Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/F-_Zg2rXK02T9wIU-j0DEoWMoU0.roa
File: F-_Zg2rXK02T9wIU-j0DEoWMoU0.roa (raw, json)
Hash identifier: QvAfcfPciJcuEDfOXvSUV1ZihIxiGAccezskRd0teU4=
Subject key identifier: 17:EF:D9:83:6A:D7:2B:4D:93:F7:02:14:FA:3D:03:12:85:8C:A1:4D
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01979F662F605F23413B21493C418BAED3BC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/F-_Zg2rXK02T9wIU-j0DEoWMoU0.roa
Signing time: Tue 24 Jun 2025 00:46:03 +0000
ROA not before: Tue 24 Jun 2025 00:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207530
IP address blocks: 2a12:bec4:1a90::/48 maxlen: 48
2a12:bec4:1a91::/48 maxlen: 48
2a12:bec4:1a92::/48 maxlen: 48
2a12:bec4:1a93::/48 maxlen: 48
2a12:bec4:1a94::/48 maxlen: 48
2a12:bec4:1a95::/48 maxlen: 48
2a12:bec4:1a96::/48 maxlen: 48
2a12:bec4:1a97::/48 maxlen: 48
2a12:bec4:1a98::/48 maxlen: 48
2a12:bec4:1a99::/48 maxlen: 48
2a12:bec4:1b20::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 25 Jun 2025 13:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9f:66:2f:60:5f:23:41:3b:21:49:3c:41:8b:ae:d3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 24 00:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17efd9836ad72b4d93f70214fa3d0312858ca14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:f1:cf:52:8a:31:3f:e0:33:45:99:ed:03:
e7:45:4e:2a:92:c7:ea:d7:a8:23:f9:c8:06:c9:ea:
3b:ee:02:2f:30:0b:d5:54:57:df:40:64:f2:a4:f4:
94:2e:f5:c0:3d:49:a0:92:03:e1:78:72:4f:ed:5a:
97:04:48:fe:0c:72:65:7a:7a:18:ef:f2:6c:e2:8f:
e3:d1:4c:19:5d:6c:8e:22:57:80:87:03:0f:0e:24:
1f:2b:bc:3c:02:f8:f8:58:5a:bb:98:4a:6c:ff:ad:
dc:03:f3:36:31:a9:b8:dc:5f:b5:fa:7c:38:bd:85:
f5:da:75:4d:b7:6e:0e:fc:71:79:97:be:68:cb:58:
70:7e:8d:7c:d2:ed:50:38:ea:3a:c3:42:db:bc:0b:
5f:b8:ec:d0:0a:a7:cf:31:9c:85:0c:38:ea:33:80:
8e:66:2c:e3:95:e9:19:ee:32:1c:0b:bd:0b:ec:7f:
da:7a:2b:98:e4:df:83:6c:27:c5:fc:cc:ac:59:86:
43:8f:7c:f9:8a:27:c9:99:c8:a4:c2:04:69:46:4d:
f6:0b:c6:c8:b8:2d:04:43:4e:da:a7:8e:c0:04:71:
0f:a9:ed:5b:0a:91:d6:83:bc:4e:de:e2:65:2d:ae:
c8:3e:05:71:a5:a6:1f:65:a1:9c:41:88:df:22:2a:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:D9:83:6A:D7:2B:4D:93:F7:02:14:FA:3D:03:12:85:8C:A1:4D
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/F-_Zg2rXK02T9wIU-j0DEoWMoU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1a90::-2a12:bec4:1a99:ffff:ffff:ffff:ffff:ffff
2a12:bec4:1b20::/44
Signature Algorithm: sha256WithRSAEncryption
ad:c9:f6:16:13:30:cd:88:3e:37:1d:ae:2c:da:70:08:3d:d4:
2b:0c:81:26:ef:97:b9:7a:d5:2d:ee:68:0c:26:f2:21:29:44:
0e:3e:07:02:bd:ae:3b:bb:f6:12:8a:65:d2:81:47:21:74:63:
65:b0:90:97:e8:f2:f1:4f:4c:48:20:2a:ed:68:04:fb:d3:a6:
44:96:e0:78:3b:59:5b:0b:f9:10:38:80:5d:1f:15:41:37:4a:
4f:22:17:86:05:dc:d5:c5:63:b1:6c:cc:56:5d:79:8b:db:bc:
72:4c:c9:e7:af:3f:7f:00:fb:e6:3e:b3:5b:fc:27:6f:a5:d5:
22:64:ef:bb:c2:08:e8:47:7e:2b:95:9c:e0:b7:17:83:6f:56:
df:28:fc:d7:c9:5d:62:ed:84:76:5e:c0:17:16:86:1b:6a:71:
16:09:6e:bc:34:4e:26:aa:de:22:63:5f:1e:38:dd:fd:81:a6:
20:8d:18:5a:33:3f:07:a9:14:5c:26:f5:1f:36:8d:ea:3a:62:
ad:00:a4:03:da:e9:b1:42:35:0e:a4:d9:c0:6b:0f:b3:19:a5:
4e:73:69:37:98:68:d2:b7:9c:7e:29:2d:17:b1:44:26:ac:e4:
9a:fb:e4:39:fd:48:4e:43:0c:26:08:57:58:66:5f:f9:d4:06:
e9:93:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:20:57 2025 by rpki-client