Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CbcPNhe7YAKXEOH0RtB3ztEbr0M.roa
File: CbcPNhe7YAKXEOH0RtB3ztEbr0M.roa (raw, json)
Hash identifier: jU6DOrgH03/fWyI29dKFdPPbKHh4PhvI8YNymXN7T4s=
Subject key identifier: 09:B7:0F:36:17:BB:60:02:97:10:E1:F4:46:D0:77:CE:D1:1B:AF:43
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 019721B7AD428BB125C92B9C6D8BC4402140
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CbcPNhe7YAKXEOH0RtB3ztEbr0M.roa
Signing time: Fri 30 May 2025 15:02:54 +0000
ROA not before: Fri 30 May 2025 15:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 2a12:1cc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Jun 2025 17:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:b7:ad:42:8b:b1:25:c9:2b:9c:6d:8b:c4:40:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: May 30 15:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09b70f3617bb60029710e1f446d077ced11baf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:d0:5b:62:aa:3f:98:73:52:ab:b4:d4:16:
79:67:4b:9d:be:eb:0f:82:4a:08:f4:7b:bc:73:ce:
6b:b9:52:61:b4:72:91:7f:fe:9f:de:40:84:fd:b7:
69:3b:bb:ff:00:d8:da:67:6c:ea:e0:d7:e3:46:ef:
e2:9c:1b:8f:e4:29:15:3b:e5:15:2c:51:8b:a6:85:
29:93:c0:e9:de:44:17:d3:73:be:9c:f0:6c:47:d8:
d4:45:19:ec:e9:94:28:2f:d2:65:20:fa:88:3f:0a:
ca:fe:e6:70:67:54:ec:88:8f:7e:d7:d3:7d:2c:5d:
9b:77:e4:6c:0a:ee:1a:f6:1c:0c:57:07:d3:6e:30:
76:14:78:a7:de:67:fb:86:0f:12:67:6f:81:c7:3e:
32:e3:52:2a:f3:62:bf:77:87:73:b8:54:fd:46:c9:
c4:80:ce:9f:b8:09:f2:6e:a3:a6:97:61:a2:fa:7d:
66:90:7f:85:32:8f:9e:cc:78:b4:09:67:8c:e3:e2:
74:3d:e7:9c:e9:d8:7b:31:bc:54:e1:79:80:43:5e:
75:48:58:59:1e:58:2c:e5:18:2e:dd:a0:0e:3b:0d:
0a:ef:a2:0a:53:9d:cf:21:fe:d9:d6:ef:81:25:df:
f1:de:b4:c6:1b:2b:58:05:49:4f:35:63:82:a8:a8:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B7:0F:36:17:BB:60:02:97:10:E1:F4:46:D0:77:CE:D1:1B:AF:43
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/CbcPNhe7YAKXEOH0RtB3ztEbr0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1cc7::/32
Signature Algorithm: sha256WithRSAEncryption
50:bb:27:8a:38:da:4a:9a:89:d8:24:8f:9a:42:f6:e8:dd:2d:
8f:fa:4d:ac:7b:dc:ac:92:f8:56:08:ff:fd:e2:e9:36:8e:d8:
53:4d:3c:37:14:7e:ad:25:dd:c8:db:47:73:c2:40:c8:b5:34:
55:ff:e3:df:ea:14:2e:3c:e5:89:27:90:ec:a7:de:c8:96:c1:
8a:c9:a1:a8:5f:8a:8e:4f:c9:3b:3c:20:b3:06:98:90:38:64:
e6:1a:ba:84:05:20:7a:b8:66:57:18:d5:a7:4a:c5:fb:16:5a:
f5:03:22:01:0d:63:92:8f:c1:ae:d5:e7:e9:95:9d:78:62:e3:
66:72:d7:43:99:39:b0:90:7e:88:b8:96:47:e1:43:4e:10:22:
ec:ec:cd:fa:f7:3e:b3:61:c8:c6:a1:de:12:63:32:35:5b:77:
98:af:af:4a:92:00:31:45:8b:62:45:95:ab:ff:b4:50:c0:55:
57:d6:3c:50:31:90:dd:26:4c:95:1d:5c:7b:f1:10:5b:fd:ed:
49:00:9a:df:45:33:06:f8:56:c6:e5:e3:bf:5f:33:0a:61:cf:
97:04:1b:38:a1:42:fa:7b:98:a6:bc:cc:bc:0b:95:87:fe:09:
f7:6f:a3:db:8f:39:b8:3a:f3:fc:2d:1b:3f:b2:cf:02:3d:70:
9e:a8:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:31:35 2025 by rpki-client