Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/FYlv6z3NJYveeSY7AF9haCFJ_1c.roa
File: FYlv6z3NJYveeSY7AF9haCFJ_1c.roa (raw, json)
Hash identifier: DHy+lJFS+C7cKmd7wc91ZZoe4PeIkI9bs7EozfIBpPs=
Subject key identifier: 15:89:6F:EB:3D:CD:25:8B:DE:79:26:3B:00:5F:61:68:21:49:FF:57
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 01978CEC926F154E247714992E5581413BEB
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/FYlv6z3NJYveeSY7AF9haCFJ_1c.roa
Signing time: Fri 20 Jun 2025 10:40:03 +0000
ROA not before: Fri 20 Jun 2025 10:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:d084::/32 maxlen: 32
2a12:3b40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 23 Jun 2025 19:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:ec:92:6f:15:4e:24:77:14:99:2e:55:81:41:3b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jun 20 10:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15896feb3dcd258bde79263b005f61682149ff57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:f2:d0:53:a4:f1:ba:58:6e:4a:28:6b:77:
c5:61:cb:4a:14:fc:3d:0d:eb:de:2b:64:76:bb:bc:
ec:01:43:e3:c9:c5:23:db:c8:f6:87:d1:ab:16:ca:
e4:f6:c6:d9:a6:9b:04:f7:45:bc:f5:d8:22:68:b5:
4b:35:de:93:c2:af:32:35:d0:b9:0b:a7:28:c2:af:
21:cd:58:96:53:07:88:3d:08:cc:d7:1c:77:f5:9d:
74:47:18:a4:40:2a:40:2a:43:3c:e7:76:f1:91:c8:
a2:70:fa:0b:73:17:1e:67:81:c2:4d:f7:c9:7a:61:
70:60:45:be:4c:7e:54:98:80:0d:c7:a7:eb:d4:60:
ff:b8:ba:af:60:30:be:a4:f4:c8:92:4c:f0:2b:d3:
91:95:4a:f7:b4:c4:bc:77:48:89:c9:0b:e4:f7:7a:
51:1b:1e:d6:86:30:b2:d7:10:c9:46:dd:32:ef:67:
d1:41:1d:e6:d5:a4:46:ae:0b:72:fc:cc:f5:1c:3c:
30:8a:ba:aa:db:d6:33:50:10:0d:1d:68:bd:a2:27:
d8:98:c9:24:e1:86:03:49:0f:e1:ef:80:af:45:0d:
07:26:a5:8d:59:1f:83:70:4e:d2:87:fc:ae:61:fd:
dd:06:be:2c:0f:15:20:a0:9a:5e:b2:a6:78:51:34:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:89:6F:EB:3D:CD:25:8B:DE:79:26:3B:00:5F:61:68:21:49:FF:57
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/FYlv6z3NJYveeSY7AF9haCFJ_1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d084::/32
2a12:3b40::/32
Signature Algorithm: sha256WithRSAEncryption
c8:a3:e9:11:6d:a1:6e:84:fe:35:d9:4f:49:a6:fc:e5:79:e0:
4f:69:19:44:73:1c:80:31:fb:c0:11:d5:a4:aa:94:c4:cc:8b:
1f:21:14:7b:19:6c:83:6b:58:b9:1c:f8:b0:6b:f4:74:b3:27:
7a:59:1d:2e:5d:31:aa:d3:dc:e1:ae:56:b7:45:b2:f4:8d:ac:
1b:d1:48:e3:be:53:1a:e5:41:c9:de:fa:54:99:ef:16:7a:d8:
76:57:af:9b:12:64:23:b5:e0:1b:7e:d5:b5:0f:2c:df:3d:a7:
84:d6:4b:79:b6:a0:40:20:a7:60:fc:cb:a8:79:d6:10:96:74:
96:b5:e1:e2:ca:fe:73:a6:e9:37:a0:ec:4f:b8:5d:6e:de:23:
b9:b1:80:c5:29:d0:ba:a7:cf:43:25:de:7c:db:e9:ff:43:87:
70:d2:cc:05:95:a8:a7:68:f5:70:97:48:87:1f:ed:7f:a9:ae:
f2:5d:55:4f:ae:a9:e1:26:a4:a2:b4:b6:7a:c3:8f:5e:7a:1f:
47:0e:bb:2b:70:68:7c:18:1c:33:98:4e:e1:42:50:e9:b5:3b:
31:0b:87:85:bc:a4:d2:1a:18:58:bc:19:3f:6d:63:d8:2b:6f:
7b:67:3a:7f:af:8f:c8:8f:65:f0:3e:fe:43:4f:d6:25:21:47:
9c:90:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:21 2025 by rpki-client