Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/TJT0m6lidLUSeLFEiVwAVJc63yQ.roa
File: TJT0m6lidLUSeLFEiVwAVJc63yQ.roa (raw, json)
Hash identifier: 73C/tP9BA12Iqpf06oVE6tLfnmLM99DWfFTGpiptnlU=
Subject key identifier: 4C:94:F4:9B:A9:62:74:B5:12:78:B1:44:89:5C:00:54:97:3A:DF:24
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019763928C6B7D584984917A5C4857E0B193
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/TJT0m6lidLUSeLFEiVwAVJc63yQ.roa
Signing time: Thu 12 Jun 2025 09:57:18 +0000
ROA not before: Thu 12 Jun 2025 09:57:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206340
IP address blocks: 2001:3183::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Jun 2025 12:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:92:8c:6b:7d:58:49:84:91:7a:5c:48:57:e0:b1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 09:57:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c94f49ba96274b51278b144895c0054973adf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:b4:e6:39:54:d1:b8:3a:be:dc:2a:da:fa:
59:1a:a4:89:14:e1:53:30:e0:82:45:28:61:c4:72:
fe:bb:c7:60:4c:c3:75:2f:76:79:81:1f:63:80:3f:
c9:95:b7:ad:04:29:65:2d:b3:9d:c1:48:30:3c:72:
cc:da:d0:61:0f:fa:03:53:18:ff:07:ab:32:3b:b8:
67:6d:60:3b:52:6f:dd:4d:77:9a:b0:8a:ef:a2:b0:
8b:a8:be:69:fb:34:1b:ce:db:ba:0d:d4:78:5f:0e:
3e:3d:ec:b6:37:7b:b3:9d:72:49:4b:81:f8:d2:17:
9a:01:4d:30:e8:14:b3:b2:c6:7e:76:66:6e:c8:86:
f0:c8:d3:01:6a:02:74:41:bf:1b:e8:31:2b:4d:b9:
ff:54:71:9b:48:44:d1:87:81:10:57:9d:6d:fc:bf:
98:6a:ea:50:8f:de:93:8a:d2:cc:c7:a9:f7:5b:21:
d7:45:a2:79:ee:31:7f:09:01:aa:ef:ad:a1:12:02:
63:2f:3c:99:48:2d:23:99:80:fa:79:24:ca:42:73:
49:0f:50:55:ce:d9:d9:3b:03:d0:69:05:79:37:92:
4f:36:2c:50:15:14:28:6e:4b:63:fe:71:00:4a:f1:
d5:f0:3f:7b:9e:cc:bc:f6:b9:fc:eb:8e:c2:e5:45:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:F4:9B:A9:62:74:B5:12:78:B1:44:89:5C:00:54:97:3A:DF:24
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/TJT0m6lidLUSeLFEiVwAVJc63yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3183::/32
Signature Algorithm: sha256WithRSAEncryption
88:39:42:d5:e3:77:98:bf:36:84:22:a4:6f:1b:71:02:1e:c4:
29:0a:87:ec:86:37:b3:51:9f:a0:27:36:c5:4c:cb:7f:f7:36:
e3:c3:36:b4:72:17:47:7f:9a:ee:35:15:7b:c2:ea:9e:f4:5b:
fd:1a:b9:89:ab:35:b4:25:a2:41:89:0b:19:46:02:16:67:0d:
51:88:1a:60:dd:81:ac:26:b7:3b:0d:8b:47:4b:52:21:ce:87:
c8:f6:98:38:61:e7:50:91:d1:35:23:a2:e4:d8:40:f9:9d:d8:
0d:e8:7f:e3:cf:13:94:3a:b5:d1:6a:e7:70:7c:22:17:8f:cd:
52:ca:9a:d8:85:69:25:b5:8f:0e:36:37:8b:bf:79:40:56:91:
58:a3:70:c8:2a:45:5a:23:3c:0c:df:d9:36:06:b1:e6:dc:fd:
50:4d:a3:65:c1:d0:f7:1b:f5:a8:33:64:e6:89:d5:88:98:2d:
e1:68:bb:77:6d:23:22:8d:29:5d:83:3e:ca:ed:97:f2:ab:f8:
16:f9:bd:2d:f5:96:f1:d6:73:9c:bd:12:7a:6d:19:9a:95:68:
d5:dd:f8:40:f6:a8:aa:3d:7d:4c:a5:87:da:16:87:c0:40:5b:
82:44:5e:df:37:a9:ac:e0:55:bd:bd:2a:1f:18:04:14:15:ed:
19:f1:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:43:15 2025 by rpki-client