Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yqKYxIhs4_a7XxA8Ln39Kov6OVw.roa
File: yqKYxIhs4_a7XxA8Ln39Kov6OVw.roa (raw, json)
Hash identifier: Z2mBvzdWPj1+7+E4VeV0f4BFViCCyCKuWoA2l/j8IWM=
Subject key identifier: CA:A2:98:C4:88:6C:E3:F6:BB:5F:10:3C:2E:7D:FD:2A:8B:FA:39:5C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0196F65BD2A406E0D26498392CE085516C87
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yqKYxIhs4_a7XxA8Ln39Kov6OVw.roa
Signing time: Thu 22 May 2025 04:58:54 +0000
ROA not before: Thu 22 May 2025 04:58:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 09:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:5b:d2:a4:06:e0:d2:64:98:39:2c:e0:85:51:6c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 22 04:58:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa298c4886ce3f6bb5f103c2e7dfd2a8bfa395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:d4:ac:95:e6:30:10:64:f0:42:77:b2:08:
f7:ac:c3:44:4c:02:b7:02:c9:f1:2a:40:47:59:dd:
aa:76:86:b1:9c:0a:d5:66:c9:37:fa:b9:d4:92:c3:
d0:98:3b:49:a1:10:a0:29:ec:f4:dd:ba:b4:15:49:
1c:3e:35:41:75:0e:43:24:ff:86:92:af:f6:0a:1a:
50:10:23:dd:71:7c:47:56:7c:f4:4d:3c:ca:2a:f8:
c4:06:77:39:2e:ab:71:9d:2a:cf:9b:c2:3c:29:5a:
c3:d8:4f:df:b7:9f:1d:2d:81:7b:45:06:ce:f9:ba:
1d:e5:09:e8:5e:58:64:79:fd:57:1f:1d:6a:25:ce:
fb:d8:7b:3b:9e:b5:61:cd:dd:7c:f0:30:53:dd:d0:
40:db:04:fa:55:5a:8c:6a:8a:3c:10:28:90:1c:af:
9f:e8:16:64:bb:e2:78:e3:92:aa:98:d6:19:6d:60:
8f:86:bf:ee:af:00:b4:42:65:2d:96:9d:d2:9e:8a:
41:81:43:2e:68:cd:94:2b:38:4b:0c:ad:fc:6d:3f:
0a:5e:5c:dc:29:1a:92:56:9b:c5:d4:20:2d:5c:ec:
52:ad:11:f4:f6:96:47:7b:2a:52:9d:ec:f8:9a:1c:
3a:61:77:4f:09:78:0b:54:24:89:dd:c6:0e:c9:c9:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:98:C4:88:6C:E3:F6:BB:5F:10:3C:2E:7D:FD:2A:8B:FA:39:5C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yqKYxIhs4_a7XxA8Ln39Kov6OVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.48.0-92.71.59.255
92.71.62.0/23
213.201.154.0/23
213.201.166.0/23
213.201.174.0/23
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.197.255
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:cc:9b:e6:0d:07:6f:8b:e3:c0:5c:2f:5c:c2:65:83:41:1c:
19:8b:c8:c0:67:5d:86:61:27:f5:aa:d2:90:ca:c5:a4:90:43:
00:51:88:53:12:f1:9c:13:a8:eb:0e:7e:df:1e:6a:ec:b1:e9:
e2:71:34:0a:3c:91:fb:36:82:d2:7f:74:b9:ed:be:b4:b3:a9:
34:6c:4d:a1:16:02:40:62:52:90:53:55:bb:2e:41:42:c0:db:
51:8c:4d:13:cf:30:fb:83:c7:d8:0d:c6:21:34:d1:e3:45:e5:
40:b6:e1:31:cc:cf:33:2d:56:04:59:0d:7a:d1:d2:e6:96:3c:
c6:e0:ef:b9:f5:1c:4f:ca:a1:f5:f1:90:fe:1c:b8:7f:8c:cc:
1f:a1:71:1e:e6:10:2f:6d:ab:c9:5a:33:47:4e:98:9e:5a:d7:
4d:8b:ed:53:e5:c5:bf:67:ea:40:00:10:9e:a4:24:21:fa:c1:
5d:96:98:0d:bb:68:99:f6:86:14:ed:52:cf:93:73:8c:6a:ba:
e4:d9:2a:63:5f:15:2d:37:50:68:c2:57:95:86:03:25:41:51:
49:ab:a5:d0:8b:5a:c9:99:02:af:8f:1a:1a:46:bd:f3:ed:23:
f4:0a:dd:ec:14:49:08:d0:9b:6e:ab:55:a2:5c:20:90:55:dd:
37:0a:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:24:32 2025 by rpki-client