Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WYmwt0mJmn_z3Os9FiiWEL04O3g.roa
File: WYmwt0mJmn_z3Os9FiiWEL04O3g.roa (raw, json)
Hash identifier: 9lYByhIIS0yoUNqLh9M+sPisyHkgoOtAn1wd2CQgkjA=
Subject key identifier: 59:89:B0:B7:49:89:9A:7F:F3:DC:EB:3D:16:28:96:10:BD:38:3B:78
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0198297DC793F2C2E30BAE5EA6267A20DFD2
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WYmwt0mJmn_z3Os9FiiWEL04O3g.roa
Signing time: Sun 20 Jul 2025 20:19:25 +0000
ROA not before: Sun 20 Jul 2025 20:19:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203729
IP address blocks: 2a0b:6b81:1::/48 maxlen: 48
2a0b:6b81:2::/48 maxlen: 48
2a0b:6b81:205::/48 maxlen: 48
2a0b:6b81:208::/48 maxlen: 48
2a0b:6b81:210::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Aug 2025 21:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:7d:c7:93:f2:c2:e3:0b:ae:5e:a6:26:7a:20:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jul 20 20:19:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5989b0b749899a7ff3dceb3d16289610bd383b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:5b:0a:77:58:08:f0:2d:55:0a:0a:72:c6:
cf:28:68:f8:e9:57:75:dd:ad:3e:0d:ab:c5:94:57:
4f:0f:5b:3e:7e:a0:aa:3a:07:d7:46:af:db:33:6e:
b7:3d:d1:6c:9a:48:8e:e1:40:71:d5:b4:2c:fa:0f:
13:b3:80:51:a0:d9:af:de:d8:66:85:33:50:21:fe:
ab:f9:92:96:55:87:d5:f3:5d:ce:7f:00:97:f8:0c:
f7:b2:31:c9:90:57:f8:87:b0:8a:f7:31:15:09:19:
25:f8:3e:82:e6:27:0f:6b:30:f7:77:f0:c5:71:7e:
62:b9:8f:45:b1:09:52:d1:10:22:86:d0:db:de:db:
4e:10:e3:2f:ac:05:25:1a:b5:d5:c4:cf:d1:6b:d5:
c7:16:ef:7c:3a:68:06:7a:60:bc:92:67:5d:f3:9c:
29:e0:77:24:77:59:77:44:dc:69:5a:52:f2:1f:64:
13:92:e4:7f:14:12:c9:b4:c8:bc:59:60:89:cb:cc:
8c:28:55:af:5f:02:1d:59:20:db:9b:8c:f6:dc:15:
7a:31:de:9a:a6:49:c1:45:b3:cb:cc:ce:a1:2c:87:
60:53:68:c2:4d:4c:a4:0d:f2:3a:a9:09:e6:38:c0:
09:ce:bc:69:41:f3:4f:93:41:b7:eb:97:2c:9f:00:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:B0:B7:49:89:9A:7F:F3:DC:EB:3D:16:28:96:10:BD:38:3B:78
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WYmwt0mJmn_z3Os9FiiWEL04O3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b81:1::-2a0b:6b81:2:ffff:ffff:ffff:ffff:ffff
2a0b:6b81:205::/48
2a0b:6b81:208::/48
2a0b:6b81:210::/48
Signature Algorithm: sha256WithRSAEncryption
09:91:b4:83:b1:f1:bd:20:4a:a7:45:91:2b:1b:f8:4b:fb:ce:
5b:7e:d1:e1:a2:62:a5:45:cb:e9:5f:38:c3:79:a6:8b:bf:2b:
fb:5c:c1:e7:c5:28:17:25:a6:3e:fd:a9:87:3d:40:09:d0:dd:
57:6f:cb:9d:31:b3:4b:0c:b0:5f:49:ce:63:29:41:6f:7a:7d:
62:77:fb:97:c2:d7:68:1a:b6:5a:b2:d0:4c:da:9e:b6:77:a7:
2a:d3:74:c9:b3:f7:2c:61:52:4c:e7:22:8e:93:34:f7:6e:82:
1e:b0:ce:d4:70:30:3f:7d:17:8b:89:bd:30:f4:df:e4:6e:06:
2b:7c:35:56:0a:24:9e:ed:39:15:38:a9:6c:68:e5:68:b5:2b:
97:19:0b:71:31:c6:c8:d0:79:94:76:e6:09:4d:3b:03:86:d6:
48:67:2c:ff:81:aa:22:b6:56:92:83:03:f0:30:df:3a:1a:65:
57:99:cb:1d:09:ad:46:3d:50:14:fa:66:74:55:5a:d6:d4:f3:
cd:c7:29:22:f4:e1:31:35:9a:4c:03:7e:56:ca:3b:08:2d:18:
78:70:02:6c:be:9b:d4:04:c7:dd:bf:a9:b3:96:5f:46:77:b6:
82:b7:fe:d3:98:71:cb:58:b3:8c:1f:2b:9c:e4:fd:1c:67:f8:
45:1d:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:31:58 2025 by rpki-client