Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/siI-9k4kM2PUz_VqcCGe4mJxGv0.roa
File: siI-9k4kM2PUz_VqcCGe4mJxGv0.roa (raw, json)
Hash identifier: CEPJUv8eWomguICBdwfDQdJJXfLfzo68OdeYnmpgYIM=
Subject key identifier: B2:22:3E:F6:4E:24:33:63:D4:CF:F5:6A:70:21:9E:E2:62:71:1A:FD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01975EAE1B2A02BBAB79CC301997C383C92B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/siI-9k4kM2PUz_VqcCGe4mJxGv0.roa
Signing time: Wed 11 Jun 2025 11:09:17 +0000
ROA not before: Wed 11 Jun 2025 11:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 2a0c:7884::/32 maxlen: 32
2a0e:1a80:1::/48 maxlen: 48
2a0e:c785:1::/48 maxlen: 48
2a0e:f200::/48 maxlen: 48
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d06:102::/48 maxlen: 48
2a0f:e847:acab::/48 maxlen: 48
2a10:67c2:3::/48 maxlen: 48
2a12:ac43:1::/48 maxlen: 48
2a13:18c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Jun 2025 17:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:ae:1b:2a:02:bb:ab:79:cc:30:19:97:c3:83:c9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 11 11:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2223ef64e243363d4cff56a70219ee262711afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:b1:67:e4:93:c4:d5:f2:a0:27:a9:be:e3:
40:18:06:b0:97:11:58:7b:bb:05:c2:e6:c9:3e:68:
01:29:9c:81:48:fc:19:dd:97:eb:0c:2e:a9:58:03:
f9:24:7c:32:24:3e:74:62:36:ab:ae:fc:d7:78:81:
f7:03:f2:8e:58:01:83:f0:96:cf:3b:d8:b6:da:dc:
88:f9:fd:fc:38:7d:a3:6e:77:48:d2:ea:fc:61:ae:
ad:ed:47:cb:7e:a8:ce:7e:7c:66:35:2e:a7:d7:ae:
cd:89:b2:e1:5d:73:01:a3:f5:e8:9b:ab:0e:40:8d:
c6:74:48:1a:9e:97:87:56:5b:fe:6d:e5:6e:64:b5:
13:16:f2:7a:56:88:09:d3:2e:54:d2:10:69:93:c1:
3c:da:98:19:3d:a6:00:f7:b6:b3:36:42:82:5c:55:
3a:94:3b:ae:ec:57:d9:c2:67:94:51:55:32:72:ce:
4e:f3:e1:21:d8:f2:bc:cd:39:07:49:48:e8:cc:a2:
4e:90:e5:84:5d:c4:7f:42:4f:7c:1a:a5:c0:27:3c:
7e:11:e9:31:e3:d3:2c:5e:99:4b:a6:9a:df:e8:8c:
f0:8d:57:c7:0c:4c:36:bf:86:b4:bd:e3:30:19:e9:
d9:19:37:6b:e4:6e:79:2a:a5:b7:ca:15:51:f5:ad:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:22:3E:F6:4E:24:33:63:D4:CF:F5:6A:70:21:9E:E2:62:71:1A:FD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/siI-9k4kM2PUz_VqcCGe4mJxGv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0e:1a80:1::/48
2a0e:c785:1::/48
2a0e:f200::/48
2a0f:1e80:d9a8::/48
2a0f:3d80:bac::/48
2a0f:7d06:102::/48
2a0f:e847:acab::/48
2a10:67c2:3::/48
2a12:ac43:1::/48
2a13:18c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
c3:64:9d:48:ef:f5:d9:cd:81:47:2f:3a:c8:d7:37:c2:6f:3e:
f6:35:01:f9:41:2b:40:3a:c1:78:e6:04:97:a0:fe:0a:76:70:
c8:1e:90:49:29:1c:2d:c8:c6:77:3d:b3:11:d3:a5:ce:b4:b6:
6f:c7:00:4d:be:a1:e5:70:48:62:10:6b:27:ca:24:5a:da:a8:
8d:5d:34:e5:f4:36:40:d8:92:11:ac:3b:b2:18:1b:51:78:fe:
8d:74:17:a7:18:47:aa:d5:f5:a8:ce:46:dc:95:b4:74:bd:45:
2b:20:bf:42:e3:30:b3:ad:9e:c9:29:38:5b:cc:28:08:5b:fa:
e6:95:1c:3c:a9:51:3e:ed:db:02:93:5c:d7:a0:ef:ed:89:99:
75:d1:9f:1b:10:04:5a:67:b3:0b:28:e1:d8:b3:51:b6:67:b7:
2c:b3:14:21:5f:10:a8:87:f8:48:0c:1a:ee:6b:fb:97:a8:d8:
da:76:f7:06:c0:36:af:a4:99:12:fe:63:44:c6:90:99:d1:dc:
46:92:0f:ff:5d:ea:e7:f0:a1:66:de:bd:ca:8e:3d:01:ec:ba:
73:cc:65:bd:c7:6e:e0:16:ce:d6:c5:68:d7:4f:c2:e5:c8:4f:
56:a0:a2:50:a8:d9:ce:4f:6c:59:67:27:ea:6a:c4:53:6a:df:
52:b2:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:22:26 2025 by rpki-client