Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wWlOnKRWT9efQZlnbObXKIAKcWQ.roa
File: wWlOnKRWT9efQZlnbObXKIAKcWQ.roa (raw, json)
Hash identifier: UBdSzcMk5nxb7zjgoeoNcIZpy0IlPYkQIHFJ5HZE41g=
Subject key identifier: C1:69:4E:9C:A4:56:4F:D7:9F:41:99:67:6C:E6:D7:28:80:0A:71:64
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01969EDEDC7A18F564EEAA525A49B2942BB0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wWlOnKRWT9efQZlnbObXKIAKcWQ.roa
Signing time: Mon 05 May 2025 05:15:27 +0000
ROA not before: Mon 05 May 2025 05:15:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215137
IP address blocks: 2a0e:97c1::/40 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 May 2025 06:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:de:dc:7a:18:f5:64:ee:aa:52:5a:49:b2:94:2b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 5 05:15:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1694e9ca4564fd79f4199676ce6d728800a7164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:c3:b6:1d:97:22:90:e6:57:17:78:6f:4b:
8e:5f:ce:9f:67:f7:77:1e:6f:46:d6:da:a9:14:00:
0a:4c:04:ce:90:99:1a:69:72:dd:be:26:d0:90:7f:
6e:02:2f:27:9a:0c:09:86:7f:d0:4d:58:35:32:27:
6a:42:27:9c:ac:bd:6c:eb:fe:9d:37:03:fd:5e:ca:
d1:45:de:45:4f:53:94:57:cb:6c:12:16:aa:b9:bd:
05:8b:f7:19:d9:fd:58:79:23:94:26:c8:01:81:8c:
69:4c:90:6e:5f:6c:21:4b:fd:90:03:60:6b:09:5c:
f4:a5:e6:0b:24:fb:7f:9e:1f:b2:0f:01:87:48:c4:
2a:01:88:09:d3:85:62:98:19:97:91:17:83:9b:4f:
18:46:60:ae:82:37:f7:54:15:a9:9b:ab:b5:26:4e:
40:84:c0:d4:f3:6c:c5:22:bd:2c:41:06:b5:50:a5:
1a:d8:fd:2f:e0:68:e0:a1:7f:61:72:3d:ae:ed:7f:
9b:1c:2c:ea:d7:8a:0e:3b:0d:c3:ee:cf:51:d2:a5:
08:0f:67:54:11:93:83:70:6d:67:e3:18:f9:33:f2:
18:42:c6:08:8e:fe:91:27:37:26:a4:97:76:68:d9:
b6:34:c1:27:34:6f:58:ca:f1:b5:73:d6:43:e0:b8:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:69:4E:9C:A4:56:4F:D7:9F:41:99:67:6C:E6:D7:28:80:0A:71:64
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wWlOnKRWT9efQZlnbObXKIAKcWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1::/40
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
38:26:7a:68:67:7f:9c:16:71:6a:f7:25:c0:e1:c6:be:62:31:
2e:13:5c:3d:80:b6:17:85:a7:d9:10:34:22:0b:fd:bc:d0:bb:
71:89:10:1e:ba:42:03:12:90:cf:dd:15:05:b0:26:f8:65:ab:
6c:ac:93:65:eb:e0:da:6c:8d:c0:0f:92:2e:76:5b:5e:ca:02:
0d:1f:ef:74:f0:cf:8c:fc:2a:4f:66:a3:36:fd:d9:45:23:ca:
e6:ca:74:ca:4e:f0:d3:85:1f:f7:7c:25:2a:c2:78:a1:a5:21:
91:7b:7a:3b:cd:4a:a5:f3:7c:53:a5:85:0b:70:10:ba:a3:36:
31:ca:32:ba:ea:cd:f2:54:20:10:12:0d:ce:62:ec:50:c4:55:
ed:e5:d2:aa:48:8c:3c:4f:f9:f9:b9:48:51:57:dc:41:ed:6e:
cc:85:7f:44:52:74:bb:10:51:8b:fd:7e:ec:fc:e9:34:c7:32:
e7:6f:0b:84:6b:b0:33:6e:e5:20:d0:80:28:1a:4c:9b:33:77:
c0:32:89:20:c7:7f:80:7f:b1:41:c2:90:65:5b:59:17:7f:e9:
33:b6:c1:75:5c:5c:75:bb:7e:25:eb:fd:9f:a2:a7:05:b8:4b:
ff:b2:19:a2:5d:48:d0:84:73:a9:6a:71:d7:23:04:ec:c4:9b:
29:57:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:03:43 2025 by rpki-client