Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Yb3WHtpOdnoN_MZV4_2AmclnPQs.roa
File: Yb3WHtpOdnoN_MZV4_2AmclnPQs.roa (raw, json)
Hash identifier: BBbViqmHYFeE3zGrH0EzlGl7VEmYv96lZjwD2FCL2Oc=
Subject key identifier: 61:BD:D6:1E:DA:4E:76:7A:0D:FC:C6:55:E3:FD:80:99:C9:67:3D:0B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019841DA0ABB8FBA9576AB9DAA87F6FCBECD
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Yb3WHtpOdnoN_MZV4_2AmclnPQs.roa
Signing time: Fri 25 Jul 2025 13:51:05 +0000
ROA not before: Fri 25 Jul 2025 13:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 62.60.163.0/24 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Jul 2025 10:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:da:0a:bb:8f:ba:95:76:ab:9d:aa:87:f6:fc:be:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 25 13:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61bdd61eda4e767a0dfcc655e3fd8099c9673d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:f7:cf:d6:be:23:23:cc:df:e1:18:ea:0c:
e1:c0:54:71:d3:d5:1b:fc:04:ec:8a:7a:5e:29:68:
40:b1:d1:db:26:f2:3c:d3:8a:fa:69:34:f8:b9:c8:
b5:af:89:49:d2:e4:6b:13:38:c3:f7:ea:28:f4:e4:
f8:32:2a:da:86:f5:63:c4:a2:e8:d6:af:77:34:7b:
11:a9:a5:b3:ec:7a:64:a0:13:2d:7d:49:d1:6e:38:
3e:ef:d5:63:9c:bd:00:1e:a0:f2:f2:d2:5b:87:f5:
c5:73:df:7a:0e:6a:4c:58:41:10:f8:7b:15:cf:87:
b4:66:7b:e6:b4:3d:4f:6d:e1:e4:77:30:32:93:73:
6c:47:c2:93:c9:6e:87:35:da:34:c8:8f:67:54:85:
6a:2e:65:c4:90:e3:a1:9d:78:7a:eb:3c:16:6b:2f:
31:4a:09:f0:e4:a0:5f:0a:ca:a7:dd:43:e5:f0:a6:
34:86:06:e0:17:81:1e:3c:ee:1f:09:8b:16:05:ab:
d2:ae:9d:2b:fc:45:ef:15:f1:67:a4:41:46:1f:d4:
d2:40:b3:e6:6a:98:c8:3a:d0:86:a5:52:ab:c0:5e:
fc:c0:11:41:8d:90:03:c5:ff:b4:5f:f4:bc:37:e5:
c3:16:5c:09:70:dc:cd:11:66:7d:86:d1:54:04:e9:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:D6:1E:DA:4E:76:7A:0D:FC:C6:55:E3:FD:80:99:C9:67:3D:0B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Yb3WHtpOdnoN_MZV4_2AmclnPQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.163.0/24
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:96:a8:c9:b4:70:6e:fa:c5:df:19:94:90:7e:db:54:3d:02:
d4:d2:77:f7:16:dc:62:97:02:45:6d:c3:ad:8e:9b:12:67:f3:
ec:55:f9:5a:81:1d:0c:2e:9d:56:4f:4a:48:02:8c:4b:43:87:
5e:c6:9c:e1:aa:cf:28:80:62:a7:01:74:ff:15:de:63:a2:e0:
04:3d:c7:33:d1:dc:63:f5:bf:21:2e:e8:d0:af:2c:e1:47:26:
26:87:6a:66:73:79:98:1b:a6:88:ae:b3:6e:57:cf:e3:01:04:
f4:1f:bd:64:07:6d:62:5a:10:ee:e0:e7:cc:dc:98:92:b5:2e:
8b:b8:e6:77:a9:8f:99:e4:5f:a8:0d:f0:d0:ae:14:08:d8:de:
2b:c9:0f:e4:66:4e:c1:ad:3e:60:82:f8:62:55:00:11:7d:6b:
98:8c:1d:5e:ea:58:64:b4:4b:af:54:05:56:55:1c:b3:f1:dd:
3a:ab:10:2f:5d:d7:0d:e5:80:05:c7:16:7b:e7:b9:f1:f1:b5:
a9:b7:28:4a:d4:f9:6c:05:93:ac:03:80:d5:0d:0d:e2:92:96:
e4:c0:03:1e:7d:1b:06:e8:b5:7a:ba:c0:fd:ce:41:7c:a7:a8:
e8:75:e9:a8:ed:0c:ad:1b:00:fb:c0:3b:92:a1:11:56:ee:e6:
08:51:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:46:07 2025 by rpki-client