Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/ykkebhpgWD-_2f9q74phG5e_4sU.roa
File: ykkebhpgWD-_2f9q74phG5e_4sU.roa (raw, json)
Hash identifier: nRCAro621vdc1LAucbIiUMRZxj67OZflWPG+Mh4f3lg=
Subject key identifier: CA:49:1E:6E:1A:60:58:3F:BF:D9:FF:6A:EF:8A:61:1B:97:BF:E2:C5
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 0197D0AB15AE0ED3373F3EB2962793C0AD5A
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/ykkebhpgWD-_2f9q74phG5e_4sU.roa
Signing time: Thu 03 Jul 2025 14:22:42 +0000
ROA not before: Thu 03 Jul 2025 14:22:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 85.234.64.0/24 maxlen: 24
85.234.66.0/24 maxlen: 24
85.234.67.0/24 maxlen: 24
85.234.84.0/24 maxlen: 24
85.234.86.0/24 maxlen: 24
92.38.143.0/24 maxlen: 24
93.113.170.0/24 maxlen: 24
93.119.168.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:680::/44 maxlen: 44
2a03:90c0:7a0::/44 maxlen: 44
2a03:90c0:7b0::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 07 Jul 2025 15:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:ab:15:ae:0e:d3:37:3f:3e:b2:96:27:93:c0:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jul 3 14:22:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca491e6e1a60583fbfd9ff6aef8a611b97bfe2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:4a:fb:96:e1:7a:3c:01:24:46:21:38:7a:
8e:21:ac:c8:7e:6e:46:e8:40:38:a2:18:29:b2:b8:
ba:71:6e:c1:d4:5c:52:19:aa:7e:d8:02:33:b0:0e:
de:ae:0c:cf:a9:d2:51:30:61:cf:c3:6d:ad:9d:2d:
9f:16:fd:58:4f:40:ad:72:97:4c:60:17:b3:2d:1b:
89:4f:93:2d:2e:bc:a2:bd:74:19:b6:b8:18:6a:2c:
45:c0:65:8b:aa:80:ce:a7:f7:ac:e0:fd:db:fb:36:
ed:42:df:21:eb:df:53:37:07:48:94:ac:e8:9b:ff:
8a:ee:7a:f1:4e:6a:7d:9e:1c:ee:88:7e:fb:d1:85:
6e:ba:4b:c7:d2:75:09:86:0b:5d:5b:e9:0d:c5:84:
c8:1c:8d:aa:d6:9a:eb:73:9f:9e:de:fc:f7:ab:0a:
b2:59:ed:70:ef:5e:6f:32:03:3d:8e:70:4a:51:29:
46:09:6f:4c:a0:8f:db:04:b0:97:de:e6:27:83:f0:
8d:df:23:4d:99:fb:ce:55:03:17:37:b3:0f:aa:0e:
0c:ce:b2:a1:40:d8:ce:f3:58:80:01:1f:ae:a9:f6:
e5:36:8b:30:c0:fb:8d:57:b7:28:d0:4b:ef:de:6f:
aa:b2:ad:a1:8a:75:ec:fa:82:1a:c9:d7:7d:70:e2:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:49:1E:6E:1A:60:58:3F:BF:D9:FF:6A:EF:8A:61:1B:97:BF:E2:C5
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/ykkebhpgWD-_2f9q74phG5e_4sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.64.0/24
85.234.66.0/23
85.234.84.0/24
85.234.86.0/24
92.38.143.0/24
93.113.170.0/24
93.119.168.0/23
109.61.121.0/24
IPv6:
2a03:90c0:680::/44
2a03:90c0:7a0::/43
Signature Algorithm: sha256WithRSAEncryption
70:f1:6e:ea:39:73:11:e3:b8:0f:ef:5b:ff:52:13:15:1e:74:
bb:f5:98:b9:3f:cb:51:dc:cc:e5:28:fd:1f:fd:de:27:48:27:
7f:77:7f:78:d6:f1:59:9b:a1:b5:3d:1b:94:e8:3d:34:7e:fd:
a3:a5:e8:08:6a:b8:c4:fc:26:70:1c:f2:5e:19:c6:19:27:09:
3d:87:47:7c:b6:b3:9e:c5:4c:45:ab:92:b5:14:de:65:e4:0f:
81:a5:76:dc:c5:59:17:bd:97:33:d7:e4:05:4d:a6:b1:a9:37:
ab:9e:e6:47:13:d6:b3:cf:b4:68:dc:a5:e5:08:6d:ac:3f:08:
ac:d2:02:96:da:30:b8:79:72:ca:32:e1:38:01:d9:87:3f:09:
bd:e2:a1:50:62:14:c1:1f:5a:9f:50:79:77:5d:eb:2c:fd:74:
3e:2a:b6:dc:7e:87:b1:67:05:97:1a:39:d1:b3:d1:46:69:99:
ac:ba:fd:5f:ff:37:1c:73:37:79:b9:da:7b:ce:3c:e9:ae:de:
68:e1:a3:e9:95:d5:8f:26:77:fd:84:b1:bd:5b:36:00:ba:3c:
0c:eb:ef:7b:98:51:dd:8c:d7:01:d0:24:53:6b:92:eb:51:3d:
b9:d0:f1:e5:5b:13:48:24:96:d3:d7:bf:ce:c2:a7:ae:99:bd:
22:8c:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:20:15 2025 by rpki-client