Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/L12V61yt6AdmKqalz0w4wO99l3w.roa
File: L12V61yt6AdmKqalz0w4wO99l3w.roa (raw, json)
Hash identifier: tj8X1r7e6kGyjQML7kdEq/lZQywmctgZy4FuF+FJWrg=
Subject key identifier: 2F:5D:95:EB:5C:AD:E8:07:66:2A:A6:A5:CF:4C:38:C0:EF:7D:97:7C
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 0196C442E40346FFB4558CFEF2B37A1AB14C
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/L12V61yt6AdmKqalz0w4wO99l3w.roa
Signing time: Mon 12 May 2025 11:30:40 +0000
ROA not before: Mon 12 May 2025 11:30:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215837
IP address blocks: 2a13:5682:400::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 May 2025 14:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:42:e4:03:46:ff:b4:55:8c:fe:f2:b3:7a:1a:b1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: May 12 11:30:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f5d95eb5cade807662aa6a5cf4c38c0ef7d977c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:7a:5a:e7:ea:04:6d:58:71:ca:f8:40:e3:
ee:8d:fb:2f:a5:14:52:51:7a:b3:6c:38:55:22:b6:
9d:1a:38:f3:8d:fc:aa:b3:63:ef:e6:72:66:43:76:
57:63:36:51:d5:89:eb:be:92:ee:5d:ab:59:1e:f9:
87:21:31:31:1c:b3:6a:a1:62:fb:0b:a4:e9:a7:78:
6d:f7:03:8b:ff:f6:1f:52:bb:da:55:27:de:f4:95:
ff:a1:98:38:e9:f1:51:2d:18:d8:a9:74:c4:be:1d:
82:90:72:c1:b0:91:0e:71:cb:ae:1e:85:b9:53:a4:
dc:27:da:a2:93:be:97:00:2e:f3:55:c4:1b:38:39:
de:a9:31:4b:30:2c:bc:b7:d5:5a:76:ba:6a:3f:f1:
48:af:52:83:b4:ec:f1:76:e6:75:69:57:45:75:f2:
d0:a0:33:ce:99:63:8a:e1:7f:91:07:3f:86:e1:cc:
aa:09:30:a1:f4:e0:75:e4:23:f4:79:5d:3b:c6:94:
39:76:5c:80:42:e6:8f:70:85:1e:fd:3a:af:c7:28:
f8:27:9b:28:7a:a7:f3:a7:61:a1:cc:67:ca:77:bc:
b5:36:63:0f:10:96:6a:bb:c2:69:b1:12:02:26:f8:
c1:30:9a:d6:1d:f8:41:cb:cf:fb:87:c6:8a:e3:8e:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:95:EB:5C:AD:E8:07:66:2A:A6:A5:CF:4C:38:C0:EF:7D:97:7C
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/L12V61yt6AdmKqalz0w4wO99l3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5682:400::/44
Signature Algorithm: sha256WithRSAEncryption
8a:d2:cd:ac:fc:6e:30:a5:3a:ae:ff:59:7d:5d:3e:d4:ec:d5:
00:29:1a:8a:84:34:24:44:f0:8b:60:ef:ed:ff:e7:c4:eb:73:
85:ab:38:2c:f0:94:37:2d:dc:57:96:07:40:e8:5d:34:ab:70:
ef:f7:34:1f:7a:47:18:b9:a5:f8:21:b3:c5:06:cc:17:45:3c:
1e:7f:1a:b6:44:b1:0a:0c:36:a4:d3:28:c9:67:a5:75:6b:0a:
31:00:3a:57:14:ef:83:47:89:56:f8:25:d9:9a:8c:2d:75:ae:
7c:da:af:c2:fc:8c:cd:ae:eb:eb:67:a5:0e:ac:43:c6:e4:9d:
79:d3:83:56:91:14:c9:58:10:40:47:11:55:5c:1e:8b:d5:2e:
31:89:68:22:12:bc:eb:6e:1f:08:9a:19:61:c7:70:f2:84:4e:
89:19:e7:22:9f:7e:c3:f1:6f:6b:c4:4c:68:e9:21:98:7b:12:
dc:74:e4:12:da:77:fa:ca:d2:9f:52:c9:6e:29:0c:cd:bb:19:
9d:ff:e2:70:0c:ae:1b:17:30:35:03:72:bb:e1:1d:19:2b:a3:
11:aa:60:b4:e4:ba:37:9a:60:e3:46:8c:48:8d:bd:2e:e4:57:
1c:79:05:04:bc:e5:1d:0f:2d:d5:40:68:21:c2:69:3c:7e:8d:
08:ec:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:08 2025 by rpki-client