Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AyFCV3BEGeTBoejMPM0ArMXw7wE.roa
File: AyFCV3BEGeTBoejMPM0ArMXw7wE.roa (raw, json)
Hash identifier: aH++3O1dezk/qS3CyzJVwyhCX1Pv2dNT0qtDGk1F1RQ=
Subject key identifier: 03:21:42:57:70:44:19:E4:C1:A1:E8:CC:3C:CD:00:AC:C5:F0:EF:01
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019696CB5857F04D50FFB88E0357D863E6FD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AyFCV3BEGeTBoejMPM0ArMXw7wE.roa
Signing time: Sat 03 May 2025 15:37:10 +0000
ROA not before: Sat 03 May 2025 15:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214971
IP address blocks: 2a06:de02:1a00::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 03 May 2025 15:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:cb:58:57:f0:4d:50:ff:b8:8e:03:57:d8:63:e6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 3 15:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03214257704419e4c1a1e8cc3ccd00acc5f0ef01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:12:5c:50:e6:f9:f6:a3:fe:52:6e:30:bc:
c7:48:64:70:8d:5d:bf:94:f5:0a:5a:a1:6a:da:59:
b2:b5:ab:d8:f4:f8:1c:0b:77:7a:d6:3d:5f:57:e8:
ff:c1:02:94:7b:53:d6:08:f8:28:4c:3d:b0:cd:1a:
68:2c:ce:85:d5:21:8e:35:b4:6c:00:0f:50:2e:c0:
ba:7d:37:9f:f5:7d:1b:27:47:18:ba:ca:ba:0b:3d:
ba:2d:72:6d:7b:00:7f:66:83:e3:d8:db:4c:df:ae:
15:5f:f7:9e:5c:77:e5:8e:3d:a7:a8:e0:32:29:af:
1c:90:58:cc:64:f6:08:94:08:6b:36:71:5e:c1:db:
99:80:01:ba:31:77:10:b6:fd:61:f8:87:31:b3:3d:
8e:0f:bd:3d:3e:6f:70:58:8c:46:0e:78:76:32:1a:
ba:0b:c8:d4:95:1b:7a:c5:8a:dc:ce:8e:52:c2:cf:
e0:ef:c0:7c:1a:05:d6:27:67:5d:af:13:87:31:98:
06:04:bb:23:69:07:ac:a3:31:1d:5a:e4:ef:f2:b0:
6d:d5:fb:e6:83:85:87:9c:a0:01:08:f0:a7:ee:10:
9e:df:1b:18:70:68:62:e1:1c:53:0e:37:0a:e0:d4:
fb:f5:63:cb:08:7f:bc:50:dc:ab:20:a5:e7:e1:1b:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:42:57:70:44:19:E4:C1:A1:E8:CC:3C:CD:00:AC:C5:F0:EF:01
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AyFCV3BEGeTBoejMPM0ArMXw7wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de02:1a00::/44
Signature Algorithm: sha256WithRSAEncryption
01:77:5c:83:d4:d2:10:3e:a5:50:5a:75:f0:a6:12:75:bd:20:
96:4d:a6:e9:69:7f:7c:25:f3:0a:90:67:a7:d6:99:1d:81:d0:
b0:97:cf:2c:68:d7:86:ba:4d:6a:9f:98:09:04:97:5a:da:37:
40:e0:1a:94:91:39:67:80:8e:20:7e:02:61:a3:b5:12:0a:e6:
de:03:fb:7f:7b:e1:af:43:99:73:7c:5f:03:35:f1:9c:ac:ce:
e6:4e:6a:ab:7a:6b:29:37:5b:6b:91:58:20:15:d8:0e:8b:f7:
08:70:4d:28:69:8a:da:0c:fe:fb:cb:c5:24:05:c0:9f:9b:da:
75:1e:a3:96:46:38:cc:07:e7:f3:e2:8f:17:12:f6:3a:d8:3c:
db:b5:9f:42:d0:71:6b:dc:08:07:c8:80:ef:f3:ad:34:0d:9a:
0f:12:da:e8:31:f9:09:13:a2:ae:10:0d:17:25:c6:f9:eb:a3:
78:a0:34:96:05:4b:b3:80:ea:9a:0e:32:bd:0b:df:c2:b3:8a:
63:6a:c4:c0:2f:99:5e:cd:98:04:e3:54:da:ed:1b:c6:61:d3:
01:59:f2:61:2f:00:06:ae:2e:81:cc:ae:ef:6d:90:62:cd:d3:
02:97:ce:9c:eb:92:41:cf:7d:50:52:b8:4f:8d:f0:bc:25:9e:
cb:9a:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:21:48 2025 by rpki-client