Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xzQ0FFVtDnJw6VgcmgjAQJxBXjM.roa
File: xzQ0FFVtDnJw6VgcmgjAQJxBXjM.roa (raw, json)
Hash identifier: 6+nF7vc1N85ZZ46X5+28fkd6o7FoYyVmLvEqS6WJUyI=
Subject key identifier: C7:34:34:14:55:6D:0E:72:70:E9:58:1C:9A:08:C0:40:9C:41:5E:33
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019722F6485D77A895F62D6C229D57A8ECFE
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xzQ0FFVtDnJw6VgcmgjAQJxBXjM.roa
Signing time: Fri 30 May 2025 20:50:55 +0000
ROA not before: Fri 30 May 2025 20:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 2a12:bec4:1520::/48 maxlen: 48
2a12:bec4:1521::/48 maxlen: 48
2a12:bec4:1651::/48 maxlen: 48
2a12:bec4:1652::/48 maxlen: 48
2a12:bec4:1653::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 09:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:f6:48:5d:77:a8:95:f6:2d:6c:22:9d:57:a8:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 30 20:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7343414556d0e7270e9581c9a08c0409c415e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:0f:a2:e9:8c:58:1a:cd:6a:af:48:43:2e:
10:e3:4c:d4:f5:a7:f8:8a:32:bf:8c:19:88:c8:62:
d4:8e:5f:29:34:0f:5b:ff:f0:97:27:2c:d8:4a:01:
95:14:7e:c7:27:96:39:36:e8:2e:a0:02:9b:75:c2:
7b:ab:e7:3b:21:52:23:e2:e9:68:e6:60:f4:1e:1d:
57:49:e5:86:a4:57:dd:ce:ff:13:e1:14:a5:c6:4d:
1c:8c:54:89:68:86:03:86:d9:da:39:85:93:c6:b4:
41:2f:9d:c2:90:51:74:0d:52:7f:42:29:eb:28:8d:
9a:33:83:9a:48:76:bb:92:29:5c:14:72:01:05:3d:
6b:8c:b6:74:37:3f:28:c7:f0:1d:bf:15:50:f5:c4:
1d:34:5d:21:1e:5f:79:51:f5:97:12:a9:6d:d2:86:
3d:32:e9:0f:cc:ad:74:a4:ea:2b:2f:14:dc:f7:1e:
6f:8e:f1:89:f4:fa:3f:33:7f:13:36:e0:3d:15:16:
3b:6a:0c:b0:23:7b:4d:03:1a:a5:40:cb:6c:28:8c:
33:47:53:40:13:c6:ec:a1:61:2c:66:3c:c4:8a:14:
24:da:e2:5f:ef:3c:b5:9d:88:50:cc:72:62:3f:40:
b4:a0:d3:d3:72:83:e4:48:76:fe:c1:97:ed:c1:ed:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:34:34:14:55:6D:0E:72:70:E9:58:1C:9A:08:C0:40:9C:41:5E:33
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xzQ0FFVtDnJw6VgcmgjAQJxBXjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::/47
2a12:bec4:1651::-2a12:bec4:1653:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:44:31:1d:bf:2a:4e:bb:81:b9:d3:9f:11:ca:f8:33:81:2b:
a1:5e:8b:c4:a5:b8:b5:b9:74:38:49:cc:ef:11:ac:83:e1:a0:
a8:f7:5e:7f:73:e7:c0:70:12:5d:66:12:01:f3:d8:12:19:54:
04:4c:92:79:34:25:bd:b1:9a:12:ba:91:69:bf:bd:0c:4b:30:
88:f2:c9:e4:57:13:04:1c:6b:fa:0a:83:ea:81:52:03:5f:08:
91:65:31:23:9d:9e:a6:02:9e:45:d1:ab:b7:dd:65:cc:b5:ec:
23:60:ae:c9:ef:40:91:b3:0f:c4:26:a5:b5:c7:05:02:4f:3f:
0f:72:1c:64:a1:ca:6a:80:13:2a:18:4e:00:41:ed:38:b7:b6:
d2:9c:f6:6d:28:e7:72:e2:77:fb:07:71:f6:52:1f:e3:33:57:
a7:f1:f1:c8:17:25:77:4d:eb:c0:e2:4f:d0:42:37:67:8b:6b:
26:f1:27:2b:75:35:7d:b6:b4:ed:00:e4:f8:2a:54:9f:8d:f6:
d1:22:7d:e2:53:55:4d:89:20:a4:d4:ac:f8:fd:7c:82:dd:c8:
a6:26:90:af:7a:76:eb:8f:d3:8f:29:23:2b:0c:f0:79:95:76:
a4:6c:f4:09:c5:3f:d6:3d:5f:59:be:5b:71:f5:8a:b3:22:e8:
65:c3:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:21:55 2025 by rpki-client