Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rc8pRiwcWRQqVzEcTZgFMT1TMXI.roa
File: Rc8pRiwcWRQqVzEcTZgFMT1TMXI.roa (raw, json)
Hash identifier: FQEtIvHi+Nzc4M7Eyq/0xdm3yUDPJ7YR0QccsF2hxIE=
Subject key identifier: 45:CF:29:46:2C:1C:59:14:2A:57:31:1C:4D:98:05:31:3D:53:31:72
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A3A91DE869C513263CF00530ABEAC069E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rc8pRiwcWRQqVzEcTZgFMT1TMXI.roa
Signing time: Fri 31 Oct 2025 14:00:29 +0000
ROA not before: Fri 31 Oct 2025 14:00:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 2a06:1180:12bb::/48 maxlen: 48
2a0a:2d04:9825::/48 maxlen: 48
2a0c:7881:98dd::/48 maxlen: 48
2a0e:15c0:1213::/48 maxlen: 48
2a0f:7d00:32ba::/48 maxlen: 48
2a13:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 04 Nov 2025 12:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:91:de:86:9c:51:32:63:cf:00:53:0a:be:ac:06:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 31 14:00:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45cf29462c1c59142a57311c4d9805313d533172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:d0:c4:c7:16:37:aa:a5:ed:c6:f0:11:83:
02:50:86:9a:5d:e8:86:f6:ff:09:b6:33:6f:51:a4:
b3:6a:59:4d:e5:7b:1e:02:ed:15:c7:21:01:17:88:
a3:2d:eb:85:5f:c8:67:36:fc:7b:a0:bd:db:86:20:
33:03:15:33:ff:f5:85:c4:cc:41:af:af:a1:fd:9f:
7d:f1:47:6c:f1:fc:78:85:4e:57:6c:98:5b:91:49:
d6:42:21:4a:4e:8f:5d:87:07:48:30:8b:43:4a:5a:
14:59:83:14:2c:bf:5b:e2:af:b0:c5:6d:e0:52:d2:
b3:d0:11:b3:00:4a:81:7e:01:c1:d9:cd:89:85:bc:
79:a9:cf:63:5e:e8:33:e5:98:4a:5d:54:13:f5:cb:
9e:e6:fd:02:26:36:6a:6b:ae:5a:69:3a:08:43:e7:
7a:ef:a7:6c:3b:07:14:17:1d:11:40:02:23:95:df:
12:31:10:c2:c3:db:5c:34:e0:ed:7c:c1:44:ce:3d:
83:d4:e7:46:50:3d:72:a3:93:a7:35:e7:23:98:30:
37:cc:b8:69:63:6f:57:ec:b0:1d:1f:06:13:32:ee:
00:bf:be:c3:e9:11:4e:0d:a2:6e:0c:4e:d8:00:94:
d1:52:a8:39:15:36:ca:57:66:d2:2d:8b:10:98:23:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:29:46:2C:1C:59:14:2A:57:31:1C:4D:98:05:31:3D:53:31:72
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Rc8pRiwcWRQqVzEcTZgFMT1TMXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:12bb::/48
2a0a:2d04:9825::/48
2a0c:7881:98dd::/48
2a0e:15c0:1213::/48
2a0f:7d00:32ba::/48
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
78:fe:91:3e:ad:59:e9:fe:65:09:4b:d3:1e:cf:90:a9:66:e9:
00:07:5c:a4:91:e5:bc:d5:61:a7:e3:0c:c4:4b:0d:e9:fb:3a:
09:40:f7:b7:f9:c1:0b:7c:5c:d8:22:b1:fa:aa:e0:de:b2:f1:
fc:8a:29:56:74:81:87:07:44:44:36:1f:1a:9a:52:b3:6f:66:
49:99:33:2a:e8:57:55:97:72:f8:07:7f:92:4e:0e:96:74:d6:
5f:7c:7f:02:d5:04:dc:db:b0:9f:81:3e:fd:52:a5:ca:4c:8d:
99:f4:83:a2:8a:43:85:b3:da:4e:ea:a5:f6:f6:99:e3:dd:33:
3d:fd:df:ba:11:32:0e:d2:a5:d2:8c:ee:fe:b1:ba:2c:5d:c9:
8d:81:1e:d5:95:01:67:2e:2d:39:ea:75:23:dc:30:57:a1:45:
f4:14:18:7d:d7:01:ce:50:5e:3c:2d:b2:c0:76:0b:ad:9b:fb:
1b:91:97:37:40:98:a9:f1:31:e7:b2:4b:81:33:89:2a:66:7e:
aa:04:d6:cd:aa:a3:9a:58:03:b7:7c:af:aa:ac:9a:20:5a:50:
32:35:f4:d3:be:6d:06:29:da:75:0d:9c:2a:79:e2:32:69:58:
1c:3b:f1:41:15:2b:57:6c:96:fc:83:83:a7:14:10:28:00:4c:
82:4a:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:23 2025 by rpki-client