Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ykreDALetBZxfHgWHLv0Qinnhl0.roa
File: ykreDALetBZxfHgWHLv0Qinnhl0.roa (raw, json)
Hash identifier: opFT8N1GCBXseB4+JtVqd7jxsqhVLjBpEYCh5ZsNhlo=
Subject key identifier: CA:4A:DE:0C:02:DE:B4:16:71:7C:78:16:1C:BB:F4:42:29:E7:86:5D
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0197F57A1724A8401741A796A2A9C711F1D8
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ykreDALetBZxfHgWHLv0Qinnhl0.roa
Signing time: Thu 10 Jul 2025 17:55:08 +0000
ROA not before: Thu 10 Jul 2025 17:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 170.168.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 11:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:7a:17:24:a8:40:17:41:a7:96:a2:a9:c7:11:f1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 10 17:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca4ade0c02deb416717c78161cbbf44229e7865d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:02:4c:69:4f:12:e1:ec:a4:a8:fb:b7:ac:
9d:1f:68:b5:4a:ee:bc:5d:a8:73:76:24:e9:86:59:
aa:57:34:4a:26:f3:78:ba:40:a4:4d:a4:cd:4a:3b:
e6:72:eb:96:e6:2b:01:75:d8:b9:c0:86:da:c6:1c:
50:b8:24:dc:9f:2f:ec:b0:b0:3b:72:08:35:dc:d2:
38:80:6d:cf:d1:f7:08:ef:d3:04:4a:a7:4a:39:3a:
8e:1d:f5:21:23:32:cd:e7:e2:43:83:9f:d4:03:ff:
2f:0e:35:49:59:bf:e1:46:b3:df:5b:4d:57:c6:dc:
71:31:f8:fa:63:76:2c:ce:c0:73:38:cf:a1:e5:56:
69:d0:ca:7b:12:ba:a0:76:f2:f4:3e:4f:37:88:61:
03:6f:50:49:0c:fd:b5:a9:e1:dc:a8:db:df:3d:8b:
f0:17:32:7a:92:c1:ef:e1:4a:10:b0:65:90:72:6f:
00:53:c4:5e:aa:47:c0:63:e6:63:fb:58:d7:0a:b0:
68:3d:ce:fa:cd:0b:1a:94:52:f5:a8:87:ff:fa:30:
80:dc:f9:af:c6:3d:3a:03:d3:c5:1e:fa:fd:1f:c7:
20:2a:cd:d2:e6:1a:8b:f9:62:46:c4:48:a8:8b:6a:
f7:0b:c5:26:53:8c:a7:a3:74:78:5b:b7:d3:a3:62:
70:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:DE:0C:02:DE:B4:16:71:7C:78:16:1C:BB:F4:42:29:E7:86:5D
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ykreDALetBZxfHgWHLv0Qinnhl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:94:d0:cf:d9:63:22:43:88:09:dc:f2:ea:da:4f:45:22:bb:
f6:45:47:9c:72:b8:dd:f4:7a:de:f9:20:af:5e:41:f2:69:a3:
75:3f:f4:84:0f:5e:c8:1c:86:1f:9f:a8:8d:a2:e7:cc:2b:19:
41:81:c6:03:49:db:e8:d9:32:9e:99:30:a0:d9:ae:ec:38:20:
61:20:c0:5e:2a:cc:67:15:2e:17:9e:8b:ad:6b:54:25:a6:26:
09:66:ca:f9:a2:7d:c1:15:50:da:a6:3b:f3:5c:e9:26:ef:c1:
29:7a:7c:2b:bd:5b:b6:0d:63:48:e0:83:31:b6:4e:b6:2f:7e:
1d:eb:b7:0c:52:f0:10:4f:34:bc:8b:0c:e4:b2:5c:3b:9f:ea:
b0:e4:e6:d2:55:27:99:3d:a1:e8:a2:ee:d3:71:33:97:3b:cc:
6b:3c:54:8f:27:e9:e9:34:d2:b8:30:b0:2e:2c:42:be:ad:81:
7d:91:91:cb:29:91:07:7b:bd:df:f6:bb:35:19:b8:67:f9:3d:
f3:e1:6d:8f:f3:5a:49:3d:0b:ea:07:a9:6e:23:5b:d5:61:0e:
4b:c4:7d:66:4a:0f:02:da:4c:6b:bc:3c:0d:82:ac:5a:0c:39:
ff:9c:b9:e3:2b:8f:85:e1:f0:6b:a7:df:34:3d:00:82:65:ea:
a4:1e:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:56 2025 by rpki-client