Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/n1xzbjwP_cqoVMsWgzz5KfBRSx8.roa
File: n1xzbjwP_cqoVMsWgzz5KfBRSx8.roa (raw, json)
Hash identifier: PVgLsnjLybjLC9vlfb8Iv/rRHB1QndcBqviHEsopuLY=
Subject key identifier: 9F:5C:73:6E:3C:0F:FD:CA:A8:54:CB:16:83:3C:F9:29:F0:51:4B:1F
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01973C1376B748C30E5EA544ED9082B1C4CF
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/n1xzbjwP_cqoVMsWgzz5KfBRSx8.roa
Signing time: Wed 04 Jun 2025 17:53:17 +0000
ROA not before: Wed 04 Jun 2025 17:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4bc5::/32 maxlen: 32
2a0e:4bc6::/32 maxlen: 32
2a0e:ccc1::/32 maxlen: 32
2a0e:ccc3::/32 maxlen: 32
2a0f:4340::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Jun 2025 17:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:13:76:b7:48:c3:0e:5e:a5:44:ed:90:82:b1:c4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jun 4 17:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5c736e3c0ffdcaa854cb16833cf929f0514b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:35:bb:3e:31:d9:d7:cb:56:c5:c0:06:b2:
3e:7e:7e:7e:27:55:f8:b8:ff:c8:29:86:87:12:a0:
c6:51:fd:80:aa:2f:e3:e5:fb:bd:d8:c3:6a:4c:a7:
6a:0e:8d:d0:5f:5c:4f:ff:3a:44:7b:24:1e:1c:0d:
19:14:3d:b3:df:a3:a9:3d:5d:5b:15:77:e0:d9:52:
1c:49:a0:74:0e:d4:f6:1e:99:86:30:8c:fa:97:db:
7e:a5:23:e9:1b:6f:59:3c:3e:25:23:01:61:da:cb:
36:f7:66:52:10:96:54:f2:1f:67:36:e3:9a:d5:9a:
c7:24:1d:f6:ab:83:7c:14:53:ff:5c:4d:c8:35:0f:
15:42:eb:1e:fe:67:50:2d:1b:ef:9f:c5:72:6a:bb:
92:67:61:47:69:56:e0:3c:8e:fd:c5:db:18:45:64:
d2:8d:fb:96:7d:9a:6e:e3:8e:69:37:c4:2b:f5:3c:
a2:e2:f7:a8:d6:b3:bb:b4:bc:f5:6e:60:02:9b:fe:
b4:14:9f:ec:79:61:ab:c8:af:07:34:5a:ed:29:b0:
15:a3:32:1f:e4:ca:93:af:26:4a:58:03:43:b2:3a:
48:ca:1b:65:c4:84:3a:73:94:b3:e9:a6:8d:a2:b5:
82:29:f9:e7:ec:f0:01:d3:97:d7:41:2d:8e:ca:72:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:73:6E:3C:0F:FD:CA:A8:54:CB:16:83:3C:F9:29:F0:51:4B:1F
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/n1xzbjwP_cqoVMsWgzz5KfBRSx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc5::-2a0e:4bc6:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:ccc1::/32
2a0e:ccc3::/32
2a0f:4340::/32
Signature Algorithm: sha256WithRSAEncryption
6d:8a:08:d1:fe:2c:cf:12:ee:b6:78:d4:77:1a:a9:f2:ef:5f:
f9:6c:64:a3:52:b9:02:bd:25:24:3b:ad:96:d6:d7:d7:f9:6f:
88:b0:50:2a:b8:ce:ff:58:b6:59:51:9f:5d:f6:9b:c3:39:94:
28:8d:08:13:f2:30:4f:db:26:a2:ca:55:1a:24:92:82:c3:3d:
b8:ca:33:4b:5e:04:e7:f4:d9:87:52:6e:e4:de:08:a0:43:40:
b6:b1:79:4a:29:b4:fd:7a:bf:19:72:09:4d:5d:e5:cb:95:c6:
36:e2:fa:84:b3:f4:36:d4:71:58:7c:f1:e1:c8:b0:58:17:a6:
3d:d9:b2:d9:05:3a:f2:91:b7:b7:9d:4c:58:12:7e:7a:c2:b5:
b5:84:dd:7f:26:4d:75:55:d1:14:d6:bb:bd:2c:e1:a8:46:9a:
b8:f5:a5:f4:52:f1:2c:c9:40:b4:31:e6:0c:7a:15:d0:62:4d:
d7:4b:2d:5c:96:b0:db:d0:7e:c9:17:89:fb:54:85:83:96:9c:
5d:07:92:89:b2:88:0e:c9:e7:c8:b2:39:ad:18:c5:99:4b:5f:
f9:51:c6:33:b6:4c:bb:2e:7b:e9:95:e4:55:6b:6c:fe:cb:99:
cd:19:10:33:d2:8b:e2:0d:4c:e0:8c:b9:d4:c5:b0:b9:bc:8b:
35:26:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:15:39 2025 by rpki-client