Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XVoRFsrbjnnkdQi1oEOX2GtleDY.roa
File: XVoRFsrbjnnkdQi1oEOX2GtleDY.roa (raw, json)
Hash identifier: htUgdeo8XnEiF1j1Sg1CFp5P1j+K/ABGDQxnn2KaMag=
Subject key identifier: 5D:5A:11:16:CA:DB:8E:79:E4:75:08:B5:A0:43:97:D8:6B:65:78:36
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01974509C6C24FCB432EA9F54B36DC1B4EC1
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XVoRFsrbjnnkdQi1oEOX2GtleDY.roa
Signing time: Fri 06 Jun 2025 11:39:17 +0000
ROA not before: Fri 06 Jun 2025 11:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207530
IP address blocks: 2a12:bec4:1a90::/48 maxlen: 48
2a12:bec4:1a91::/48 maxlen: 48
2a12:bec4:1a92::/48 maxlen: 48
2a12:bec4:1a93::/48 maxlen: 48
2a12:bec4:1a94::/48 maxlen: 48
2a12:bec4:1a95::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 08 Jun 2025 09:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:09:c6:c2:4f:cb:43:2e:a9:f5:4b:36:dc:1b:4e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 6 11:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d5a1116cadb8e79e47508b5a04397d86b657836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:22:c9:d3:61:d4:b2:de:85:bb:1f:11:92:
fb:65:53:67:04:3f:08:07:4c:6f:fd:b9:f6:cf:22:
0e:73:93:3b:35:c0:04:54:ae:03:5a:4a:b2:ad:21:
7f:71:47:a7:e0:0c:b2:d3:6e:ca:6b:99:50:e8:10:
b1:15:90:73:60:e9:41:92:f0:e0:f9:ff:1f:f7:54:
02:ee:e3:f1:a7:56:57:9b:9f:05:fa:5d:81:bc:94:
60:36:3c:76:4a:1b:24:21:d6:33:9d:7a:d6:00:57:
33:3e:42:a6:ac:d5:b1:bc:ca:5e:1f:8c:1f:c2:1f:
16:d9:03:a4:9c:d6:4e:12:b7:54:8b:e2:c1:0f:d2:
13:04:fe:d4:c0:0c:06:5e:d7:f2:2b:f8:66:6d:d5:
20:98:93:af:40:c5:42:f7:94:68:7a:d9:24:89:6f:
9f:e2:a8:c1:03:57:a1:0e:d5:df:ba:04:a1:98:46:
d8:c4:52:01:40:38:d9:92:3e:c7:39:6e:3f:06:47:
e4:b5:ff:60:29:84:9f:68:5c:4f:bd:73:d0:6e:60:
dc:7b:cf:8c:a8:a3:e8:f3:e6:f6:ac:18:03:63:90:
aa:7d:70:41:b1:12:07:05:4e:3e:56:f7:eb:2b:97:
db:fe:75:e8:21:b1:40:98:f2:6b:5d:54:9c:43:1d:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5A:11:16:CA:DB:8E:79:E4:75:08:B5:A0:43:97:D8:6B:65:78:36
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XVoRFsrbjnnkdQi1oEOX2GtleDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1a90::-2a12:bec4:1a95:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:3b:90:8d:ed:c0:40:47:fc:85:ed:b1:80:d2:05:9b:f3:68:
26:fc:7d:9a:c8:34:5e:26:e2:94:25:5f:d4:8a:dc:1b:0a:d9:
ac:1a:f4:f6:58:78:ab:77:a2:48:72:cf:a2:af:d8:4d:e3:56:
db:9e:8e:7b:08:92:87:79:62:93:88:a1:b5:60:c2:45:93:2e:
2e:29:ab:8f:ff:2b:23:45:83:5f:d8:0f:ac:e3:04:99:1e:86:
ed:e5:5f:bb:15:7c:25:13:57:b4:71:7f:a9:ed:56:d4:ec:bc:
92:36:5c:a2:d9:46:ae:3f:05:8a:f4:8b:b3:74:c7:02:67:cd:
72:42:e1:9a:d8:1c:82:d4:1d:ed:8f:2f:17:85:23:2c:ad:a6:
ce:40:63:3d:49:87:89:9f:13:59:8b:07:d8:90:65:a1:c2:37:
31:72:14:ec:9c:a3:38:8c:92:a5:cc:8f:89:9a:d5:87:04:13:
49:cb:00:92:41:73:66:af:9f:16:e2:4c:70:68:29:8a:26:7c:
c8:e3:10:b1:c7:ce:1b:82:0b:b9:28:46:68:e9:7a:e7:96:17:
dd:ea:ce:45:5c:1c:2b:b7:e9:32:d9:d4:ab:f1:19:6d:52:15:
31:8d:b7:2d:1c:88:48:a3:59:bd:4a:b8:f6:0b:67:65:7c:6e:
55:64:a9:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 18 19:51:51 2025 by rpki-client