Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/96gp0YsqwS1r0qB88eFOXbLMaDY.roa
File: 96gp0YsqwS1r0qB88eFOXbLMaDY.roa (raw, json)
Hash identifier: iuy/FtuhW+Bqu3WsbW9oh9NGUHS0TifYnIXQzh/r4i0=
Subject key identifier: F7:A8:29:D1:8B:2A:C1:2D:6B:D2:A0:7C:F1:E1:4E:5D:B2:CC:68:36
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01952FCAEC75956D9AFB6396C816CCA4DFAA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/96gp0YsqwS1r0qB88eFOXbLMaDY.roa
Signing time: Sat 22 Feb 2025 22:33:02 +0000
ROA not before: Sat 22 Feb 2025 22:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216402
IP address blocks: 2a12:bec4:14a0::/44 maxlen: 44
2a12:bec4:14a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Feb 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2f:ca:ec:75:95:6d:9a:fb:63:96:c8:16:cc:a4:df:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 22 22:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7a829d18b2ac12d6bd2a07cf1e14e5db2cc6836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:71:f1:f5:03:35:58:d3:16:4a:71:de:54:
c8:1e:3b:3e:b8:2d:7f:0f:e4:76:54:9c:e2:61:c0:
53:e5:3c:f1:0b:68:69:ab:b1:6e:4e:b6:f9:c7:32:
fc:70:ac:28:f2:93:08:3c:96:75:4d:1c:04:f2:9c:
ec:d3:b3:97:b9:f5:55:a8:90:d1:32:1e:f7:4a:07:
c7:d0:ce:59:c3:36:d1:0a:99:a6:2d:d6:0e:60:47:
e6:f5:91:cc:73:88:17:6b:86:b8:89:d6:3b:45:e0:
97:a9:f3:1c:d8:0c:67:d4:f2:ed:e8:91:37:8b:22:
58:b3:00:09:9d:06:0d:c7:52:01:fc:03:5f:49:39:
c8:e3:af:23:65:22:47:68:72:98:5c:1c:ca:02:70:
f2:2e:ab:4e:10:7d:0e:57:ca:3d:80:9f:b3:69:0a:
19:85:87:1b:e3:6c:7e:d3:fd:a0:bb:6c:81:8d:55:
70:96:15:df:96:3a:85:6e:7d:d4:f9:12:29:25:5f:
e6:f7:8a:10:b0:90:c8:a5:a8:b8:7e:66:c0:75:d1:
2b:a1:07:18:5d:91:97:f7:19:77:46:67:6b:f1:2d:
6c:ce:84:dd:d0:95:76:b7:ef:26:91:7b:03:3e:46:
48:40:ad:78:c9:8b:51:3a:9c:92:b5:0e:5c:f0:b5:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:29:D1:8B:2A:C1:2D:6B:D2:A0:7C:F1:E1:4E:5D:B2:CC:68:36
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/96gp0YsqwS1r0qB88eFOXbLMaDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:14a0::/44
Signature Algorithm: sha256WithRSAEncryption
49:31:9d:9d:8a:92:74:e4:89:30:f5:38:a4:31:44:8d:8d:68:
26:a8:ad:66:30:df:df:e9:c1:a5:92:41:e2:1f:e9:e0:48:8f:
c9:ab:a0:a8:49:1d:bd:8b:6f:f6:0c:a7:99:6e:4c:88:ef:6f:
22:1e:56:46:be:9a:bb:db:1c:fe:2d:c7:e4:c1:8d:2d:60:db:
c8:38:a8:16:2c:d2:44:a5:f5:85:5d:71:6d:1c:a2:6d:02:81:
ed:8c:6d:d5:c4:51:13:73:2f:b8:e1:63:eb:d3:ed:ab:b3:79:
96:0b:31:0a:85:38:e4:a8:95:0a:bc:0c:0b:46:9c:3a:84:51:
ed:0f:1a:d3:b7:18:40:3e:a0:0f:12:c2:d9:f4:f2:76:d2:a9:
86:c7:11:9a:b8:51:55:48:da:70:d5:a8:c6:fe:ee:70:c6:6a:
10:7e:6c:be:9b:0c:ec:74:d7:8b:b1:2b:50:6a:df:68:81:fe:
b5:3a:94:f1:f1:71:f4:d8:be:ac:94:8e:59:2e:f8:cb:3e:eb:
ca:e9:d0:b6:33:2c:04:6a:61:45:4f:c5:cd:b0:14:62:a4:f5:
fe:cf:44:be:78:6a:bb:62:8f:48:9d:81:da:78:0f:ba:5d:e1:
94:2f:c6:36:98:2c:c9:73:80:00:72:5e:69:95:6b:ce:1c:6a:
e5:b6:78:ce
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZUvyux1lW2a+2OWyBbMpN+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMjIyMjIzMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2E4MjlkMThiMmFjMTJkNmJkMmEwN2NmMWUxNGU1ZGIyY2M2ODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnslx8fUDNVjTFkpx3lTIHjs+uC1/
D+R2VJziYcBT5TzxC2hpq7FuTrb5xzL8cKwo8pMIPJZ1TRwE8pzs07OXufVVqJDR
Mh73SgfH0M5ZwzbRCpmmLdYOYEfm9ZHMc4gXa4a4idY7ReCXqfMc2Axn1PLt6JE3
iyJYswAJnQYNx1IB/ANfSTnI468jZSJHaHKYXBzKAnDyLqtOEH0OV8o9gJ+zaQoZ
hYcb42x+0/2gu2yBjVVwlhXfljqFbn3U+RIpJV/m94oQsJDIpai4fmbAddEroQcY
XZGX9xl3Rmdr8S1szoTd0JV2t+8mkXsDPkZIQK14yYtROpyStQ5c8LVrewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPeoKdGLKsEta9KgfPHhTl2yzGg2MB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvOTZncDBZc3F3UzFyMHFCODhlRk9YYkxNYURZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBSg
MA0GCSqGSIb3DQEBCwUAA4IBAQBJMZ2dipJ05Ikw9TikMUSNjWgmqK1mMN/f6cGl
kkHiH+ngSI/Jq6CoSR29i2/2DKeZbkyI728iHlZGvpq72xz+LcfkwY0tYNvIOKgW
LNJEpfWFXXFtHKJtAoHtjG3VxFETcy+44WPr0+2rs3mWCzEKhTjkqJUKvAwLRpw6
hFHtDxrTtxhAPqAPEsLZ9PJ20qmGxxGauFFVSNpw1ajG/u5wxmoQfmy+mwzsdNeL
sStQat9ogf61OpTx8XH02L6slI5ZLvjLPuvK6dC2MywEamFFT8XNsBRipPX+z0S+
eGq7Yo9InYHaeA+6XeGUL8Y2mCzJc4AAcl5plWvOHGrltnjO
-----END CERTIFICATE-----
Generated at Wed May 14 17:15:13 2025 by rpki-client