Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YQL-qMGNoWZgMB0hxYZAfZ-Fpno.roa
File: YQL-qMGNoWZgMB0hxYZAfZ-Fpno.roa (raw, json)
Hash identifier: 8bz0mFjZy/3Er+xC3fLRLvp55fZ9awCgwx22cK8pUqg=
Subject key identifier: 61:02:FE:A8:C1:8D:A1:66:60:30:1D:21:C5:86:40:7D:9F:85:A6:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197E45EBF9F93116F069198F686237F93B0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YQL-qMGNoWZgMB0hxYZAfZ-Fpno.roa
Signing time: Mon 07 Jul 2025 10:11:44 +0000
ROA not before: Mon 07 Jul 2025 10:11:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44436
IP address blocks: 31.59.128.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Jul 2025 06:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:5e:bf:9f:93:11:6f:06:91:98:f6:86:23:7f:93:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 10:11:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6102fea8c18da16660301d21c586407d9f85a67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:29:f3:f6:25:bd:12:56:c2:8c:89:c8:08:
01:aa:6f:f6:4a:d9:2d:9c:63:15:bc:67:e6:a0:9b:
2d:c4:a7:8b:f0:6d:bd:64:d0:99:dc:8b:dd:0b:13:
cc:86:72:4b:78:07:27:c7:4c:24:75:b6:fe:e8:1b:
2b:06:89:a5:2d:4e:75:b2:05:d5:7f:15:0d:3a:ae:
73:d0:6c:c7:c3:81:58:49:f7:38:34:e7:45:38:97:
28:79:83:7e:b8:e2:7d:24:d2:89:34:5f:f8:d5:20:
8b:dc:4d:48:82:11:47:67:6d:73:64:99:31:fa:0e:
c7:e4:b3:56:5c:02:eb:70:e2:5f:c2:b1:04:2a:98:
b9:67:4c:51:21:1b:5f:b1:00:71:fe:95:87:2f:43:
53:1c:39:b3:49:8c:6d:af:db:f9:e0:df:0a:5b:ed:
ec:96:78:37:39:69:f4:01:cf:f8:7c:46:40:e4:3d:
ab:dd:14:87:c8:fc:c1:8e:f1:a0:b4:9d:47:cd:fc:
55:0d:62:40:93:bf:d3:80:20:f8:a7:b5:01:69:e1:
39:c3:9d:5a:bc:83:33:a3:51:84:73:58:4b:47:1e:
86:ac:78:1f:fa:93:1d:71:c3:34:55:2a:16:67:0c:
e9:78:ef:ab:ed:25:da:d2:f4:9a:b3:05:23:56:01:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:FE:A8:C1:8D:A1:66:60:30:1D:21:C5:86:40:7D:9F:85:A6:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YQL-qMGNoWZgMB0hxYZAfZ-Fpno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.128.0/24
94.183.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2e:cf:c5:06:4a:2a:65:53:fe:e8:0f:fb:6d:c7:c6:08:9e:
19:76:b2:b0:52:1a:97:b1:f9:c1:f4:ca:1b:3a:1b:90:13:32:
a2:79:86:0d:bc:f9:7c:80:a3:20:e3:fe:4e:0a:9e:41:7a:13:
93:f8:26:54:42:58:9c:f7:99:d1:03:53:8a:3a:20:34:17:59:
3d:11:f4:84:b9:ae:5c:3a:43:13:e1:72:5d:17:39:52:81:26:
70:fd:86:0b:7b:33:5c:df:03:3a:55:99:4f:9e:0a:8a:ba:94:
8e:b2:9e:83:b2:d7:23:41:95:55:54:ad:f1:51:b2:cb:69:a2:
85:94:88:13:38:41:bc:fd:64:42:c7:f6:89:d0:da:81:9d:68:
88:7f:86:43:90:4d:b3:e5:9a:81:0a:4c:4b:4f:a8:a5:ed:b6:
ce:6e:5a:95:e5:5e:9e:4e:cc:68:df:1a:dd:8a:50:95:47:d2:
c5:b4:95:0b:9e:ab:c3:2d:cc:1a:84:40:6f:04:9b:47:3b:cc:
1b:ee:d0:d3:a2:fc:7d:6c:07:53:a5:19:55:85:75:03:7d:86:
7a:c0:e7:95:15:6b:ba:75:ec:0e:14:18:82:6b:0d:b7:45:82:
fa:9e:20:80:06:fd:af:b6:f3:f7:13:0e:8b:f2:b8:38:93:14:
f0:90:fb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:47:02 2025 by rpki-client