Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/kyaO2rDrA08YKGcTLhfwOvEIoeM.roa
File: kyaO2rDrA08YKGcTLhfwOvEIoeM.roa (raw, json)
Hash identifier: V9kqbaViTJJEdyjHeg26oPrnJQEbnFJqjP7xiFtBSOU=
Subject key identifier: 93:26:8E:DA:B0:EB:03:4F:18:28:67:13:2E:17:F0:3A:F1:08:A1:E3
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 01973EB9DDC94244630E704D0B9B620FE55B
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/kyaO2rDrA08YKGcTLhfwOvEIoeM.roa
Signing time: Thu 05 Jun 2025 06:14:17 +0000
ROA not before: Thu 05 Jun 2025 06:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213481
IP address blocks: 192.100.143.0/24 maxlen: 24
2001:67c:458::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 05 Jun 2025 16:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:b9:dd:c9:42:44:63:0e:70:4d:0b:9b:62:0f:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Jun 5 06:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93268edab0eb034f182867132e17f03af108a1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:23:7d:51:9a:98:91:67:6a:c0:a5:2f:73:
1a:bf:80:cc:cb:a8:e1:b6:55:0a:d5:f0:bc:96:55:
42:7e:b8:a7:9b:18:16:c1:bd:93:86:96:e8:06:78:
9c:4f:c4:9a:57:0f:f9:b6:40:bf:e6:87:2f:4b:98:
b9:b6:91:6d:85:bd:7f:20:b5:26:14:b8:36:3b:a3:
1f:87:fb:21:c8:45:19:30:33:08:c9:0f:85:82:43:
81:f4:cb:62:ba:5c:86:bd:4d:7c:b0:16:d5:23:71:
01:ad:d4:c6:2c:60:02:dc:f9:76:4f:4c:45:b2:05:
55:c5:e9:56:56:f5:21:3b:18:5b:32:38:df:dd:d6:
18:bd:9b:5b:4f:56:85:54:89:78:54:af:99:36:be:
05:4d:bc:12:f7:53:18:a9:04:4a:d9:70:bd:8d:c0:
66:a5:89:bd:c2:08:8f:9e:32:ed:01:36:0a:19:d7:
22:2f:62:8d:4b:82:79:f0:13:44:fe:55:72:44:69:
4c:e6:7a:a0:7e:89:fc:8f:ca:f9:41:a4:0e:7a:ab:
a6:bc:bb:76:96:c4:b0:bb:d1:ed:b2:60:7b:ef:49:
dc:c0:e4:99:67:d8:bd:9e:24:64:7f:7f:ca:50:67:
3a:98:ce:57:2a:e3:ad:1d:2b:02:48:ce:3d:10:87:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:26:8E:DA:B0:EB:03:4F:18:28:67:13:2E:17:F0:3A:F1:08:A1:E3
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/kyaO2rDrA08YKGcTLhfwOvEIoeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.143.0/24
IPv6:
2001:67c:458::/48
Signature Algorithm: sha256WithRSAEncryption
aa:8e:17:07:9b:6e:bf:82:2b:2c:20:5c:72:67:53:d6:5a:da:
c0:50:62:f0:a2:f7:8e:4e:c2:07:70:7b:f1:e4:cc:06:c6:a3:
6c:36:53:76:ac:37:80:e5:cc:df:0b:09:86:b1:6b:8f:ef:1d:
df:c4:e7:90:0b:f2:5e:9c:e2:9d:3d:08:9b:89:36:f1:50:de:
c4:04:c5:0a:f8:dd:4a:89:c2:3c:7c:39:e0:5e:04:51:be:7b:
84:9f:d3:c3:93:51:fa:a6:9d:ba:2e:f4:cb:58:3b:69:cf:9a:
00:fa:a2:0a:f2:f2:2f:d5:af:fc:aa:e8:8f:84:81:66:69:53:
ac:b3:27:12:e9:e6:24:7e:86:e9:c2:8e:c4:bf:61:5b:c9:d0:
d3:e6:37:f8:09:ab:a2:58:0c:94:61:e6:b7:99:4f:03:ed:df:
a5:16:c8:e2:af:b1:d7:6e:66:63:f3:2b:ce:59:60:94:24:d5:
8d:35:69:73:9e:75:0a:12:c4:7e:b1:cc:a7:ae:b1:48:3a:8d:
f0:98:05:22:35:89:ab:ed:3e:bd:d7:54:dc:77:ac:af:b7:17:
2b:96:34:b0:56:af:bc:4f:45:c0:84:1f:be:d8:fc:ba:9d:74:
8c:0c:80:2e:8c:76:6a:17:06:bc:3e:af:b7:16:66:16:f1:e9:
a7:db:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:09:06 2025 by rpki-client