Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2nYaBK2KOUNnyzIVugz8dmXuQZ8.roa
File: 2nYaBK2KOUNnyzIVugz8dmXuQZ8.roa (raw, json)
Hash identifier: ftkoQDxK+1JgT4cT4Hv2E9oQiNNuVsxzc0CMD6oslvc=
Subject key identifier: DA:76:1A:04:AD:8A:39:43:67:CB:32:15:BA:0C:FC:76:65:EE:41:9F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197639376B9F0C18E6FC2518ADE9A1C3AD9
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2nYaBK2KOUNnyzIVugz8dmXuQZ8.roa
Signing time: Thu 12 Jun 2025 09:58:17 +0000
ROA not before: Thu 12 Jun 2025 09:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203950
IP address blocks: 2001:3185::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Jun 2025 12:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:93:76:b9:f0:c1:8e:6f:c2:51:8a:de:9a:1c:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 09:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da761a04ad8a394367cb3215ba0cfc7665ee419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:c0:c4:0e:42:2b:06:e9:99:a7:8d:da:47:
ff:ba:a7:bd:ae:e9:ad:ef:3e:d4:6e:b4:bb:e9:28:
3e:af:45:ca:27:39:d2:b4:9a:55:d8:4d:fd:0c:74:
cc:57:9e:49:0a:34:fa:e1:a5:cb:9f:10:b0:2f:78:
26:49:6c:23:6c:e8:a7:f7:b5:58:22:d6:86:15:ca:
54:e2:95:28:1c:a1:61:61:79:06:a9:84:a6:69:77:
40:5c:ab:d3:bd:ee:0c:be:e4:60:64:f1:e5:ff:24:
89:83:a1:50:9c:97:74:48:4c:0b:95:dc:75:01:0f:
3c:ef:dc:8b:d4:e5:b9:7b:62:28:ec:39:55:1b:c7:
b6:d8:49:3f:27:ca:3a:85:8d:32:91:bd:4c:4d:e7:
52:3a:69:b2:f7:5d:9d:27:88:b0:09:09:53:f5:42:
23:9e:7e:2d:11:da:6a:96:28:fb:8c:64:e2:d5:b7:
c6:ee:a5:bc:be:7b:c4:c2:27:6e:cd:89:7d:6e:04:
bc:66:ee:ff:e0:04:b5:94:aa:ef:85:68:71:cb:54:
ad:b7:7b:d6:b4:db:a9:12:75:e8:20:88:99:55:87:
60:30:e6:9a:c3:c4:5f:74:33:74:5a:62:04:44:85:
64:fb:c1:ef:8e:df:2c:64:dd:16:89:89:cd:27:83:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:1A:04:AD:8A:39:43:67:CB:32:15:BA:0C:FC:76:65:EE:41:9F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2nYaBK2KOUNnyzIVugz8dmXuQZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3185::/32
Signature Algorithm: sha256WithRSAEncryption
40:47:77:84:85:fc:80:83:19:50:7f:44:0a:cb:b5:c9:d5:60:
f8:58:d9:a8:36:81:ea:f8:1e:40:f7:5f:92:03:43:0a:e8:8f:
1f:ed:68:cd:5a:af:93:82:07:9d:ef:1d:7b:a2:2d:40:3e:1f:
a6:84:dc:77:0a:e3:40:c6:ff:97:bd:62:ab:4c:b7:17:13:a2:
7e:b5:9d:23:85:a1:b1:1f:fd:01:a5:96:f2:06:9d:5e:92:6d:
a0:eb:99:ae:69:93:a5:91:55:52:b3:87:67:99:2c:05:ea:b0:
b5:1e:48:f3:94:bf:d2:34:b9:9c:3d:2e:81:2c:5a:b0:82:a5:
74:a3:2c:78:58:6f:aa:dc:59:d1:5a:87:6d:65:60:da:14:b4:
52:96:87:00:76:99:d2:e7:79:9f:f4:24:8d:8a:62:81:e6:92:
aa:ab:c1:63:8c:f2:1f:a3:37:12:0e:ac:98:20:ee:a7:85:b2:
d5:88:95:14:ff:22:4c:6c:d9:01:56:1a:61:39:6a:78:dd:a0:
d7:31:8a:bf:8a:e4:72:e3:08:88:71:08:38:2a:8a:22:1d:cf:
77:04:80:3a:9b:57:c1:10:89:54:5d:68:4a:23:bd:e1:15:7c:
28:96:5e:9a:20:2a:b0:13:45:e1:07:e7:81:77:a9:30:e1:fb:
03:fe:d0:56
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZdjk3a58MGOb8JRit6aHDrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUwNjEyMDk1ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTc2MWEwNGFkOGEzOTQzNjdjYjMyMTViYTBjZmM3NjY1ZWU0MTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOXAxA5CKwbpmaeN2kf/uqe9rumt
7z7UbrS76Sg+r0XKJznStJpV2E39DHTMV55JCjT64aXLnxCwL3gmSWwjbOin97VY
ItaGFcpU4pUoHKFhYXkGqYSmaXdAXKvTve4MvuRgZPHl/ySJg6FQnJd0SEwLldx1
AQ8879yL1OW5e2Io7DlVG8e22Ek/J8o6hY0ykb1MTedSOmmy912dJ4iwCQlT9UIj
nn4tEdpqlij7jGTi1bfG7qW8vnvEwiduzYl9bgS8Zu7/4AS1lKrvhWhxy1Stt3vW
tNupEnXoIIiZVYdgMOaaw8RfdDN0WmIERIVk+8Hvjt8sZN0WiYnNJ4MFBQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNp2GgStijlDZ8syFboM/HZl7kGfMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvMm5ZYUJLMktPVU5ueXpJVnVnejhkbVh1UVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAExhTAN
BgkqhkiG9w0BAQsFAAOCAQEAQEd3hIX8gIMZUH9ECsu1ydVg+FjZqDaB6vgeQPdf
kgNDCuiPH+1ozVqvk4IHne8de6ItQD4fpoTcdwrjQMb/l71iq0y3FxOifrWdI4Wh
sR/9AaWW8gadXpJtoOuZrmmTpZFVUrOHZ5ksBeqwtR5I85S/0jS5nD0ugSxasIKl
dKMseFhvqtxZ0VqHbWVg2hS0UpaHAHaZ0ud5n/QkjYpigeaSqqvBY4zyH6M3Eg6s
mCDup4Wy1YiVFP8iTGzZAVYaYTlqeN2g1zGKv4rkcuMIiHEIOCqKIh3PdwSAOptX
wRCJVF1oSiO94RV8KJZemiAqsBNF4QfngXepMOH7A/7QVg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:30:32 2025 by rpki-client