Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RUq7Wf2huvxVaiPBnbtKHf8GbLo.roa
File: RUq7Wf2huvxVaiPBnbtKHf8GbLo.roa (raw, json)
Hash identifier: Kt89+v9cWBh4Ib7VcK01WfzTE7gx/oOmjoctlWonBq0=
Subject key identifier: 45:4A:BB:59:FD:A1:BA:FC:55:6A:23:C1:9D:BB:4A:1D:FF:06:6C:BA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A2A4569F6B0A55900A35AF6387754B84F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RUq7Wf2huvxVaiPBnbtKHf8GbLo.roa
Signing time: Tue 28 Oct 2025 10:03:03 +0000
ROA not before: Tue 28 Oct 2025 10:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34465
IP address blocks: 2a10:33c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 30 Oct 2025 12:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:45:69:f6:b0:a5:59:00:a3:5a:f6:38:77:54:b8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 28 10:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=454abb59fda1bafc556a23c19dbb4a1dff066cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:30:e2:4a:8a:2e:28:4a:ae:f1:45:9b:ca:
ae:30:38:f3:ff:59:9c:38:36:39:c0:33:2a:70:2d:
7d:91:e4:50:dd:79:0d:af:ea:3d:e2:a1:bb:b2:c1:
e5:28:7f:cf:38:74:17:e0:29:5e:22:03:0e:2d:df:
37:cb:df:fc:8a:3b:b6:7c:13:52:da:e2:e4:e7:c2:
4c:97:b6:f5:aa:2b:e8:36:68:e7:dd:c2:e5:76:aa:
cd:d3:1d:cd:03:6b:e5:80:c9:72:47:c4:00:2f:7e:
17:fd:4f:ad:05:be:ec:d2:eb:6a:9b:e2:2a:9a:17:
f9:bb:15:9e:59:0d:60:3f:c2:9c:72:d3:c9:f9:7b:
a6:d8:c4:d2:dd:26:94:c9:54:52:fc:2d:f3:42:9e:
10:ed:3c:0f:26:b6:b8:c4:f3:0b:0c:66:74:f6:10:
75:48:cc:46:40:c9:c0:92:27:5c:fa:16:ac:7b:26:
43:df:f3:7b:62:19:dd:1a:2a:40:70:69:c9:4a:4a:
9d:c8:09:19:74:f3:ed:c2:ad:2e:26:e6:f5:e6:d8:
d9:21:8f:25:b2:02:68:92:3a:70:31:86:58:3d:b5:
fe:39:08:30:9b:2a:6c:99:3f:0c:5a:d9:33:b6:c9:
ab:68:47:d9:16:08:25:18:4d:e1:b5:de:b9:97:2c:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4A:BB:59:FD:A1:BA:FC:55:6A:23:C1:9D:BB:4A:1D:FF:06:6C:BA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RUq7Wf2huvxVaiPBnbtKHf8GbLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:33c0::/29
Signature Algorithm: sha256WithRSAEncryption
66:04:51:bd:27:10:f6:0a:e1:a6:2b:00:18:85:42:f8:56:b1:
0d:9a:f1:26:39:6e:80:78:e2:b7:6c:3e:e8:ad:1c:be:6c:9a:
d5:a7:33:da:fe:63:13:34:63:91:ef:c5:02:6e:57:b0:7f:17:
1c:1e:ef:8f:1a:73:26:0d:1f:66:74:85:91:3a:10:ea:8a:11:
81:1d:de:ed:eb:ff:1f:24:c9:09:cf:e4:06:9b:38:c9:af:cb:
ce:76:e2:b9:73:81:da:25:c9:f4:a1:b1:3e:f2:de:c4:14:b8:
49:7e:c6:65:a9:86:b3:19:45:f5:8f:96:4a:21:2a:14:5c:5d:
7a:b5:ea:71:b5:15:3e:17:5c:0b:be:85:49:ed:50:71:a1:87:
99:d0:ef:a1:9b:ef:86:3e:e5:be:ec:22:de:ce:0e:0a:23:7b:
07:eb:ca:ba:b1:05:06:77:1f:d5:8d:9c:89:a2:b5:ff:fd:de:
5c:58:5b:33:17:a1:2c:86:c4:02:92:81:50:38:59:58:2c:7d:
3c:a2:b5:79:9b:17:26:b0:7a:43:45:a2:7e:fe:94:77:0e:d0:
66:2e:4e:9d:4f:35:85:67:cc:79:16:b4:ff:23:7b:15:61:6d:
33:e0:8f:3c:1a:4b:49:35:50:ce:e3:b5:7b:5b:dd:33:4e:44:
9e:e9:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:28:41 2025 by rpki-client