Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/Ji0j1eylnzKMvUjHFcKiqD7xLJc.roa
File: Ji0j1eylnzKMvUjHFcKiqD7xLJc.roa (raw, json)
Hash identifier: qLrUueWPWFNdtzFo0auerRfwNwu5M+zwPSH5/pL84JQ=
Subject key identifier: 26:2D:23:D5:EC:A5:9F:32:8C:BD:48:C7:15:C2:A2:A8:3E:F1:2C:97
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 019758F8EC349B6ED699494869AE0E73639F
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/Ji0j1eylnzKMvUjHFcKiqD7xLJc.roa
Signing time: Tue 10 Jun 2025 08:33:17 +0000
ROA not before: Tue 10 Jun 2025 08:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48301
IP address blocks: 2a01:f100:108::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Jun 2025 10:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:f8:ec:34:9b:6e:d6:99:49:48:69:ae:0e:73:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Jun 10 08:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=262d23d5eca59f328cbd48c715c2a2a83ef12c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:5c:98:0e:ee:68:91:34:8b:d7:83:92:83:
12:dc:b6:08:01:47:29:13:14:29:13:dc:88:8e:93:
d6:db:03:30:36:79:c7:f9:bb:17:ac:73:00:ac:c6:
7d:41:fb:aa:2f:b8:87:b6:ee:eb:5f:91:2b:17:d2:
23:95:e9:eb:4c:eb:ec:e7:4a:a0:58:04:09:2f:e0:
0a:19:b5:20:21:10:51:02:01:91:72:ba:91:2d:43:
5e:22:2a:63:1d:9c:9d:89:51:f9:ef:13:8a:cd:25:
81:3a:13:9a:c4:f7:8f:c2:ef:e8:f2:e6:b6:fa:cc:
6c:0b:fd:42:ed:bc:69:32:3f:c1:d7:8c:95:c1:25:
e3:e3:0b:d3:4c:d0:66:f8:fe:49:7e:dd:83:2d:71:
6f:ed:8c:c2:60:61:9f:fe:bc:b1:55:f9:f8:5a:91:
db:b2:5c:e2:36:a8:3b:1c:15:e8:e7:a1:3e:01:4f:
a9:41:32:d6:87:8a:4d:67:6d:cf:59:3f:32:8b:47:
50:bf:ca:18:4b:6e:07:d1:9d:47:18:cd:00:a8:95:
eb:4a:34:da:03:34:e4:8e:db:cb:92:c4:6e:6a:04:
6d:e7:95:92:34:05:72:4b:dd:1b:c1:93:c5:58:f9:
9d:c8:a1:5f:44:c4:fd:3d:f3:f0:b8:17:19:7d:1a:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2D:23:D5:EC:A5:9F:32:8C:BD:48:C7:15:C2:A2:A8:3E:F1:2C:97
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/Ji0j1eylnzKMvUjHFcKiqD7xLJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f100:108::/48
Signature Algorithm: sha256WithRSAEncryption
33:f8:27:0a:de:51:bd:b7:51:e1:c1:bf:28:36:ae:e4:b8:81:
a6:e3:7c:2c:42:e7:73:46:14:7a:b2:dd:d8:3b:74:56:e5:de:
51:fa:d8:cc:e9:1f:f1:66:70:ee:be:a7:e2:9f:86:e3:77:54:
68:26:f2:5d:42:3d:79:b8:08:19:cd:15:d2:c9:a0:30:23:fe:
52:16:67:6d:e9:76:61:e9:69:de:97:b4:e4:96:4b:9f:83:91:
82:98:d6:3c:37:ec:c2:b1:38:d5:ae:28:f7:8a:5c:34:78:1c:
be:f2:7d:7f:6c:df:b1:d6:b6:45:51:58:e6:c7:36:e6:a4:d3:
68:4a:e1:cc:37:d8:ea:c6:62:c5:fe:e9:cc:d3:57:ff:b2:6a:
d6:df:68:8b:cf:4f:f5:3f:17:c3:96:ac:07:dd:06:46:f6:47:
37:69:b9:5f:47:94:8f:e5:b8:04:31:f1:89:ac:45:27:f0:73:
e8:7c:f5:c4:42:ce:67:7b:31:d9:3c:9b:07:79:63:80:3e:f8:
af:90:67:d9:42:7b:ec:bd:c2:aa:0c:9a:47:61:b2:20:49:85:
ee:01:68:ae:bd:4d:69:0e:29:bf:f5:a3:29:36:46:8f:e6:3f:
92:2e:24:0d:b9:28:f6:38:15:ad:2e:ba:cd:6a:f6:6a:66:2b:
1b:ef:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:01:57 2025 by rpki-client