Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/6hoAAzvHbcWchhI77I6LXCEYnZ4.roa
File: 6hoAAzvHbcWchhI77I6LXCEYnZ4.roa (raw, json)
Hash identifier: GSu9DKkXLoePraFQov2xbRs5iZy+zhlJQuPDCMISMvA=
Subject key identifier: EA:1A:00:03:3B:C7:6D:C5:9C:86:12:3B:EC:8E:8B:5C:21:18:9D:9E
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0195AAB394B81537FB386E73321CCD4FF48B
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/6hoAAzvHbcWchhI77I6LXCEYnZ4.roa
Signing time: Tue 18 Mar 2025 19:20:50 +0000
ROA not before: Tue 18 Mar 2025 19:20:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a12:1542::/32 maxlen: 32
2a12:7302::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 25 Mar 2025 19:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:aa:b3:94:b8:15:37:fb:38:6e:73:32:1c:cd:4f:f4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Mar 18 19:20:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea1a00033bc76dc59c86123bec8e8b5c21189d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:30:78:0a:be:d4:8e:9b:4f:64:9d:5c:b5:
b6:3d:c5:92:4b:df:62:04:7e:9d:96:d2:5f:7a:3b:
c3:56:74:7a:ed:04:6f:f3:e1:2f:b1:84:45:5c:9b:
c7:03:a4:bf:52:b6:e3:74:94:47:c0:bf:a8:3f:52:
0b:f6:7d:80:90:34:37:d1:6c:60:8b:f4:d8:c8:bf:
67:b1:13:f1:a1:71:86:59:7c:52:73:8b:fc:e8:e8:
12:46:68:1d:f0:16:dc:4c:3b:55:28:b2:6d:f7:80:
0b:a2:22:70:71:98:be:c0:0e:f8:4a:9f:48:e3:dc:
c0:bf:a7:05:0d:73:f1:43:3a:1c:ac:37:7b:3d:dc:
40:38:0b:8b:da:a9:b3:89:f7:c4:92:e3:8f:96:a6:
99:a3:3f:5b:e6:52:1b:ff:7a:c3:50:ed:a2:13:97:
c5:dc:0f:eb:04:7f:79:7c:77:7a:19:41:1f:82:7b:
be:22:93:91:13:d3:e0:9f:90:6b:5a:dc:f0:7b:2e:
3b:ed:8c:79:f9:2e:0c:f9:db:4c:5d:88:b1:c5:c4:
ba:93:67:8f:98:53:54:2d:2f:df:3d:4b:bd:1f:8e:
94:3e:4b:c3:4f:4a:9f:02:78:61:c2:6f:cc:93:f2:
35:f1:47:d4:dd:eb:ea:44:26:98:c9:3d:1f:3d:9a:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1A:00:03:3B:C7:6D:C5:9C:86:12:3B:EC:8E:8B:5C:21:18:9D:9E
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/6hoAAzvHbcWchhI77I6LXCEYnZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1542::/32
2a12:7302::/32
Signature Algorithm: sha256WithRSAEncryption
be:00:b2:78:0b:06:a3:a8:ba:1b:e4:67:d5:24:8b:39:3b:a3:
5b:90:fa:10:fd:6c:37:c9:3d:ea:3c:ea:40:4f:19:f2:42:1d:
9b:f8:66:ec:94:7d:df:10:15:c8:cd:3a:2f:25:7c:70:72:c9:
46:d7:b0:6b:4c:0c:6d:b0:20:91:b3:f0:c7:15:1e:6c:37:f2:
68:c4:06:20:69:8f:82:b1:f6:4e:60:57:8b:7b:59:32:ae:36:
ea:04:c2:28:4a:63:c2:77:ba:52:c5:18:44:2e:b6:c3:34:80:
3f:d8:49:f4:22:c6:6d:f3:08:87:b5:a4:4d:e0:87:72:f5:19:
9a:8c:a9:74:62:e3:de:1e:21:ef:53:33:19:6e:f1:e8:e1:27:
1f:4e:4a:e5:60:6b:08:93:5a:71:73:b8:74:2a:80:bb:a8:b7:
ee:2e:77:a9:49:7c:83:ec:04:71:57:96:b3:8e:14:f1:9a:19:
43:52:33:1e:ba:7b:be:13:d0:6e:c8:d4:cf:47:55:95:cf:78:
e2:6f:52:ca:58:c8:d2:f7:1b:b6:5e:47:6a:b6:4b:3d:22:fe:
c5:99:b0:3c:48:c6:bd:33:47:5a:09:f4:c0:2e:ec:04:a9:02:
c8:3b:7d:2f:b3:59:24:a2:4e:6d:94:7a:48:ce:f8:d1:83:02:
1d:c9:22:fa
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZWqs5S4FTf7OG5zMhzNT/SLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjUwMzE4MTkyMDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTFhMDAwMzNiYzc2ZGM1OWM4NjEyM2JlYzhlOGI1YzIxMTg5ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12AweAq+1I6bT2SdXLW2PcWSS99i
BH6dltJfejvDVnR67QRv8+EvsYRFXJvHA6S/UrbjdJRHwL+oP1IL9n2AkDQ30Wxg
i/TYyL9nsRPxoXGGWXxSc4v86OgSRmgd8BbcTDtVKLJt94ALoiJwcZi+wA74Sp9I
49zAv6cFDXPxQzocrDd7PdxAOAuL2qmziffEkuOPlqaZoz9b5lIb/3rDUO2iE5fF
3A/rBH95fHd6GUEfgnu+IpORE9Pgn5BrWtzwey477Yx5+S4M+dtMXYixxcS6k2eP
mFNULS/fPUu9H46UPkvDT0qfAnhhwm/Mk/I18UfU3evqRCaYyT0fPZpzcwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOoaAAM7x23FnIYSO+yOi1whGJ2eMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvNmhvQUF6dkhiY1djaGhJNzdJNkxYQ0VZblo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhIVQgMF
ACoScwIwDQYJKoZIhvcNAQELBQADggEBAL4AsngLBqOouhvkZ9Ukizk7o1uQ+hD9
bDfJPeo86kBPGfJCHZv4ZuyUfd8QFcjNOi8lfHByyUbXsGtMDG2wIJGz8McVHmw3
8mjEBiBpj4Kx9k5gV4t7WTKuNuoEwihKY8J3ulLFGEQutsM0gD/YSfQixm3zCIe1
pE3gh3L1GZqMqXRi494eIe9TMxlu8ejhJx9OSuVgawiTWnFzuHQqgLuot+4ud6lJ
fIPsBHFXlrOOFPGaGUNSMx66e74T0G7I1M9HVZXPeOJvUspYyNL3G7ZeR2q2Sz0i
/sWZsDxIxr0zR1oJ9MAu7ASpAsg7fS+zWSSiTm2UekjO+NGDAh3JIvo=
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:20 2025 by rpki-client