Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/yq_JLqSaO3uYPZr_-HSDtCr-lMU.roa
File: yq_JLqSaO3uYPZr_-HSDtCr-lMU.roa (raw, json)
Hash identifier: lSG5fS2c1voPWK6dCzd4a2e3QS2G+CbJkfwpY9dwKEU=
Subject key identifier: CA:AF:C9:2E:A4:9A:3B:7B:98:3D:9A:FF:F8:74:83:B4:2A:FE:94:C5
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 0195ADEC7607DE78CC26315E7E78C808B69E
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/yq_JLqSaO3uYPZr_-HSDtCr-lMU.roa
Signing time: Wed 19 Mar 2025 10:21:49 +0000
ROA not before: Wed 19 Mar 2025 10:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 2a12:e680::/48 maxlen: 48
2a12:e680:1::/48 maxlen: 48
2a12:e680:2::/48 maxlen: 48
2a12:e680:3::/48 maxlen: 48
2a12:e680:4::/48 maxlen: 48
2a12:e680:5::/48 maxlen: 48
2a12:e680:6::/48 maxlen: 48
2a12:e680:7::/48 maxlen: 48
2a12:e680:8::/48 maxlen: 48
2a12:e680:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Mar 2025 20:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:ec:76:07:de:78:cc:26:31:5e:7e:78:c8:08:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: Mar 19 10:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caafc92ea49a3b7b983d9afff87483b42afe94c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:66:d3:c7:5b:74:1e:0e:3b:23:30:ac:f4:
fb:0f:ca:67:c0:e9:4e:e9:9b:e0:61:ec:74:0c:a0:
28:39:8e:54:71:00:1f:38:27:2b:4c:ab:81:73:21:
09:3e:1f:e3:d1:46:f0:fc:a9:d3:24:78:11:bf:83:
5e:ca:b7:71:b3:3f:c8:c6:b5:4e:4c:07:b0:16:67:
88:88:c7:aa:97:04:a6:c6:9c:30:2f:29:8b:67:6f:
bf:7e:a7:42:42:0b:60:6f:c9:a8:a3:01:79:df:fc:
5d:a3:c9:90:32:02:56:99:c6:f4:d3:f6:06:da:b2:
84:d1:0a:22:2b:9c:f0:15:de:63:24:00:98:2a:51:
a4:7d:e3:a3:02:6a:57:54:4c:c3:7f:9c:dd:95:4a:
a3:86:da:b0:9b:56:79:8b:29:30:c5:d9:64:eb:fa:
83:17:02:02:9f:74:ba:c6:57:b2:fe:f2:62:b0:0a:
4a:af:95:c8:39:b2:4d:97:dc:c8:3a:fb:e5:0a:4d:
7c:3d:9d:67:3b:7c:b6:74:92:24:a6:07:ee:d8:16:
11:e0:03:ed:04:41:47:1c:47:17:fd:6e:6e:99:7c:
79:8d:a9:3a:38:7a:2c:7a:37:aa:ea:c4:49:73:7d:
35:ef:3a:b6:fb:eb:bf:be:3a:8e:54:3e:b6:3c:04:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:C9:2E:A4:9A:3B:7B:98:3D:9A:FF:F8:74:83:B4:2A:FE:94:C5
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/yq_JLqSaO3uYPZr_-HSDtCr-lMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e680::-2a12:e680:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:b6:05:c8:09:63:b5:49:72:ad:39:6f:96:fc:38:5a:ea:a7:
10:d2:d7:43:6e:d4:8f:9a:e0:39:25:d4:59:4c:9d:6a:7a:1a:
9b:14:00:8f:4b:f8:f5:9e:54:fa:e1:d4:1d:d6:6d:1b:f3:f7:
b6:fd:0f:08:67:11:99:5a:93:43:d7:2e:b7:c9:b6:9d:e7:7a:
37:5b:70:27:90:ac:de:07:be:ea:4f:1b:52:9a:9e:98:3a:54:
79:ba:da:a0:df:c5:8f:dc:2c:25:2e:32:84:67:12:ea:c2:ca:
7a:93:d9:80:c4:4c:96:0c:3b:25:34:f5:58:58:0f:ab:83:81:
2a:90:e1:c1:16:32:c0:82:aa:63:87:a7:76:09:49:ba:70:52:
36:71:6e:4c:70:c8:df:8b:40:84:51:1d:8c:91:79:8b:69:28:
0d:85:97:49:ff:d0:49:5a:af:dc:cb:37:b9:ba:2b:67:b1:1d:
89:01:78:97:8f:ae:5c:e6:d0:cf:90:4a:d3:1b:2f:13:b4:50:
39:59:b2:85:29:b0:c7:20:d8:06:b6:82:0d:81:dd:72:31:c6:
4a:51:12:0c:d7:da:86:c8:05:0d:2d:69:cc:4f:0e:55:16:02:
35:c6:2f:ac:c6:2a:83:63:ce:05:57:ff:8d:09:12:56:29:4b:
ab:f3:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:32:36 2025 by rpki-client