Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/xZ1sYdss-M691gsd2x_GPwpfdNQ.roa
File: xZ1sYdss-M691gsd2x_GPwpfdNQ.roa (raw, json)
Hash identifier: SF8N9CX489G/R2QKE3PUAsxkUbKRSWy0jrnADtEbS/g=
Subject key identifier: C5:9D:6C:61:DB:2C:F8:CE:BD:D6:0B:1D:DB:1F:C6:3F:0A:5F:74:D4
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01966681E38BA883495733E4DB6D7A659D87
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/xZ1sYdss-M691gsd2x_GPwpfdNQ.roa
Signing time: Thu 24 Apr 2025 06:35:10 +0000
ROA not before: Thu 24 Apr 2025 06:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210352
IP address blocks: 2a14:67c1:a068::/48 maxlen: 48
2a14:67c1:b000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 May 2025 09:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:81:e3:8b:a8:83:49:57:33:e4:db:6d:7a:65:9d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Apr 24 06:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c59d6c61db2cf8cebdd60b1ddb1fc63f0a5f74d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:d0:be:ea:4a:6a:34:8d:a0:c1:de:c3:93:
7c:6d:fa:95:71:1d:61:aa:3a:f3:f6:b8:c6:94:0c:
90:1e:72:4c:87:df:51:8d:a4:29:82:7c:7f:09:69:
be:c4:be:22:ab:58:08:6a:b3:53:2b:32:4c:91:0f:
ce:c9:f5:7f:9a:b8:d4:53:f9:85:5b:59:6c:7f:a1:
fe:7a:4e:e9:a7:91:7a:8c:ff:c6:ee:83:11:16:d2:
53:b5:0e:04:57:8e:d4:61:44:ed:8b:c4:e1:93:83:
1a:96:0a:55:03:8a:7d:f1:0e:b3:1f:b5:9b:9b:36:
d0:9a:f2:9d:dc:78:e9:0a:16:f4:2a:56:19:28:c2:
0c:6b:e9:c6:a5:bf:b0:e5:ec:c8:ab:46:b8:3d:82:
66:28:0b:5b:b1:da:2a:8b:f5:ae:bd:33:00:34:db:
4d:34:d9:68:c0:37:d2:61:df:26:5b:13:31:8b:7a:
b2:5b:eb:82:b8:39:bf:75:10:32:d9:6a:a5:b8:01:
6c:e7:37:49:29:17:9d:82:ff:e8:7c:6e:f2:5c:1c:
85:be:d9:12:c1:10:a1:6b:68:5f:5c:3d:ab:58:bd:
c1:2c:ea:ff:37:18:92:4d:01:09:06:fc:54:e9:3f:
bd:9b:22:cb:2d:28:53:38:92:19:1b:d4:e9:cc:b4:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9D:6C:61:DB:2C:F8:CE:BD:D6:0B:1D:DB:1F:C6:3F:0A:5F:74:D4
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/xZ1sYdss-M691gsd2x_GPwpfdNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a068::/48
2a14:67c1:b000::/48
Signature Algorithm: sha256WithRSAEncryption
05:76:32:6d:bc:ee:7c:b7:9b:f2:9e:7e:40:de:cd:b8:05:76:
0e:e8:3b:6b:32:4a:c8:ab:67:c9:92:97:9e:a4:e5:4c:8b:43:
54:5b:89:36:7c:a1:b5:89:99:c9:1b:68:d5:4e:c3:18:60:c2:
34:90:65:d5:e7:17:6c:16:77:90:53:63:72:e2:13:7f:4d:c1:
61:41:66:61:9f:c0:5a:5f:e6:f1:fe:cf:5d:4a:75:6b:df:be:
72:f6:27:6d:02:f8:1f:56:06:ef:10:98:2d:68:0b:d5:9e:c3:
e9:0c:b4:51:bd:43:55:1a:6b:ae:2c:52:20:7e:0b:3c:ff:92:
46:15:48:a2:f9:80:7f:a5:34:f8:38:c5:3a:25:bd:c6:5b:bf:
31:4c:dc:75:39:8f:76:ce:48:68:dd:a8:66:9a:fb:e1:e6:4a:
2d:8e:ff:51:59:25:7c:e6:e7:d3:c3:4a:c7:e1:97:00:3c:72:
69:9e:4a:4e:5f:eb:bd:c6:83:ab:65:ce:25:2a:5c:4d:6a:1b:
6d:3f:13:77:72:42:a2:79:30:98:82:f1:79:e1:de:67:a7:06:
68:7d:10:1e:39:ad:8f:e4:ec:3c:c9:03:91:5b:c8:16:e9:59:
0e:d4:b9:13:cd:90:61:9b:f7:4e:4a:b0:9c:96:f9:89:99:18:
d3:36:92:ce
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZZmgeOLqINJVzPk2216ZZ2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjUwNDI0MDYzNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTlkNmM2MWRiMmNmOGNlYmRkNjBiMWRkYjFmYzYzZjBhNWY3NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVTQvupKajSNoMHew5N8bfqVcR1h
qjrz9rjGlAyQHnJMh99RjaQpgnx/CWm+xL4iq1gIarNTKzJMkQ/OyfV/mrjUU/mF
W1lsf6H+ek7pp5F6jP/G7oMRFtJTtQ4EV47UYUTti8Thk4MalgpVA4p98Q6zH7Wb
mzbQmvKd3HjpChb0KlYZKMIMa+nGpb+w5ezIq0a4PYJmKAtbsdoqi/WuvTMANNtN
NNlowDfSYd8mWxMxi3qyW+uCuDm/dRAy2WqluAFs5zdJKRedgv/ofG7yXByFvtkS
wRCha2hfXD2rWL3BLOr/NxiSTQEJBvxU6T+9myLLLShTOJIZG9TpzLSG3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMWdbGHbLPjOvdYLHdsfxj8KX3TUMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEveFoxc1lkc3MtTTY5MWdzZDJ4X0dQd3BmZE5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhRnwaBo
AwcAKhRnwbAAMA0GCSqGSIb3DQEBCwUAA4IBAQAFdjJtvO58t5vynn5A3s24BXYO
6DtrMkrIq2fJkpeepOVMi0NUW4k2fKG1iZnJG2jVTsMYYMI0kGXV5xdsFneQU2Ny
4hN/TcFhQWZhn8BaX+bx/s9dSnVr375y9idtAvgfVgbvEJgtaAvVnsPpDLRRvUNV
GmuuLFIgfgs8/5JGFUii+YB/pTT4OMU6Jb3GW78xTNx1OY92zkho3ahmmvvh5kot
jv9RWSV85ufTw0rH4ZcAPHJpnkpOX+u9xoOrZc4lKlxNahttPxN3ckKieTCYgvF5
4d5npwZofRAeOa2P5Ow8yQORW8gW6VkO1LkTzZBhm/dOSrCclvmJmRjTNpLO
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:40 2025 by rpki-client