Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/ygt7jp15mB1XjUqi5F94t_jMUYo.roa
File: ygt7jp15mB1XjUqi5F94t_jMUYo.roa (raw, json)
Hash identifier: kMNv4CI9QnXOWx7VDh1ZKvZ/pt2jJes6ywUNkfMqUSQ=
Subject key identifier: CA:0B:7B:8E:9D:79:98:1D:57:8D:4A:A2:E4:5F:78:B7:F8:CC:51:8A
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019515263DEF63289B3E7D3E35AC208EC4BF
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/ygt7jp15mB1XjUqi5F94t_jMUYo.roa
Signing time: Mon 17 Feb 2025 18:23:02 +0000
ROA not before: Mon 17 Feb 2025 18:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0d:cdc3::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Mar 2025 09:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:26:3d:ef:63:28:9b:3e:7d:3e:35:ac:20:8e:c4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Feb 17 18:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca0b7b8e9d79981d578d4aa2e45f78b7f8cc518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:90:d7:20:60:18:c2:23:69:56:dd:04:0f:
d7:9e:4d:24:5a:39:77:65:f7:1e:d7:45:8f:f9:29:
91:a0:06:bb:e8:e8:c8:f9:32:ad:89:69:1d:ea:11:
17:ec:f5:b8:bb:5e:6c:b7:00:d7:6d:21:61:8b:14:
f2:93:99:81:a4:7c:2d:fb:74:fb:f6:5f:7a:bd:d4:
68:3b:a9:30:a5:e4:05:30:22:e7:ff:2a:c5:69:e9:
03:68:51:e5:8d:fe:8e:20:43:ab:cf:af:89:b1:74:
fa:d3:b2:ec:4f:ce:3c:b6:f2:e0:20:d1:0a:13:71:
19:cc:e3:ae:c2:02:08:8c:c0:91:2a:fa:e4:ba:d3:
79:59:e1:f7:a2:77:0a:29:7c:50:91:3a:e5:a9:be:
34:38:c5:bf:a1:3c:a4:d7:e7:ce:08:b1:50:10:28:
68:51:97:31:6c:c8:e7:bb:bf:00:e4:e7:90:6f:7b:
75:2f:6a:71:c5:5e:65:3b:3b:cd:a8:43:5e:de:35:
07:3c:4c:bc:4f:2f:c2:83:f8:31:63:9a:f5:34:4b:
be:0a:9c:fd:2c:9f:64:dd:87:0d:53:93:0e:30:db:
87:c0:61:4c:d3:f5:74:8e:53:b8:94:03:c4:e1:71:
c6:8a:94:1c:0a:5b:27:73:81:17:9c:be:31:1a:4a:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0B:7B:8E:9D:79:98:1D:57:8D:4A:A2:E4:5F:78:B7:F8:CC:51:8A
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/ygt7jp15mB1XjUqi5F94t_jMUYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:cdc3::/32
Signature Algorithm: sha256WithRSAEncryption
8e:84:96:72:dd:d2:b8:60:bd:08:0f:c8:70:2a:fd:e2:e8:2b:
4e:55:b9:9c:c6:5e:c0:5b:8c:e1:18:85:67:0b:2f:eb:8f:87:
80:53:58:67:50:70:3e:3b:a2:21:f2:01:fe:f7:9c:db:4f:dc:
26:c9:31:10:e4:ee:4d:70:5a:f6:4d:a8:ba:8a:4e:67:e6:3b:
2e:c1:13:f6:2c:3a:35:12:1b:db:bc:30:ad:e3:74:a1:e6:aa:
f8:36:e3:c5:ea:2d:50:a1:d6:85:13:bc:d5:ac:2d:14:24:e7:
a1:9c:cb:a9:53:10:30:9e:4c:ab:84:05:04:f0:d7:5e:d8:4b:
3f:2a:23:01:c1:25:f1:94:5d:31:34:3a:1e:2d:64:04:0b:e8:
be:da:99:b3:0f:a4:b1:18:9d:2c:bf:fc:a6:25:5b:df:91:09:
77:ae:18:87:f8:16:9c:60:24:bb:46:c3:51:80:00:ae:5b:63:
9d:d4:a3:fc:82:23:4f:f7:fa:0a:d7:66:a5:f0:d0:51:91:37:
8c:25:39:5a:6f:25:e7:c1:06:a0:c8:35:e7:d4:87:88:6b:32:
00:51:cb:e6:29:fc:40:66:c5:c4:eb:ab:1a:6b:e8:56:bb:8e:
12:80:e9:a3:2b:c8:fc:59:0a:07:6c:34:4f:86:34:3e:43:82:
a5:cb:5a:ca
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZUVJj3vYyibPn0+NawgjsS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjUwMjE3MTgyMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTBiN2I4ZTlkNzk5ODFkNTc4ZDRhYTJlNDVmNzhiN2Y4Y2M1MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XyQ1yBgGMIjaVbdBA/Xnk0kWjl3
Zfce10WP+SmRoAa76OjI+TKtiWkd6hEX7PW4u15stwDXbSFhixTyk5mBpHwt+3T7
9l96vdRoO6kwpeQFMCLn/yrFaekDaFHljf6OIEOrz6+JsXT607LsT848tvLgINEK
E3EZzOOuwgIIjMCRKvrkutN5WeH3oncKKXxQkTrlqb40OMW/oTyk1+fOCLFQECho
UZcxbMjnu78A5OeQb3t1L2pxxV5lOzvNqENe3jUHPEy8Ty/Cg/gxY5r1NEu+Cpz9
LJ9k3YcNU5MOMNuHwGFM0/V0jlO4lAPE4XHGipQcClsnc4EXnL4xGkqrvwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMoLe46deZgdV41KouRfeLf4zFGKMB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEveWd0N2pwMTVtQjFYalVxaTVGOTR0X2pNVVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg3NwzAN
BgkqhkiG9w0BAQsFAAOCAQEAjoSWct3SuGC9CA/IcCr94ugrTlW5nMZewFuM4RiF
Zwsv64+HgFNYZ1BwPjuiIfIB/vec20/cJskxEOTuTXBa9k2ouopOZ+Y7LsET9iw6
NRIb27wwreN0oeaq+DbjxeotUKHWhRO81awtFCTnoZzLqVMQMJ5Mq4QFBPDXXthL
PyojAcEl8ZRdMTQ6Hi1kBAvovtqZsw+ksRidLL/8piVb35EJd64Yh/gWnGAku0bD
UYAArltjndSj/IIjT/f6CtdmpfDQUZE3jCU5Wm8l58EGoMg159SHiGsyAFHL5in8
QGbFxOurGmvoVruOEoDpoyvI/FkKB2w0T4Y0PkOCpctayg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:54 2025 by rpki-client