Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6YPMQfDG8JYs3246pYDzs95TTBA.roa
File: 6YPMQfDG8JYs3246pYDzs95TTBA.roa (raw, json)
Hash identifier: roX5Q6cXOtDLsjjVTFwi/PFJo0tZhaJ3R4hcu6UmzjA=
Subject key identifier: E9:83:CC:41:F0:C6:F0:96:2C:DF:6E:3A:A5:80:F3:B3:DE:53:4C:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019775CA4085DBD59310A55EE3ABFD8BB7D9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6YPMQfDG8JYs3246pYDzs95TTBA.roa
Signing time: Sun 15 Jun 2025 22:51:18 +0000
ROA not before: Sun 15 Jun 2025 22:51:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212995
IP address blocks: 2a0e:b107:b80::/44 maxlen: 48
2a10:2f01:2a0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Jun 2025 02:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:ca:40:85:db:d5:93:10:a5:5e:e3:ab:fd:8b:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 15 22:51:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e983cc41f0c6f0962cdf6e3aa580f3b3de534c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:42:24:85:b2:99:fb:bf:0a:ab:ca:03:43:
84:70:ec:6f:62:0c:6a:d0:06:39:7b:54:c2:db:c3:
9e:df:2c:2a:5f:66:3d:41:c6:dd:56:7b:13:8a:23:
ee:2f:60:57:0c:06:c8:99:07:30:1a:30:95:ae:95:
65:65:77:d4:70:88:52:39:63:c9:f7:8b:1c:40:c3:
6a:61:9f:19:13:84:14:76:7e:fb:2c:a6:19:c0:19:
19:7c:fe:27:49:da:65:6e:cc:77:c2:de:18:6a:dc:
30:2a:be:d4:40:f1:33:d2:d3:43:95:d0:6c:2d:69:
e3:6b:ac:dd:7b:f0:3d:21:98:cd:2b:50:9f:13:bc:
1d:fd:df:24:3c:97:27:fd:02:4e:ed:f1:da:80:5c:
79:2f:6a:47:fb:62:d5:97:28:7d:9a:71:6f:7c:ae:
32:14:ca:6d:e9:c0:e8:b8:8f:6b:c8:ee:9c:f0:2e:
79:fe:36:54:c0:3d:7e:88:2c:7e:3b:60:f1:f5:30:
09:d7:ca:74:1e:d6:12:65:cb:89:89:87:03:3f:f4:
38:6c:ad:96:c6:69:6e:aa:6a:b9:00:3d:27:f2:ff:
d8:d0:8b:df:d5:da:ad:ec:43:71:3b:f0:78:2d:fd:
9d:92:6f:39:7d:5e:c0:79:d4:6b:76:79:a8:59:97:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:83:CC:41:F0:C6:F0:96:2C:DF:6E:3A:A5:80:F3:B3:DE:53:4C:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6YPMQfDG8JYs3246pYDzs95TTBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b80::/44
2a10:2f01:2a0::/44
Signature Algorithm: sha256WithRSAEncryption
63:11:9c:75:0d:7f:b9:c5:df:18:58:90:ec:24:2f:1d:c2:38:
fc:08:fa:8f:8d:5d:27:e2:db:32:3d:79:8a:71:be:aa:4a:db:
ec:48:81:9b:75:3b:23:b9:75:76:e6:91:77:e1:aa:1c:2f:24:
64:6c:52:1b:12:4d:f9:d8:21:5b:71:f1:04:0f:74:5f:fb:63:
1b:97:bc:b6:45:e2:ff:d0:16:ab:bd:7c:c9:e5:86:76:94:ca:
08:aa:67:26:40:0f:9f:94:63:c5:b5:bd:c7:af:b3:ee:6a:ce:
6c:86:8d:b1:7c:a1:e9:4c:8a:24:ac:12:a5:d1:4a:e1:83:9e:
a8:7c:ef:9d:9c:03:d2:b3:eb:67:64:4f:b1:9e:dd:da:66:ff:
3e:86:f6:b7:4f:74:fb:39:2a:57:9e:98:ec:a2:ea:c0:e3:4a:
14:38:05:32:51:89:5f:c0:24:04:95:ea:f8:60:40:26:74:f8:
aa:ca:09:ce:a7:c6:dd:a5:38:7e:6a:78:95:b4:3e:a3:d5:70:
e7:70:65:da:f4:a5:16:fc:01:27:7c:3c:36:91:e7:d8:4e:70:
c1:48:21:03:45:e2:6b:ba:3a:fa:35:1f:91:3e:88:9f:9c:c6:
03:37:55:9e:e8:2d:fb:f0:3c:f1:ad:0a:00:50:40:c9:79:29:
f1:8c:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:47:31 2025 by rpki-client