Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cpR6L-vnRPzBoZ4Gw-xG91Qnl5o.roa
File: cpR6L-vnRPzBoZ4Gw-xG91Qnl5o.roa (raw, json)
Hash identifier: zKw8plub8+VCUCEGaa7UBZP21AD1svFrUHtl4a3Z9+E=
Subject key identifier: 72:94:7A:2F:EB:E7:44:FC:C1:A1:9E:06:C3:EC:46:F7:54:27:97:9A
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01970B30C594A811A4BEF09DFA0A1976DA32
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cpR6L-vnRPzBoZ4Gw-xG91Qnl5o.roa
Signing time: Mon 26 May 2025 06:03:55 +0000
ROA not before: Mon 26 May 2025 06:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 2a09:6286::/32 maxlen: 32
2a10:4100::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Jun 2025 11:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:30:c5:94:a8:11:a4:be:f0:9d:fa:0a:19:76:da:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 26 06:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72947a2febe744fcc1a19e06c3ec46f75427979a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:e3:50:cd:11:8b:92:ce:bf:3c:d5:c2:28:
98:88:49:55:06:73:68:1d:76:92:bf:70:2a:fa:b2:
ab:e3:f5:23:a2:69:a2:6e:54:7e:ed:11:eb:5b:8d:
07:5c:3a:0f:62:b1:3c:9e:62:27:f0:6c:31:fd:84:
8a:8a:4c:bc:ec:5a:8a:95:1d:6a:1e:11:24:10:2f:
f5:ca:28:61:32:86:9a:cc:39:d8:ca:9c:74:93:4c:
41:42:86:f4:8a:83:23:ad:87:03:7d:af:71:08:8c:
05:fb:e3:c8:1f:a3:1f:61:5c:8e:87:79:8f:99:5b:
8c:75:8c:59:ee:7d:98:df:64:64:a6:11:af:90:56:
f9:ee:8b:52:0b:93:38:0a:33:98:4f:e1:2c:62:bb:
ea:26:2e:65:a7:de:54:2f:5d:4e:b5:4e:3f:21:5e:
9e:bb:d2:30:1c:80:3f:f5:f7:2d:d7:7d:89:3a:8d:
31:82:1c:93:fe:03:c2:fb:d6:2b:5c:59:a2:ef:68:
4a:89:06:91:17:cf:36:d2:7f:10:20:8d:62:3c:73:
09:45:14:e2:fa:5a:47:17:20:91:c1:00:fc:4e:d6:
e2:eb:ee:42:69:b6:e8:09:74:93:02:3b:f8:f8:0d:
5e:94:fe:3a:55:17:fd:3c:73:cd:7e:cc:73:ab:dc:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:7A:2F:EB:E7:44:FC:C1:A1:9E:06:C3:EC:46:F7:54:27:97:9A
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/cpR6L-vnRPzBoZ4Gw-xG91Qnl5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6286::/32
2a10:4100::/32
Signature Algorithm: sha256WithRSAEncryption
65:d8:45:22:e0:ad:33:48:c3:1c:f7:a0:33:f5:d6:5d:f1:4d:
ce:65:e5:e2:bf:b6:5e:a3:ea:b3:c3:29:23:13:ac:80:93:fb:
a4:38:b2:75:a1:aa:8e:85:c0:e4:cb:19:09:ea:6a:0c:58:87:
e5:a7:ad:1f:71:7b:ce:7f:1e:2c:c8:59:e9:d2:3d:af:c2:0a:
51:93:ee:3f:66:40:48:c5:eb:ac:cd:27:c3:4a:7b:f0:c3:22:
3c:1a:f6:99:40:7f:81:27:18:11:7a:17:f8:d7:56:05:de:58:
d4:4b:fa:a9:2d:02:a6:f2:96:cd:0d:68:ba:22:d9:b6:e1:69:
ac:d7:d4:59:a0:6d:be:b2:77:47:89:54:59:66:be:22:50:5e:
26:cc:91:72:a3:98:19:c8:74:38:2a:3e:e8:a7:6e:d7:93:7b:
b0:e1:b2:fc:e9:e9:fd:6f:5c:40:78:67:f8:2f:c3:f3:4b:0b:
34:e0:b0:69:dc:52:91:62:70:54:a7:83:6a:95:f1:33:db:75:
33:20:c2:4f:d9:ef:00:a4:d8:37:10:a8:b1:62:92:a7:b2:69:
a1:d5:22:f3:f8:12:f5:df:77:5d:a1:78:28:32:79:38:4e:7a:
19:62:11:f6:b2:94:f9:f9:61:07:3f:62:25:ec:4a:3c:a4:49:
e6:e7:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:58:30 2025 by rpki-client