Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Llmx4MzvGkbFNe7anvKfIaVWSaA.roa
File: Llmx4MzvGkbFNe7anvKfIaVWSaA.roa (raw, json)
Hash identifier: +RPk/La0ZejWzNKQUfbfB+sZB1qlwIyun4d4Xm50Utg=
Subject key identifier: 2E:59:B1:E0:CC:EF:1A:46:C5:35:EE:DA:9E:F2:9F:21:A5:56:49:A0
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019763928CBE78CCE217CA5C5398A66DCA00
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Llmx4MzvGkbFNe7anvKfIaVWSaA.roa
Signing time: Thu 12 Jun 2025 09:57:18 +0000
ROA not before: Thu 12 Jun 2025 09:57:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206413
IP address blocks: 2001:3184::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Jun 2025 12:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:92:8c:be:78:cc:e2:17:ca:5c:53:98:a6:6d:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 09:57:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e59b1e0ccef1a46c535eeda9ef29f21a55649a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:53:d5:4e:07:c1:4d:55:ac:c0:cf:68:f6:
27:ab:7c:f6:4b:62:b3:e8:7a:22:89:46:79:ed:df:
bc:22:5e:32:2c:cb:2a:ce:22:47:e5:29:5f:de:1a:
e8:d2:23:b1:e4:c1:21:41:e7:05:6d:0a:1c:25:a2:
ca:b5:7f:53:5e:8e:1a:ac:46:73:97:1f:73:d4:37:
16:7d:07:58:65:18:eb:b3:41:31:36:68:5c:d3:5c:
fe:d1:70:0d:1e:43:6c:e5:5c:28:f3:ec:37:ad:db:
b2:ad:ef:c2:3d:13:59:2c:cc:7e:29:43:1a:5d:84:
71:b0:57:f0:ae:1a:0e:30:c0:c2:64:d7:b6:55:86:
c4:d9:0d:1c:b0:db:d2:72:b4:de:fd:0c:3a:bf:e8:
10:87:64:46:de:ec:0a:6c:1e:4a:00:8b:a7:6b:41:
ab:7f:bf:ea:de:1f:c1:bd:f3:42:6b:fb:8b:67:1d:
4b:68:30:d1:f4:ba:1c:41:1a:51:ba:fd:7b:01:8d:
46:92:dc:b6:c9:00:f5:80:34:a2:b4:80:2e:b2:bd:
03:18:7c:52:8f:30:1a:c2:1f:60:a1:66:53:42:cc:
95:8b:cb:d1:a4:01:ad:5e:83:d3:09:7d:f1:15:36:
79:f3:b0:77:d3:f4:0c:d3:18:94:43:07:85:a4:37:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:B1:E0:CC:EF:1A:46:C5:35:EE:DA:9E:F2:9F:21:A5:56:49:A0
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Llmx4MzvGkbFNe7anvKfIaVWSaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3184::/32
Signature Algorithm: sha256WithRSAEncryption
48:7d:69:c4:e3:8b:71:78:e4:d2:30:5c:18:8b:cc:9b:bb:cd:
b4:f8:21:66:ae:f9:66:c4:a5:fd:51:bd:0f:82:dd:3f:5e:f0:
21:a5:6f:4c:37:19:f9:89:65:a3:e2:58:70:05:37:50:34:75:
b6:48:60:ba:74:e8:a4:bf:c3:fb:d1:e6:7e:35:92:26:92:cb:
1c:95:48:54:b5:4e:98:31:3a:08:fa:38:6b:37:6c:69:ef:84:
f0:ea:09:dc:05:7b:c1:35:ab:e4:86:90:f3:a2:f6:8b:76:6b:
4f:2d:db:95:ac:95:c3:05:a0:18:78:4f:fe:20:2a:f9:56:5a:
63:df:fc:39:49:0d:89:80:fa:81:af:88:d8:59:b0:47:d0:cb:
79:19:7d:72:22:56:76:44:4b:ac:b3:cc:ce:ca:6a:5d:1b:13:
5a:a1:a9:d6:3a:19:fa:ca:97:1e:84:76:bf:bf:7c:f3:5c:4e:
26:34:d4:34:b4:b0:5e:4e:1f:93:90:2b:a4:e7:a1:5d:8a:00:
cb:07:21:eb:15:4d:29:68:42:4a:77:ee:60:d1:3c:45:75:62:
84:ff:c8:e0:a7:93:c9:cc:54:16:a6:d5:1b:73:69:fb:48:73:
5c:7a:f1:97:65:2c:8c:c3:12:cc:69:31:65:de:50:8d:6f:82:
c3:e6:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:15:33 2025 by rpki-client