug 2025 15:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:5e:33:85:35:c5:bf:56:31:d1:c3:ab:62:96:3f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 6 07:52:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb187432f8b292c71e5d9dfc19714e7f836fcd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:8f:93:e9:8e:f5:9e:69:6d:d8:08:31:ca:
f5:49:36:13:be:99:43:69:48:82:4b:f8:b2:29:d7:
70:bf:b3:d2:d6:fb:9c:10:bb:f4:7d:fc:3a:30:e7:
e3:3b:e3:a2:8e:63:4d:30:ea:eb:e4:01:2e:bc:79:
95:89:25:55:b9:b0:c2:ca:03:9e:47:9a:57:71:50:
85:7f:9f:1b:29:b6:d7:3d:4a:13:83:69:0f:cf:39:
8e:f9:67:0d:3e:61:b4:d4:9e:fa:75:93:6c:42:92:
f4:a2:8e:bd:a9:a6:7b:32:5b:39:91:5a:cc:73:b8:
42:9f:a0:20:ee:b8:1e:7d:4b:05:0a:b7:09:4d:dd:
b3:be:b4:93:9e:6e:36:45:4d:42:e6:e8:ad:f6:de:
f4:53:ad:fa:19:07:e5:0a:0b:fc:f3:42:e5:4a:71:
ff:5f:ee:5e:5c:22:42:7f:f6:d0:2d:ff:ff:38:34:
a7:41:63:65:a2:7f:bd:46:cc:24:48:be:49:f4:ed:
07:15:70:ea:33:5a:e5:4d:59:31:5c:a4:65:c6:31:
1a:34:92:e3:bd:51:aa:76:b4:a5:ab:a9:40:95:74:
55:f8:8b:9a:3a:8f:46:60:59:20:f9:1e:b6:5d:36:
ba:ea:55:bd:b4:67:df:b9:15:e4:d7:a3:26:0a:4b:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:74:32:F8:B2:92:C7:1E:5D:9D:FC:19:71:4E:7F:83:6F:CD:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6xh0MviyksceXZ38GXFOf4NvzUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1::/48
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
18:33:8b:9a:bc:cf:f8:96:f5:49:b7:fa:4e:77:75:d6:28:8c:
c0:a4:2e:3a:5d:84:98:a5:f9:c0:79:4c:b8:bd:f6:f9:a5:75:
af:c5:09:a6:23:a5:2a:20:8f:7e:38:96:57:8d:ec:5e:fb:7d:
41:51:6f:69:27:4c:af:7d:d0:55:63:16:e2:6a:aa:89:99:aa:
02:62:93:ff:46:f9:95:c0:6d:6c:a2:af:8b:08:e0:15:d4:73:
7f:b4:56:a7:89:b0:48:4d:66:b9:d0:31:7c:48:6e:3a:4e:2e:
ad:bf:5d:6c:44:80:0d:30:52:a1:99:5f:3f:88:08:8d:2c:b7:
4f:b7:3d:ef:07:4b:8e:41:fd:d4:bd:cc:2d:4c:44:c1:ed:ba:
38:c8:e8:e2:b2:fe:6c:16:54:6a:74:7a:94:79:9e:41:1b:24:
58:8e:43:1d:08:9a:e9:67:dc:18:f1:8e:80:47:81:15:68:98:
1b:f6:be:47:5c:e5:70:e9:64:67:1f:fc:be:c7:6e:50:d8:0a:
10:cc:00:c4:c9:c7:79:14:98:29:a5:0a:59:aa:90:27:2b:df:
30:fa:df:8e:f9:5e:76:96:35:24:4e:b0:76:10:eb:20:d8:11:
79:45:6c:fd:3a:76:94:6f:02:75:be:ac:ce:05:da:2c:1e:5e:
3f:1f:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:41:19 2025 by rpki-client