Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/0DCzTVs8pm5iVA3wGPiPDKzMrj4.roa
File: 0DCzTVs8pm5iVA3wGPiPDKzMrj4.roa (raw, json)
Hash identifier: qWYNmfKoqlbForIpwRJNGemgMKgO0se9m2eUan+Wiho=
Subject key identifier: D0:30:B3:4D:5B:3C:A6:6E:62:54:0D:F0:18:F8:8F:0C:AC:CC:AE:3E
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0196CAB5217FC5A891841809CD1301D7B3D3
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/0DCzTVs8pm5iVA3wGPiPDKzMrj4.roa
Signing time: Tue 13 May 2025 17:33:10 +0000
ROA not before: Tue 13 May 2025 17:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44812
IP address blocks: 2a11:7686::/32 maxlen: 32
2a11:8307::/32 maxlen: 32
2a11:fec5::/32 maxlen: 32
2a12:3b44::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 May 2025 18:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:b5:21:7f:c5:a8:91:84:18:09:cd:13:01:d7:b3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: May 13 17:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d030b34d5b3ca66e62540df018f88f0cacccae3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:f3:eb:72:fd:00:db:74:31:3d:87:15:4d:
72:3c:b1:11:b3:75:57:08:88:53:a7:30:20:b7:f2:
03:0f:46:bc:f9:f6:d4:b5:45:e5:35:17:24:71:85:
0b:03:ff:b9:25:97:3c:ae:f1:41:80:63:26:b3:98:
86:f0:74:b0:bf:48:d2:90:36:4a:c5:fe:0b:33:96:
21:40:6a:1a:3a:cd:96:90:d1:4a:eb:b4:1c:de:60:
22:cb:f6:0b:25:90:e2:d3:7a:78:3b:b6:31:b4:23:
55:82:67:07:19:7c:a4:e5:a0:71:62:76:16:97:c0:
04:fd:4d:a7:b8:09:4b:a3:d6:8b:8b:16:02:98:d1:
93:68:34:5f:2c:3b:02:84:66:78:a8:8c:d5:9d:c9:
73:a9:a6:b6:d4:80:7f:01:95:3b:4f:79:c6:d9:dd:
92:d9:74:b3:45:4b:67:81:0c:bb:e8:54:82:be:25:
ef:92:be:63:1d:9a:ef:99:55:bb:72:9b:2d:b8:a3:
4d:07:c7:9d:da:28:98:0a:02:25:9c:dc:d5:8a:27:
3e:3f:72:e5:6a:92:62:cc:e9:28:72:57:a3:97:5f:
15:c3:65:b7:8b:c3:e2:06:64:5a:23:cd:ed:d6:af:
d5:18:aa:cb:fb:05:22:14:48:36:2c:51:fc:2b:72:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:B3:4D:5B:3C:A6:6E:62:54:0D:F0:18:F8:8F:0C:AC:CC:AE:3E
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/0DCzTVs8pm5iVA3wGPiPDKzMrj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7686::/32
2a11:8307::/32
2a11:fec5::/32
2a12:3b44::/32
Signature Algorithm: sha256WithRSAEncryption
07:25:b5:c8:1e:98:cb:12:11:8b:b0:46:5c:b6:93:b7:8a:46:
36:7a:b6:07:8a:cd:87:69:1d:10:0b:e4:dc:90:b3:a0:20:74:
70:ad:1a:6f:5e:f4:b6:42:94:a8:dd:b0:c2:db:53:99:b5:69:
0e:84:d0:2b:c9:07:53:79:50:5f:c4:fd:98:33:bf:50:c9:de:
1b:a8:b5:75:74:be:1a:13:32:e3:10:a5:a6:de:7d:e3:78:cb:
ba:56:35:54:f8:39:2a:f3:d3:85:d7:65:55:fd:a1:03:a8:9f:
bb:c4:79:69:90:88:87:5f:d1:be:bf:fb:64:1b:6d:8d:93:c7:
f2:57:5c:77:b8:8b:cc:98:3f:b6:25:64:4e:d2:4f:67:e7:0c:
0e:ce:cb:89:bc:b3:06:30:0b:9c:4d:06:16:96:45:2a:9f:5b:
dd:4c:15:51:1d:5f:c3:57:bf:b8:8c:7a:52:01:1f:98:86:5c:
f1:22:7f:aa:18:d4:6f:3a:9c:2d:9f:a1:2d:b7:1e:f2:d0:81:
7e:97:ba:59:77:cb:f4:06:28:ab:d9:22:19:53:6b:4d:02:6f:
a3:ac:f1:d5:32:13:12:d3:63:a0:be:39:12:eb:12:3c:a8:04:
f3:e0:4b:f3:61:11:a4:03:98:da:01:53:47:34:10:d1:71:c6:
82:cb:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:13:58 2025 by rpki-client