Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e-Y-vSsbAvl0NzPkBq4bFztjbtM.roa
File: e-Y-vSsbAvl0NzPkBq4bFztjbtM.roa (raw, json)
Hash identifier: jr/jZu+d2+80Jabjnet1giXemBoORM9WB2JqhWTL0VE=
Subject key identifier: 7B:E6:3E:BD:2B:1B:02:F9:74:37:33:E4:06:AE:1B:17:3B:63:6E:D3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194E12A205CDB5072964D2EFE9651AE9F18
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e-Y-vSsbAvl0NzPkBq4bFztjbtM.roa
Signing time: Fri 07 Feb 2025 16:07:01 +0000
ROA not before: Fri 07 Feb 2025 16:07:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213641
IP address blocks: 2a0e:97c0:680::/44 maxlen: 48
2a0e:97c0:680::/48 maxlen: 48
2a0e:97c0:681::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Feb 2025 11:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:2a:20:5c:db:50:72:96:4d:2e:fe:96:51:ae:9f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 7 16:07:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be63ebd2b1b02f9743733e406ae1b173b636ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:19:d0:32:36:d1:84:67:a4:30:28:0a:9e:
6f:ba:04:bb:51:0d:2e:92:74:fb:24:1b:01:28:12:
ae:68:03:80:f3:51:1c:cb:b3:ce:0a:8d:1e:18:f6:
82:67:23:f9:a4:88:59:0a:93:d5:ab:04:ac:45:ed:
01:43:95:16:43:7c:5c:9b:07:64:07:91:ba:b3:8d:
03:92:61:b9:ae:66:fb:d6:02:f0:74:6d:69:ac:d4:
e5:d8:ab:cc:fa:a3:8c:b8:2f:98:cd:80:22:ce:e8:
71:d6:0c:47:56:47:cf:fc:3d:03:24:d8:42:b4:bd:
15:68:b2:3d:b1:5c:d5:8a:26:cc:28:2a:c4:01:05:
74:fb:12:f6:c4:90:b0:71:f4:66:2e:67:6b:db:46:
ad:ef:11:61:41:6c:ec:7d:36:80:39:fb:0d:15:04:
4f:3d:4b:ad:26:ee:4d:da:6f:bf:fc:b8:57:05:ed:
ea:29:92:15:f8:1a:2a:2d:07:8c:68:b7:83:bd:4c:
9f:01:1d:d0:24:79:7e:bb:22:41:c8:e1:e5:40:fe:
ea:ce:e1:da:e5:0c:ff:30:5e:64:69:50:79:9d:dd:
92:68:71:7b:c0:79:10:2a:07:5c:66:ea:c1:d5:09:
17:7a:13:33:5c:77:af:15:21:12:3c:eb:cd:04:f4:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E6:3E:BD:2B:1B:02:F9:74:37:33:E4:06:AE:1B:17:3B:63:6E:D3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e-Y-vSsbAvl0NzPkBq4bFztjbtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:680::/44
Signature Algorithm: sha256WithRSAEncryption
45:ce:4d:06:9f:56:e1:7f:01:26:e9:db:5f:f2:af:08:1d:13:
5d:e8:ab:8e:a7:28:60:4a:68:c5:4e:aa:0d:5c:87:3f:8a:73:
85:7e:84:32:0e:08:d7:ea:1a:c6:98:f5:09:a5:3a:ee:58:3e:
07:b2:2d:0a:66:d1:74:e1:a0:cf:21:9a:9b:fa:ef:3a:60:92:
55:7d:08:03:3a:a7:4d:d6:65:89:ab:cd:ed:cb:fa:50:ce:47:
81:7e:f7:f3:15:1a:ef:03:a3:ab:98:52:e9:1c:39:b8:0c:f9:
68:b5:c4:f0:2e:06:18:0c:a1:3f:66:dc:a6:e9:34:a1:20:ae:
cb:b0:17:f8:55:75:21:13:fc:a8:fa:4b:7e:b0:53:3b:16:3e:
b2:1b:68:5e:58:a7:af:87:58:32:66:38:33:16:48:7c:32:e6:
f4:b5:43:fa:de:2b:14:c3:a6:18:4b:7e:8b:3c:63:a8:8f:92:
8b:3f:70:34:2d:d9:c9:9d:9a:12:1d:9b:29:a8:83:fd:f8:3d:
c2:ce:8e:50:3d:f4:56:00:0b:73:90:96:3e:27:38:37:51:3e:
54:8d:ee:06:08:e9:bf:b0:57:08:de:47:a3:3c:97:a7:bc:08:
a4:f6:ef:31:93:d5:af:90:20:0e:a0:85:e6:37:c5:b4:8a:91:
8c:04:7a:3d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZThKiBc21Bylk0u/pZRrp8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMjA3MTYwNzAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmU2M2ViZDJiMWIwMmY5NzQzNzMzZTQwNmFlMWIxNzNiNjM2ZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof8Z0DI20YRnpDAoCp5vugS7UQ0u
knT7JBsBKBKuaAOA81Ecy7POCo0eGPaCZyP5pIhZCpPVqwSsRe0BQ5UWQ3xcmwdk
B5G6s40DkmG5rmb71gLwdG1prNTl2KvM+qOMuC+YzYAizuhx1gxHVkfP/D0DJNhC
tL0VaLI9sVzViibMKCrEAQV0+xL2xJCwcfRmLmdr20at7xFhQWzsfTaAOfsNFQRP
PUutJu5N2m+//LhXBe3qKZIV+BoqLQeMaLeDvUyfAR3QJHl+uyJByOHlQP7qzuHa
5Qz/MF5kaVB5nd2SaHF7wHkQKgdcZurB1QkXehMzXHevFSESPOvNBPRscwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHvmPr0rGwL5dDcz5AauGxc7Y27TMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZS1ZLXZTc2JBdmwwTnpQa0JxNGJGenRqYnRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAaA
MA0GCSqGSIb3DQEBCwUAA4IBAQBFzk0Gn1bhfwEm6dtf8q8IHRNd6KuOpyhgSmjF
TqoNXIc/inOFfoQyDgjX6hrGmPUJpTruWD4Hsi0KZtF04aDPIZqb+u86YJJVfQgD
OqdN1mWJq83ty/pQzkeBfvfzFRrvA6OrmFLpHDm4DPlotcTwLgYYDKE/Ztym6TSh
IK7LsBf4VXUhE/yo+kt+sFM7Fj6yG2heWKevh1gyZjgzFkh8Mub0tUP63isUw6YY
S36LPGOoj5KLP3A0LdnJnZoSHZspqIP9+D3Czo5QPfRWAAtzkJY+Jzg3UT5Uje4G
COm/sFcI3kejPJenvAik9u8xk9WvkCAOoIXmN8W0ipGMBHo9
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:31 2025 by rpki-client