Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CIzs5-y_Qozw6FPjABzlcPLKcBA.roa
File: CIzs5-y_Qozw6FPjABzlcPLKcBA.roa (raw, json)
Hash identifier: 6czTh3zs9sikCcJU5mhaHVdBiPS9UxqA2YZk5VJf4KY=
Subject key identifier: 08:8C:EC:E7:EC:BF:42:8C:F0:E8:53:E3:00:1C:E5:70:F2:CA:70:10
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0195F6E3F72198DC69D4F250D0E56657C01F
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CIzs5-y_Qozw6FPjABzlcPLKcBA.roa
Signing time: Wed 02 Apr 2025 14:24:49 +0000
ROA not before: Wed 02 Apr 2025 14:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a11:c447::/32 maxlen: 32
2a11:fec2::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 09 Apr 2025 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:e3:f7:21:98:dc:69:d4:f2:50:d0:e5:66:57:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Apr 2 14:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=088cece7ecbf428cf0e853e3001ce570f2ca7010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:ce:c1:7e:f3:38:6a:42:3e:50:68:a5:8c:
6f:0b:be:40:73:ae:8d:ea:a8:d3:cf:d7:85:0b:be:
0d:7d:d2:d5:fc:df:84:3b:0f:69:2b:5a:08:ea:60:
23:40:13:0c:ea:d9:04:35:80:78:5a:e5:f2:f4:30:
cb:f3:3c:4f:17:b4:9a:2f:94:bb:7b:a2:29:f0:b5:
9a:13:06:cb:08:51:15:ed:28:cb:ec:a9:c6:21:dd:
6e:79:9f:11:a0:0e:21:43:a9:26:74:fd:bd:10:c4:
95:40:7c:10:ec:12:3b:4d:5e:66:67:b5:ef:a9:a8:
41:af:6a:ef:04:3c:74:26:28:4a:c7:3d:a3:ff:90:
82:09:ac:a7:0d:7f:eb:73:5a:19:53:42:89:b5:d4:
02:9f:b3:33:4f:b9:71:b3:e6:cb:6a:14:2d:60:4d:
6d:24:4d:87:85:ab:b7:49:82:71:64:d7:08:5e:89:
f4:ca:7c:14:fa:61:f9:39:dc:b1:b3:a1:b1:19:07:
1c:0f:f5:11:03:33:ce:e7:b8:94:30:7b:f7:ec:a8:
dd:f5:ff:e6:3d:9f:c7:70:a2:36:b0:f3:52:a3:0c:
19:c2:7b:33:7b:e1:5f:0a:83:b4:20:83:e4:44:b4:
59:e8:67:a4:1e:b9:5e:94:69:76:8a:89:43:13:15:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:EC:E7:EC:BF:42:8C:F0:E8:53:E3:00:1C:E5:70:F2:CA:70:10
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CIzs5-y_Qozw6FPjABzlcPLKcBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c447::/32
2a11:fec2::/32
Signature Algorithm: sha256WithRSAEncryption
4f:59:aa:35:60:76:7b:ea:7e:df:71:7b:22:d9:60:75:5b:d2:
23:fd:84:9d:ec:c4:5d:1c:66:3c:51:3e:94:41:56:e5:eb:88:
7b:28:45:4d:05:f4:47:78:eb:04:10:2c:a2:18:a3:ae:a7:0f:
9f:52:cf:3f:c1:28:64:f3:c2:8f:86:87:6a:e9:7f:e3:e4:b5:
fb:2c:b1:62:39:b7:1b:17:c6:7f:3a:b1:97:98:56:b8:53:e6:
8e:66:33:30:e9:43:e8:13:7d:e8:4e:da:49:d0:3c:fa:b9:1c:
3a:ee:5d:4f:da:11:f7:12:c3:35:bb:ae:5f:40:d4:9c:05:53:
e5:40:25:ec:cc:a5:e4:f7:17:1f:13:9a:6a:de:00:b2:9f:9e:
3b:59:2d:10:ed:2a:18:b9:b8:72:97:3f:0d:46:4f:72:b2:36:
84:a0:37:ae:85:2e:f7:c2:53:1a:9c:77:88:5d:04:f1:0e:7b:
43:d6:58:f7:15:0d:6f:2f:48:b6:9f:a1:60:aa:ec:9a:09:8a:
8f:87:b8:d6:09:c1:4d:1b:06:53:89:52:dd:81:c5:9d:57:65:
ce:91:fe:18:58:41:39:7d:27:da:58:51:98:d6:eb:5f:02:a6:
53:6d:09:77:1d:da:f4:65:72:97:89:db:3d:de:24:2b:c7:18:
9e:ba:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:05:22 2025 by rpki-client