Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/45Jor4eNQ1LufITDaohtzFD1EOM.roa
File: 45Jor4eNQ1LufITDaohtzFD1EOM.roa (raw, json)
Hash identifier: 3GOmX0kX/DK1ClM2C8qHkfD8iySt13Wq6d/nSBEYCzA=
Subject key identifier: E3:92:68:AF:87:8D:43:52:EE:7C:84:C3:6A:88:6D:CC:50:F5:10:E3
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 0198568C8F5C715670DEEEDB8F789A4DA5CF
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/45Jor4eNQ1LufITDaohtzFD1EOM.roa
Signing time: Tue 29 Jul 2025 14:18:28 +0000
ROA not before: Tue 29 Jul 2025 14:18:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35704
IP address blocks: 2a02:11f8:1f0::/48 maxlen: 48
2a02:11f8:1f1::/48 maxlen: 48
2a02:11f8:1f2::/48 maxlen: 48
2a02:11ff:400::/46 maxlen: 46
Validation: Failed, certificate revoked on Wed 06 Aug 2025 12:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:8c:8f:5c:71:56:70:de:ee:db:8f:78:9a:4d:a5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jul 29 14:18:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39268af878d4352ee7c84c36a886dcc50f510e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:f0:d9:1b:13:d2:53:94:2c:c6:6b:f5:cc:
41:e5:3d:09:a2:34:87:fa:c6:3f:3d:21:29:6b:31:
e0:16:43:e9:00:b8:63:64:bb:cc:09:8a:2d:fb:26:
91:48:9c:a9:a0:29:70:22:72:0c:82:ce:f2:43:1c:
62:6d:d0:32:5f:fc:12:b8:71:a8:b0:06:15:67:90:
4c:d9:c3:d1:98:76:02:be:dd:6a:8f:33:e2:84:05:
21:cc:19:85:2f:f4:58:11:49:c9:9b:ff:28:e7:c7:
85:ea:ae:17:ff:e6:cc:92:10:f9:e8:1e:c1:2e:9d:
ac:11:7d:8b:eb:02:de:3c:7b:d9:ee:b2:19:b4:ac:
03:75:81:7a:cc:56:53:37:58:70:30:1d:95:ce:d3:
20:19:53:db:19:34:a0:21:e1:d0:58:fa:ed:f8:73:
9c:49:5f:3b:ad:a3:28:0a:9d:25:69:0d:79:3a:73:
e0:dc:79:87:04:01:01:f8:3e:c4:b2:ce:18:9c:70:
c5:c5:c6:96:72:88:58:a9:09:e9:37:8e:20:de:87:
a5:c6:dd:f8:70:a9:02:96:87:2c:a6:78:61:5e:6d:
65:0f:b1:d9:3c:78:1c:12:0d:ae:37:ca:81:bd:bb:
13:bb:f7:aa:20:be:75:46:30:ab:64:b1:2a:11:b5:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:92:68:AF:87:8D:43:52:EE:7C:84:C3:6A:88:6D:CC:50:F5:10:E3
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/45Jor4eNQ1LufITDaohtzFD1EOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:11f8:1f0::-2a02:11f8:1f2:ffff:ffff:ffff:ffff:ffff
2a02:11ff:400::/46
Signature Algorithm: sha256WithRSAEncryption
de:5b:94:c6:2b:ed:6c:64:1e:33:12:50:f2:39:05:0c:f6:fa:
b8:9b:03:80:2a:bb:0e:c0:8d:69:87:82:c5:46:61:72:dc:48:
87:0c:ea:98:c9:2c:f4:b6:25:93:9e:0a:40:7a:40:07:26:4f:
a3:1d:8d:35:66:fb:5a:0b:6e:8c:f9:db:34:7e:03:1e:da:20:
b0:3a:f7:bc:98:7b:5c:64:48:98:3a:9c:b5:d4:fb:50:9c:46:
c3:ef:61:1e:db:7b:3a:fb:ba:87:04:71:de:b8:c0:63:26:f2:
86:b6:b8:b9:cd:26:61:f5:44:2b:a8:0f:6c:c0:86:1f:cc:a0:
0f:8f:2a:b8:8f:f0:71:f5:a2:cf:d6:00:8d:72:6d:18:1c:24:
b8:1b:9f:3a:b2:f8:46:08:63:79:5b:d1:13:31:27:fc:51:82:
3f:c8:8e:60:aa:57:0c:67:17:5d:a7:e6:21:0d:8f:29:cd:73:
bd:a5:43:ba:76:de:ce:d2:49:b4:04:38:8b:ac:0b:20:56:bf:
84:c9:50:63:e4:d2:0b:a8:57:04:00:90:37:bf:98:d0:0a:c3:
bb:7b:51:31:ba:57:8d:9a:c8:d2:79:ab:8f:71:28:10:ff:c6:
09:59:45:f1:a5:06:0d:3c:1b:34:88:86:b4:3f:b0:7f:8a:f1:
af:a1:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:39 2025 by rpki-client