Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/yr10TJ6nPYBZxsfTgLdGMLPJTjE.roa
File: yr10TJ6nPYBZxsfTgLdGMLPJTjE.roa (raw, json)
Hash identifier: wC0tuPjSvZC/JNqu3KGCWc7h9h2uM1lY5WgAZB5pIPs=
Subject key identifier: CA:BD:74:4C:9E:A7:3D:80:59:C6:C7:D3:80:B7:46:30:B3:C9:4E:31
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01977DCC1B5FED768E73F98B466DF750F44E
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/yr10TJ6nPYBZxsfTgLdGMLPJTjE.roa
Signing time: Tue 17 Jun 2025 12:10:17 +0000
ROA not before: Tue 17 Jun 2025 12:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.136.37.0/24 maxlen: 24
194.31.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:cc:1b:5f:ed:76:8e:73:f9:8b:46:6d:f7:50:f4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jun 17 12:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cabd744c9ea73d8059c6c7d380b74630b3c94e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:58:38:ff:7f:75:96:62:eb:59:32:bf:be:
e0:2b:38:0d:4c:f8:a7:f4:29:97:05:dc:97:20:a3:
6c:f8:0c:fe:75:60:83:47:41:cc:64:be:49:91:e8:
30:5f:31:78:1c:09:3a:31:06:36:c8:33:23:d0:b3:
48:f6:51:ed:29:29:b7:ae:69:cb:e1:28:4e:62:72:
43:5b:91:64:49:7b:42:a1:4e:e4:4f:09:e2:35:17:
a0:fb:25:5b:e5:fb:f4:66:64:57:0a:dd:5f:ca:91:
75:b0:ea:43:53:00:d7:ca:eb:39:30:24:86:b6:c5:
e3:1d:e4:f6:29:17:d7:40:79:4f:03:e7:ac:f4:12:
7c:5c:00:91:82:50:95:67:51:89:6e:37:b7:19:6e:
b0:62:50:d5:fe:9e:72:bd:a8:c5:b6:11:1d:ed:62:
f0:44:b2:05:16:74:de:c5:2b:a6:a3:60:6e:cd:b7:
65:cc:6d:0b:6d:a2:8a:8d:e9:00:64:07:6b:79:00:
6c:12:0d:2c:f7:69:61:50:1c:a2:e0:38:bf:20:e5:
3d:dd:97:39:cb:30:15:98:77:ba:1c:bc:c9:1a:1b:
5d:b1:52:90:da:07:34:05:cc:9d:0c:2d:91:83:cd:
ce:b1:b4:0e:8d:ef:f7:ce:2e:4d:dd:ca:38:92:e8:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BD:74:4C:9E:A7:3D:80:59:C6:C7:D3:80:B7:46:30:B3:C9:4E:31
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/yr10TJ6nPYBZxsfTgLdGMLPJTjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.37.0/24
194.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f2:00:2b:a4:0a:a3:ad:8d:e5:c8:0e:27:32:db:f5:e6:cd:
76:9c:b6:7c:f7:b0:7c:93:35:dc:30:93:24:76:7c:82:21:da:
7f:54:25:bd:bf:e4:5d:f5:b4:88:88:88:af:c4:80:bd:d8:47:
95:a3:ef:66:2b:c0:c7:87:1d:2c:56:95:9f:89:c7:14:e3:b1:
94:db:28:ce:ca:9a:b2:41:14:92:b6:c5:31:7d:e5:70:4b:89:
7c:0f:49:51:0f:db:89:18:1e:0e:79:cf:50:b9:c2:01:96:4a:
af:c3:a7:a0:52:25:1d:3a:3f:70:39:bf:67:17:36:b1:6c:f5:
ab:ca:9b:8a:4f:5c:4b:99:7f:4c:97:f3:89:64:af:c1:f4:67:
56:aa:35:78:84:6f:5d:a9:45:cb:cd:87:44:a3:d7:41:18:8f:
5d:c0:e6:95:bc:36:c6:70:ac:40:42:b7:3b:0c:97:54:54:54:
10:e4:9b:56:49:64:46:16:bf:2d:e2:ff:c3:bb:97:f3:45:46:
95:ed:1c:d0:81:ae:a2:0a:c8:29:56:09:ac:c8:ac:af:9b:cc:
09:82:ec:8f:c3:17:e1:3f:41:1b:16:13:63:b8:e0:d0:61:67:
58:ad:13:04:0b:ec:82:33:5c:77:3b:c7:1c:50:02:7b:ae:ed:
85:d5:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:30:50 2025 by rpki-client