Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zylEBN6JqV9Yut0UHCKwd7HAE_k.roa
File: zylEBN6JqV9Yut0UHCKwd7HAE_k.roa (raw, json)
Hash identifier: BxBFMzgHDC4m5/8W4ehR822FAqzwX7qI+veKUzLsVIE=
Subject key identifier: CF:29:44:04:DE:89:A9:5F:58:BA:DD:14:1C:22:B0:77:B1:C0:13:F9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01970147DB006388A0D409D616BB26CC6935
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zylEBN6JqV9Yut0UHCKwd7HAE_k.roa
Signing time: Sat 24 May 2025 07:52:55 +0000
ROA not before: Sat 24 May 2025 07:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215137
IP address blocks: 2a0e:97c1::/40 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 15:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:47:db:00:63:88:a0:d4:09:d6:16:bb:26:cc:69:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 24 07:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf294404de89a95f58badd141c22b077b1c013f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:d6:c5:20:f4:41:36:fe:98:f0:4d:16:aa:
bc:d1:13:11:73:23:11:48:23:4e:cc:5d:de:f8:11:
04:26:ff:0e:fc:04:2e:81:b7:57:7f:b8:84:6c:c5:
52:4a:77:a0:ac:d8:ca:57:f5:1f:66:80:ca:99:9d:
44:7d:d3:b5:b2:40:8a:56:db:98:00:eb:c2:19:3d:
07:ae:81:51:4e:63:ec:f7:1c:43:df:2e:6e:0c:65:
ba:09:bb:40:35:1a:cb:66:6f:95:1b:93:70:42:3f:
51:9f:a8:40:41:92:4a:76:6c:e1:85:41:1c:13:f7:
48:be:20:89:c1:76:03:ec:0f:51:79:1e:81:cd:54:
2d:60:96:8b:39:6a:fd:40:35:6e:0b:53:d3:64:42:
c2:cb:ca:4a:86:6d:3e:84:0b:5d:51:aa:8b:6e:95:
ee:6e:1c:00:12:83:85:16:5c:31:7f:f6:74:48:fb:
cb:9e:0a:6c:89:ee:2d:f6:d9:18:74:2a:b1:96:ba:
4a:12:9b:26:5d:0d:51:09:24:dd:06:9a:b3:f8:2b:
28:62:64:b6:63:2d:47:18:91:69:92:2b:74:9d:56:
dc:5f:54:6d:15:d4:95:5c:ac:56:01:c8:80:10:d9:
9c:02:63:5d:13:93:74:63:c4:3b:d4:fa:65:c8:7c:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:44:04:DE:89:A9:5F:58:BA:DD:14:1C:22:B0:77:B1:C0:13:F9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zylEBN6JqV9Yut0UHCKwd7HAE_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1::/40
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
22:7e:0d:88:09:c8:5b:59:8e:a0:f9:d6:ee:3d:85:d8:bd:ce:
73:fd:83:18:75:62:fb:23:51:48:4b:42:27:44:06:82:df:67:
87:3c:d7:69:67:7e:9a:b6:60:fe:94:06:da:dd:02:5e:68:18:
30:4a:25:d6:2a:b3:29:09:80:9b:39:5d:96:cb:a3:28:90:70:
29:56:a6:56:12:0c:e5:02:d6:dc:7c:d4:d9:d3:c2:9b:e1:31:
5d:59:a0:e6:12:4a:6b:26:39:a2:86:1a:b9:61:5b:f1:1d:88:
e7:28:de:21:f9:2f:1a:0c:4b:40:e1:a2:e8:41:ba:c5:b2:ef:
1f:66:4a:71:20:8c:01:cc:26:8d:b8:26:81:dc:a5:85:26:3a:
b0:10:93:0f:3b:15:ff:4a:a5:ec:17:a7:9d:fd:02:de:20:a7:
9b:03:cd:4d:61:1a:d0:6e:cb:0b:51:81:78:0b:6b:13:2c:40:
f9:05:6b:bc:12:69:4d:55:0b:8a:1d:4c:aa:88:8a:f0:90:ed:
0c:9b:ff:e1:46:b1:32:bd:41:19:0a:f2:80:39:0a:aa:c2:4f:
f1:cd:4c:5f:df:c9:96:01:4e:96:98:09:95:64:f7:20:3f:03:
f2:cf:54:29:5e:d5:58:d7:31:ec:08:b4:b2:61:5c:43:6f:f0:
45:9b:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:03:08 2025 by rpki-client