Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/ycSf2Pwj-M16Nl0t9peAvL65Jb4.roa
File: ycSf2Pwj-M16Nl0t9peAvL65Jb4.roa (raw, json)
Hash identifier: BqDRXTViL8569MwCZhPeaKWjUMsN1Pt0kq5c2fspsyY=
Subject key identifier: C9:C4:9F:D8:FC:23:F8:CD:7A:36:5D:2D:F6:97:80:BC:BE:B9:25:BE
Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial: 0197C02D97C74C26BFD1FB4252CF893131C5
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/ycSf2Pwj-M16Nl0t9peAvL65Jb4.roa
Signing time: Mon 30 Jun 2025 09:31:42 +0000
ROA not before: Mon 30 Jun 2025 09:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210872
IP address blocks: 193.168.8.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 05:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:2d:97:c7:4c:26:bf:d1:fb:42:52:cf:89:31:31:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Validity
Not Before: Jun 30 09:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c49fd8fc23f8cd7a365d2df69780bcbeb925be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:20:5e:1a:0e:b3:7d:05:cf:7a:8c:75:74:
43:b8:be:21:44:84:9f:86:17:8c:86:ef:15:33:fd:
c0:3b:1a:af:1b:09:e5:9a:a8:92:ef:2a:d8:7c:13:
7d:51:f9:b2:d8:d8:12:92:f0:83:a2:74:16:10:2f:
57:2e:f2:d6:96:d2:5b:d2:4e:69:8b:a8:cf:b9:cf:
ab:cf:ca:3a:ca:fb:b8:be:9f:0f:60:7c:43:81:a7:
da:65:a8:00:4d:f8:2a:20:ca:b0:5c:07:b5:66:fc:
1f:d4:6a:00:f3:bf:4d:39:78:fc:3e:52:8d:e5:be:
1a:c9:ef:e7:80:54:89:80:28:e9:e1:7c:5e:57:74:
7a:4f:fc:ac:09:b1:33:04:dd:ee:9b:20:35:b1:5a:
7f:20:d2:59:54:83:8d:30:ae:f8:cb:8f:25:13:d2:
6d:9f:d4:95:dc:2c:be:96:b1:50:88:d9:c3:e7:ce:
76:8b:59:e8:da:9b:dd:20:3c:e0:e9:38:65:cc:29:
6e:a2:93:ce:07:cc:ae:d0:9e:e3:ab:46:24:62:4f:
56:da:c4:c1:87:fb:9f:92:39:c8:b9:fb:5e:d0:3b:
47:05:6b:ef:3f:3a:24:3e:ea:97:db:39:5d:2e:bb:
ff:b3:94:0a:c8:31:17:ed:73:7b:18:27:d0:51:3c:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C4:9F:D8:FC:23:F8:CD:7A:36:5D:2D:F6:97:80:BC:BE:B9:25:BE
X509v3 Authority Key Identifier:
keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/ycSf2Pwj-M16Nl0t9peAvL65Jb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:1d:4f:2d:b7:b6:66:86:14:39:87:01:98:34:25:9d:46:05:
ac:52:1e:90:29:f5:a9:ae:9e:ea:92:07:18:74:fd:22:6d:55:
39:b6:3a:dd:8d:59:de:d1:40:7e:4a:0a:5a:f9:1e:60:66:d1:
72:99:35:32:36:63:81:3e:96:d9:97:e8:47:c5:d4:d1:47:62:
4a:5a:21:8e:ba:98:86:27:b2:b4:47:d8:7e:d9:24:f6:10:36:
af:a2:10:98:86:24:5e:5a:c6:7d:1c:6f:06:4b:e4:88:fe:99:
e6:6c:66:65:ba:b3:68:86:58:45:30:7c:36:57:33:e0:4d:a5:
bd:a8:aa:06:ef:64:34:32:77:e4:21:f1:be:9b:ea:a5:70:0d:
df:af:7f:9b:29:38:81:dd:bb:f8:63:d9:cd:82:d5:aa:af:13:
30:9d:f4:67:7e:4e:06:c9:7d:20:cf:a2:a0:66:c2:47:08:ca:
ed:2e:32:02:f3:75:54:14:1e:88:f6:2b:99:2c:7a:e0:d6:b2:
a0:12:4c:e8:4f:11:e8:b8:ff:ba:f8:39:f1:99:d4:03:34:53:
c3:ee:bc:c8:28:85:b6:68:ab:c0:25:56:c8:cf:d2:76:8e:41:
cf:47:80:e9:1e:46:2d:a8:35:37:aa:a1:ad:d8:fe:b1:31:8d:
f1:0f:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:23:21 2025 by rpki-client