Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/tHywSz0CkGSW24C4YI7BJ8nRapc.roa
File: tHywSz0CkGSW24C4YI7BJ8nRapc.roa (raw, json)
Hash identifier: eGZseLrGX4Xk6v336jgq0fgtUEPQulP4VssOyFn9EnU=
Subject key identifier: B4:7C:B0:4B:3D:02:90:64:96:DB:80:B8:60:8E:C1:27:C9:D1:6A:97
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 01963FFF7E0F0E22C91BA2940F4D9328A5A1
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/tHywSz0CkGSW24C4YI7BJ8nRapc.roa
Signing time: Wed 16 Apr 2025 19:07:10 +0000
ROA not before: Wed 16 Apr 2025 19:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a11:8443::/32 maxlen: 32
2a11:b780::/32 maxlen: 32
2a11:b785::/32 maxlen: 32
2a11:c441::/32 maxlen: 32
2a11:d082::/32 maxlen: 32
2a11:d085::/32 maxlen: 32
2a12:4c01::/32 maxlen: 32
2a12:4c06::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Apr 2025 17:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:ff:7e:0f:0e:22:c9:1b:a2:94:0f:4d:93:28:a5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Apr 16 19:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b47cb04b3d02906496db80b8608ec127c9d16a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:81:42:87:c4:b0:9f:d5:72:31:42:0f:f9:
4e:d5:92:6e:a0:61:e8:51:fc:de:53:74:7f:a2:86:
d6:3b:63:f4:ac:b6:d6:60:22:ab:59:5f:e0:6b:5a:
cd:1d:de:a5:0e:3a:ce:ca:ba:77:c3:34:6e:13:33:
58:7a:59:27:b6:03:4f:99:63:4a:2d:0a:ff:9a:79:
5f:1f:31:f8:90:fe:9e:21:76:40:56:2a:d4:c6:74:
55:b9:1a:32:85:41:18:ca:ef:65:fd:85:7d:b8:b9:
30:15:8e:10:ce:d5:7c:f9:1a:24:89:98:a3:d0:d5:
fd:b0:05:88:6d:b8:51:cc:f1:8c:5d:99:d6:3d:3a:
2d:79:6b:14:42:2e:c2:00:fb:08:fd:43:96:f3:2b:
aa:f2:9b:b4:88:de:b2:67:2b:85:fe:61:21:52:e9:
4d:c5:de:b7:e2:37:3d:af:0f:c4:f3:c5:a8:20:e2:
5d:42:ce:4f:48:42:05:49:fd:df:0d:f0:70:86:d8:
63:0f:86:d0:98:06:3d:15:b1:df:37:3e:c2:13:82:
98:33:0e:42:e1:80:0d:e4:d9:b1:ff:11:7a:45:71:
32:5a:29:96:39:90:4d:2f:81:e9:18:d9:ec:b8:87:
23:78:fe:6b:dd:42:a3:26:66:04:f8:e2:40:6a:08:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:B0:4B:3D:02:90:64:96:DB:80:B8:60:8E:C1:27:C9:D1:6A:97
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/tHywSz0CkGSW24C4YI7BJ8nRapc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8443::/32
2a11:b780::/32
2a11:b785::/32
2a11:c441::/32
2a11:d082::/32
2a11:d085::/32
2a12:4c01::/32
2a12:4c06::/32
Signature Algorithm: sha256WithRSAEncryption
52:60:72:d9:3a:c5:82:d4:55:c8:6a:f7:00:db:90:ff:06:a7:
0a:be:04:e0:72:0e:be:88:f9:5a:2f:96:fa:ff:1c:ae:03:02:
5c:f5:a1:e7:2b:f9:63:5c:00:dc:bb:42:d7:8f:13:4b:c2:b5:
93:2e:71:5e:85:96:23:6e:83:6e:1f:77:b5:9b:7e:f3:5f:0b:
2e:dc:94:c0:65:ec:87:cc:9d:3b:b5:a9:eb:d6:0b:f8:de:f6:
30:ae:40:ee:97:48:9e:c3:99:77:94:e4:f5:3a:16:cc:a8:e2:
d4:3a:f5:8d:59:a9:2b:a4:bb:51:4f:46:d5:d0:a4:9f:0d:7f:
76:7e:3b:d8:67:8d:6b:db:e9:ad:0e:70:f1:52:04:28:01:f5:
2f:da:8b:71:75:9d:4e:b5:08:da:fc:86:44:d6:3f:45:f2:05:
a1:92:74:a9:36:aa:66:d1:59:59:d2:f1:9d:b4:40:d5:ce:d9:
41:93:c7:d8:6e:46:95:bb:5e:5c:48:15:25:89:0d:9b:87:25:
98:be:18:d1:8e:53:16:11:58:e7:2a:5b:3f:f6:40:5b:bc:18:
8f:d2:4e:64:2d:68:3f:27:26:ef:62:01:f4:83:65:d7:2f:a0:
1e:52:fb:b7:85:c6:76:2a:5e:08:22:bb:06:e1:d9:98:98:b0:
cd:7d:4b:af
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZY//34PDiLJG6KUD02TKKWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2
MDJmYmYwHhcNMjUwNDE2MTkwNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDdjYjA0YjNkMDI5MDY0OTZkYjgwYjg2MDhlYzEyN2M5ZDE2YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBqBQofEsJ/VcjFCD/lO1ZJuoGHo
UfzeU3R/oobWO2P0rLbWYCKrWV/ga1rNHd6lDjrOyrp3wzRuEzNYelkntgNPmWNK
LQr/mnlfHzH4kP6eIXZAVirUxnRVuRoyhUEYyu9l/YV9uLkwFY4QztV8+RokiZij
0NX9sAWIbbhRzPGMXZnWPToteWsUQi7CAPsI/UOW8yuq8pu0iN6yZyuF/mEhUulN
xd634jc9rw/E88WoIOJdQs5PSEIFSf3fDfBwhthjD4bQmAY9FbHfNz7CE4KYMw5C
4YAN5Nmx/xF6RXEyWimWOZBNL4HpGNnsuIcjeP5r3UKjJmYE+OJAaggBSwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFLR8sEs9ApBkltuAuGCOwSfJ0WqXMB8GA1UdIwQY
MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt
NTUxMDQxNzNiMTgwLzEvdEh5d1N6MENrR1NXMjRDNFlJN0JKOG5SYXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw
LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwUAKhGEQwMF
ACoRt4ADBQAqEbeFAwUAKhHEQQMFACoR0IIDBQAqEdCFAwUAKhJMAQMFACoSTAYw
DQYJKoZIhvcNAQELBQADggEBAFJgctk6xYLUVchq9wDbkP8Gpwq+BOByDr6I+Vov
lvr/HK4DAlz1oecr+WNcANy7QtePE0vCtZMucV6FliNug24fd7WbfvNfCy7clMBl
7IfMnTu1qevWC/je9jCuQO6XSJ7DmXeU5PU6Fsyo4tQ69Y1ZqSuku1FPRtXQpJ8N
f3Z+O9hnjWvb6a0OcPFSBCgB9S/ai3F1nU61CNr8hkTWP0XyBaGSdKk2qmbRWVnS
8Z20QNXO2UGTx9huRpW7XlxIFSWJDZuHJZi+GNGOUxYRWOcqWz/2QFu8GI/STmQt
aD8nJu9iAfSDZdcvoB5S+7eFxnYqXggiuwbh2ZiYsM19S68=
-----END CERTIFICATE-----
Generated at Sun May 11 15:12:17 2025 by rpki-client