Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yKDD6IaGv_iye6-pMJi6lvWb2yg.roa
File: yKDD6IaGv_iye6-pMJi6lvWb2yg.roa (raw, json)
Hash identifier: YJH8w8RYWE9KP9rQ3LZMiolV3jciFbe9xFBjGvA9kSI=
Subject key identifier: C8:A0:C3:E8:86:86:BF:F8:B2:7B:AF:A9:30:98:BA:96:F5:9B:DB:28
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0196D80FB6718E45474FFFB7FDB66EEA4C7E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yKDD6IaGv_iye6-pMJi6lvWb2yg.roa
Signing time: Fri 16 May 2025 07:47:10 +0000
ROA not before: Fri 16 May 2025 07:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 134.222.0.0/19 maxlen: 24
134.222.176.0/20 maxlen: 24
134.222.208.0/20 maxlen: 24
134.222.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 May 2025 08:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:0f:b6:71:8e:45:47:4f:ff:b7:fd:b6:6e:ea:4c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 16 07:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8a0c3e88686bff8b27bafa93098ba96f59bdb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:06:a0:4d:61:7a:68:5f:3d:34:7c:b7:b4:
6a:ec:12:5b:0a:e7:49:79:9f:e1:1f:43:f1:1c:b1:
f4:15:3b:f8:0e:48:6a:48:66:06:2a:01:88:7e:ae:
a7:16:67:30:63:6d:8a:d3:e3:d8:c9:5b:30:ec:df:
8e:fd:c8:d5:b3:e6:b2:f2:2d:58:a5:d9:73:77:b6:
a0:bb:d8:c1:00:0b:ea:ee:7e:df:7f:68:de:05:7c:
d0:20:1a:46:67:1b:cd:e9:64:20:fb:fd:37:7a:93:
a4:fe:38:78:ab:dc:91:5c:4a:ad:6a:a1:72:12:ee:
28:9f:c8:85:d1:2e:18:df:4d:ba:70:5e:a7:e5:19:
2a:00:1f:28:98:91:63:94:ac:c6:4a:d8:05:31:e7:
94:f1:ee:95:7b:ed:6f:44:b7:5b:d9:55:83:95:b9:
98:f9:60:7e:3e:d5:60:48:20:03:e8:a9:cb:99:27:
75:c7:83:b0:31:1e:23:8f:9b:32:eb:b0:35:98:2a:
4d:94:ae:63:ec:4d:64:42:e6:55:c2:54:e8:a3:c2:
54:2d:0f:7c:19:60:0a:f0:32:b4:69:07:4a:22:83:
6b:11:06:f5:7e:09:a1:52:71:4c:5c:21:2f:40:36:
b8:81:2a:06:5f:be:b9:46:de:09:80:66:46:f9:3c:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A0:C3:E8:86:86:BF:F8:B2:7B:AF:A9:30:98:BA:96:F5:9B:DB:28
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yKDD6IaGv_iye6-pMJi6lvWb2yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.222.0.0/19
134.222.176.0/20
134.222.208.0/20
134.222.240.0/20
Signature Algorithm: sha256WithRSAEncryption
01:49:6b:6a:01:ec:f8:c0:72:64:ce:ae:e6:78:2f:97:8b:b6:
f6:73:f5:67:f2:a7:0c:b0:4c:c1:c5:80:b3:49:87:45:ae:91:
20:9b:31:73:65:1d:19:ae:7e:b4:5a:4e:f3:8e:1c:5d:06:49:
bd:e5:04:0a:78:a6:77:e0:ba:50:0a:46:30:b7:96:bb:db:1c:
97:57:d7:e0:c4:d2:46:97:bf:0b:b2:38:ef:12:3b:7b:23:cd:
44:00:93:fe:c8:30:b2:28:48:6c:3c:3f:d2:9b:aa:16:b5:d4:
87:a3:c8:c8:7f:80:b0:0e:eb:db:7e:42:9d:de:af:1a:1b:09:
4a:05:bd:1a:d6:57:30:a0:b0:ad:93:8e:7d:9c:d7:aa:73:0e:
da:f7:52:b2:3f:ce:02:d1:8a:b9:0d:00:f4:78:7a:d1:d6:86:
0c:bd:c1:23:b2:6c:fc:74:a1:5e:3a:1d:fc:8a:b6:3d:7d:25:
00:01:1f:ae:12:7d:84:5d:51:99:24:da:18:a7:e1:5d:1f:4a:
3b:76:08:da:88:ea:97:cd:b3:95:b6:5a:ba:2d:98:ad:0f:9e:
91:ac:5f:6c:0f:ca:31:02:a9:0d:24:27:08:7a:e7:19:bb:bd:
ec:ce:02:85:fb:19:4e:8e:c0:49:e2:e9:57:dd:ca:24:0e:51:
0a:3b:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:47:55 2025 by rpki-client