Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/LwkjvEoytDIijnjt9wX6TwwIk_c.roa
File: LwkjvEoytDIijnjt9wX6TwwIk_c.roa (raw, json)
Hash identifier: lQk1+QIUNyVB7qsZpmJC8DI4AzBXPB7QhTZvs64rZNU=
Subject key identifier: 2F:09:23:BC:4A:32:B4:32:22:8E:78:ED:F7:05:FA:4F:0C:08:93:F7
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0198797CEC3F8EB3C4184E2FF091387C70B1
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/LwkjvEoytDIijnjt9wX6TwwIk_c.roa
Signing time: Tue 05 Aug 2025 09:08:06 +0000
ROA not before: Tue 05 Aug 2025 09:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a03:5000:432::/48 maxlen: 48
2a03:5000:471::/48 maxlen: 48
2a03:5000:481::/48 maxlen: 48
2a03:5000:501::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Aug 2025 15:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:7c:ec:3f:8e:b3:c4:18:4e:2f:f0:91:38:7c:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 5 09:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f0923bc4a32b432228e78edf705fa4f0c0893f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:81:40:d6:8e:80:d8:1f:2b:ca:df:15:df:48:
5d:85:57:c1:5e:e0:31:d8:24:63:ac:ce:90:55:7c:
e3:ee:d2:03:25:d9:3c:e9:6a:86:c3:ec:46:05:96:
97:14:b3:42:85:10:cc:7f:cd:01:56:0b:5d:70:be:
28:51:f1:9d:61:b9:05:4b:fa:ec:29:c7:eb:52:6f:
2d:7d:41:e3:59:e6:10:a3:c3:76:3f:e4:07:c1:ee:
e6:89:03:f4:ab:d8:5c:23:fc:08:82:a5:4b:57:4d:
b9:8e:43:77:e2:a0:34:b9:52:ff:44:73:95:08:ef:
85:ec:2d:6c:7c:42:ca:f6:b6:b5:2c:01:50:3e:c1:
61:1b:5c:21:49:f8:91:54:7f:b4:d0:d7:4d:d9:eb:
41:62:c0:18:13:30:07:39:e9:9b:fa:96:7d:95:da:
09:6a:8f:99:f3:0c:51:f7:3e:51:37:c5:47:92:87:
bc:d8:b8:8c:86:d7:2c:74:cf:e5:f9:24:22:9e:b4:
64:21:5e:d4:d4:a8:89:6f:61:9c:89:63:17:ff:a0:
10:04:6b:5f:33:26:dc:55:8a:45:0a:30:cf:57:b1:
c9:ea:5d:44:4e:b8:e2:3e:18:88:98:f3:47:a2:01:
1b:ff:0e:dd:15:f2:c9:63:e5:bb:df:8b:e7:50:20:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:09:23:BC:4A:32:B4:32:22:8E:78:ED:F7:05:FA:4F:0C:08:93:F7
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/LwkjvEoytDIijnjt9wX6TwwIk_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:432::/48
2a03:5000:471::/48
2a03:5000:481::/48
2a03:5000:501::/48
Signature Algorithm: sha256WithRSAEncryption
ad:9e:02:d0:48:ce:96:ee:a4:71:ef:ed:2c:f1:de:32:36:66:
c5:fd:b0:c4:e3:8e:dd:fa:5e:cb:f6:a0:15:7f:9e:4e:02:a0:
7a:f5:a4:1e:b3:5c:23:eb:f0:a9:5d:ec:2b:55:06:85:95:67:
c7:41:8d:9e:27:4b:15:5f:81:c7:bc:46:9b:ee:b3:5f:e6:1a:
a6:bf:c2:5c:4f:33:6f:aa:c2:4b:78:4e:b1:ee:30:32:49:fc:
e4:95:30:4e:3a:4f:ba:95:de:4e:66:dc:04:df:e3:c2:fc:67:
6a:4b:0f:a4:51:51:ea:ce:2d:d0:bc:13:ab:6b:63:8c:62:de:
5f:7e:3c:33:aa:bc:f5:87:ac:f9:af:47:e8:94:bc:cc:16:21:
58:b8:d9:50:f7:e9:b9:44:f4:0a:e5:fc:25:b4:70:7f:90:09:
1e:32:ea:b3:5b:de:b1:fe:7f:5a:a3:d6:9b:5a:6c:be:45:2c:
a4:5a:df:04:79:7d:c3:45:7b:8e:d6:dc:4e:e6:c1:ee:a4:d0:
0b:df:2a:df:16:b7:33:c2:7a:29:a6:b3:b0:85:b5:28:b8:ee:
bf:f3:c7:86:b3:c1:bc:c7:a8:4d:b0:3b:80:b4:8b:56:62:c3:
7a:96:cc:c8:6a:9f:ea:47:cd:72:92:69:58:75:f3:43:6d:58:
8d:ed:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:42 2025 by rpki-client