Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/lZ-D2YLEQaJ5sieG0ixwYBrYK24.roa
File: lZ-D2YLEQaJ5sieG0ixwYBrYK24.roa (raw, json)
Hash identifier: W+/ww0p0gRH90RqRc6szC1UvuKaOpWB279VyVi3Gwps=
Subject key identifier: 95:9F:83:D9:82:C4:41:A2:79:B2:27:86:D2:2C:70:60:1A:D8:2B:6E
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0196C56592D465D0D1E6225AA48B30CF412C
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/lZ-D2YLEQaJ5sieG0ixwYBrYK24.roa
Signing time: Mon 12 May 2025 16:48:10 +0000
ROA not before: Mon 12 May 2025 16:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51396
IP address blocks: 2a12:1cc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 May 2025 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:65:92:d4:65:d0:d1:e6:22:5a:a4:8b:30:cf:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: May 12 16:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=959f83d982c441a279b22786d22c70601ad82b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:72:72:4d:13:eb:29:b8:16:8a:10:2e:25:
4b:a2:94:f9:a2:3c:87:19:4d:ae:5e:f7:cd:15:03:
db:93:e5:9d:cb:fd:f4:c0:cd:db:aa:bc:eb:c6:28:
75:0f:16:4c:5d:dc:7c:f7:fb:5f:1e:88:a5:fe:c4:
f7:09:f6:8f:96:6f:a8:2b:0e:c5:7a:34:5e:fc:2c:
e6:56:c8:a2:09:74:a4:a4:e2:12:59:3d:7c:29:9a:
71:b5:64:74:72:56:79:f8:99:6c:1e:d8:52:f9:72:
9a:2f:23:9b:57:13:32:06:87:82:7d:84:c4:5e:4a:
9f:a2:64:d5:60:21:d9:37:ab:59:df:d5:fa:7a:ec:
33:8e:41:70:df:28:50:12:ee:0e:ae:ac:30:bc:d9:
2d:d8:a3:0b:91:82:e1:ad:0a:6f:e6:19:cc:d6:9a:
b8:d5:61:ca:1d:ed:c6:93:3d:29:d7:85:c8:57:ea:
3f:c6:22:44:92:7f:a6:c1:95:55:84:58:49:7b:7b:
bc:e5:a6:cd:6c:a5:41:87:94:df:9b:e6:d9:c6:0a:
90:32:2f:eb:88:97:6f:2e:a2:a2:c6:76:0f:d1:18:
7d:b8:7b:51:05:ac:49:4e:86:1c:ae:71:4b:63:cc:
1c:a1:a6:19:fa:40:45:2c:ee:54:bc:67:78:8f:6e:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:83:D9:82:C4:41:A2:79:B2:27:86:D2:2C:70:60:1A:D8:2B:6E
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/lZ-D2YLEQaJ5sieG0ixwYBrYK24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1cc7::/32
Signature Algorithm: sha256WithRSAEncryption
d9:d3:24:1c:60:11:29:a1:33:75:25:66:78:0b:7b:15:60:1d:
17:10:23:07:78:23:bf:c9:1a:c6:67:02:30:73:ad:d1:79:8e:
c5:c3:78:40:f6:77:dd:6e:11:e1:0e:64:0d:db:44:30:82:53:
cc:b9:dd:06:6b:3d:9c:65:f6:5a:cd:f4:75:8d:15:cf:ff:60:
a7:25:e1:62:71:47:ee:b6:6f:e2:da:35:da:81:4f:c4:5f:81:
95:3e:9c:dc:cb:ba:20:4f:f6:47:f9:e1:58:94:77:81:3d:bf:
bf:4f:1f:81:7b:0f:d1:6d:74:4a:fe:e1:d2:dd:f0:54:1a:2d:
3f:34:73:2d:fd:f2:af:46:09:9a:09:c7:4e:79:81:9f:49:73:
c4:96:69:35:4e:44:e0:d0:7f:ed:92:77:5e:f5:4f:6d:a9:e4:
20:70:02:4a:f4:63:23:0f:ee:da:98:05:fb:e5:1b:d1:1f:1f:
b0:74:57:24:d9:b5:76:dc:b9:81:62:96:5b:bb:85:41:d2:67:
9a:9c:5d:da:13:1c:ad:c0:5d:32:d3:f9:a5:45:08:5f:59:a7:
16:18:8b:2d:2c:8e:8b:ce:ca:94:80:8a:5f:d6:78:f5:5b:ac:
04:2f:72:64:ff:31:75:e4:52:e0:3a:11:9e:f2:8e:ce:0d:df:
da:b8:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:38:50 2025 by rpki-client