Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/cVoY4VKa5Nn9SaSFSTPl0pAO7SE.roa
File: cVoY4VKa5Nn9SaSFSTPl0pAO7SE.roa (raw, json)
Hash identifier: ZfV4DzRRWPSEwkApBPY0kpGjcP4GS7Za5xHeE/X+Q4U=
Subject key identifier: 71:5A:18:E1:52:9A:E4:D9:FD:49:A4:85:49:33:E5:D2:90:0E:ED:21
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0197A8CF8885B59C4F19CB890E7FF3505B42
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/cVoY4VKa5Nn9SaSFSTPl0pAO7SE.roa
Signing time: Wed 25 Jun 2025 20:37:42 +0000
ROA not before: Wed 25 Jun 2025 20:37:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58285
IP address blocks: 2a0e:5cc0::/29 maxlen: 29
2a0e:7340::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 30 Jun 2025 19:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:cf:88:85:b5:9c:4f:19:cb:89:0e:7f:f3:50:5b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Jun 25 20:37:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715a18e1529ae4d9fd49a4854933e5d2900eed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:d8:78:4d:c4:0a:a9:1c:63:b3:73:ef:9a:
17:57:27:2d:6f:15:0a:c1:05:bc:b4:28:85:dd:fc:
6a:78:a8:3a:b9:27:b6:da:1f:39:48:5b:38:85:81:
c1:b8:a8:1b:82:05:87:7f:28:9f:4e:b3:39:ee:d9:
a2:3f:b5:76:10:13:40:73:f7:64:48:ae:e0:e2:c9:
d4:b8:d3:75:a6:ed:cc:52:6e:14:c4:b7:d2:57:18:
cd:04:73:69:3e:52:3f:de:5a:8f:e6:66:d5:53:f0:
9c:d9:d7:73:ce:51:6c:0e:9d:68:9d:9d:72:c0:65:
bf:64:8c:4c:ba:82:05:60:48:d2:bb:16:74:21:bd:
23:99:47:d9:fb:c3:93:5b:50:71:0a:4d:ad:8f:8c:
f9:75:5f:44:35:dc:2a:6c:57:ca:11:84:4d:8b:66:
f5:a1:2c:da:87:8d:5a:27:84:bb:5f:30:72:b9:ad:
86:dc:e0:b4:43:62:9b:63:31:95:51:da:b3:f5:8b:
d1:7f:f4:55:55:c7:29:0e:7b:c4:0e:b6:26:08:99:
a4:96:db:63:15:0d:07:67:5f:49:e0:b0:6c:27:3a:
01:cf:ab:52:87:aa:2f:48:b4:f9:71:83:f2:2a:02:
b6:f3:a2:1b:50:26:16:f8:65:a0:bf:08:a6:3b:56:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:18:E1:52:9A:E4:D9:FD:49:A4:85:49:33:E5:D2:90:0E:ED:21
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/cVoY4VKa5Nn9SaSFSTPl0pAO7SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5cc0::/29
2a0e:7340::/29
Signature Algorithm: sha256WithRSAEncryption
a3:c2:4c:57:aa:58:3a:9f:d9:25:05:e7:00:2f:bd:d9:e0:12:
a6:08:56:a1:a6:2c:79:ce:48:ab:27:2f:86:1f:30:44:ae:80:
8b:b0:d2:ee:c4:1c:a2:3a:63:b8:4e:60:4b:2e:82:9d:81:cc:
85:e1:9f:4f:7d:8f:7a:94:e7:04:50:0c:6b:0a:25:d3:29:31:
76:71:dc:f6:23:a0:d9:c4:cb:c2:61:35:5e:f3:7b:62:64:45:
2d:51:8b:01:c3:ba:36:00:01:1d:cc:6b:dc:88:9b:31:9e:11:
1f:33:26:25:73:65:94:a8:c5:8b:56:ab:13:3f:e5:54:d6:fd:
47:17:53:9c:a4:6d:db:34:19:7c:1d:21:90:aa:c4:1d:49:c9:
a0:fc:d0:8c:58:ca:34:d8:aa:db:5b:48:d2:2f:29:72:3e:fc:
e9:ef:7b:13:65:f1:80:8b:f3:45:e8:2e:28:57:ba:55:31:00:
74:2c:b6:74:07:e1:01:ab:8c:c0:88:90:32:1c:5f:fa:e7:71:
0f:af:4b:3f:04:f6:dd:bf:34:01:3d:54:0d:0e:85:50:63:c9:
7d:1a:4a:29:2a:86:46:c7:dd:f6:50:9a:72:5b:f1:7c:5b:b9:
ab:d3:5b:a0:82:5c:e7:bb:d0:ed:30:be:55:05:f6:24:d9:2d:
93:c8:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:59:07 2025 by rpki-client