Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/yQyczMtMjvLC3W6OSsDS3pTo9Ds.roa
File: yQyczMtMjvLC3W6OSsDS3pTo9Ds.roa (raw, json)
Hash identifier: VdzxOsTe62d7yE+2VwqmK3hDLL39I0xGhTRHaQGvAQs=
Subject key identifier: C9:0C:9C:CC:CB:4C:8E:F2:C2:DD:6E:8E:4A:C0:D2:DE:94:E8:F4:3B
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 01953CB4E4719184782347B05A4BBBE669DB
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/yQyczMtMjvLC3W6OSsDS3pTo9Ds.roa
Signing time: Tue 25 Feb 2025 10:44:02 +0000
ROA not before: Tue 25 Feb 2025 10:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a05:bd47:1234::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Feb 2025 16:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:b4:e4:71:91:84:78:23:47:b0:5a:4b:bb:e6:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Feb 25 10:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c90c9ccccb4c8ef2c2dd6e8e4ac0d2de94e8f43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:df:8b:e0:44:bc:7d:31:70:73:c7:ef:27:
4b:e5:72:ac:eb:f4:05:bc:b9:71:fb:8f:64:c2:36:
69:03:f8:7b:72:ce:13:a9:ad:15:6f:c8:9e:85:7a:
55:5d:ed:66:96:68:0f:7b:89:7c:d8:f2:8e:41:ba:
80:b4:65:15:a4:35:21:39:4c:04:7b:13:6d:18:bc:
da:be:ac:5a:9b:49:cf:66:3c:cd:82:36:f7:3d:00:
06:60:13:70:5a:c6:4f:10:36:3e:02:43:18:1b:18:
c4:a9:60:ae:02:97:4d:6d:eb:d7:a2:b0:d2:9b:9e:
3c:e2:d5:06:6c:bc:90:82:71:c1:20:fd:67:28:a4:
ef:a4:e4:e0:3c:1d:60:ac:a4:6e:89:93:dc:16:b4:
a6:da:79:89:48:f5:aa:c7:99:f2:bb:76:12:c9:6c:
e8:4d:51:f0:32:77:ca:28:70:7c:0d:77:25:5c:41:
e0:c0:d1:16:f8:4d:3a:cc:9d:31:5c:14:31:3f:80:
98:82:60:84:3c:d1:0b:18:4e:1b:4b:c3:c9:f4:29:
a1:56:86:09:60:58:7d:6f:f6:94:0a:58:36:07:6d:
c1:ea:82:96:88:55:78:b0:11:50:0c:c0:97:11:22:
5c:e4:55:a4:5c:e7:9f:c9:fb:cd:8b:99:27:f8:9e:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:9C:CC:CB:4C:8E:F2:C2:DD:6E:8E:4A:C0:D2:DE:94:E8:F4:3B
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/yQyczMtMjvLC3W6OSsDS3pTo9Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bd47:1234::/48
Signature Algorithm: sha256WithRSAEncryption
5c:30:5f:b5:39:89:b4:01:6c:04:39:4f:c4:10:37:ca:1a:6f:
c2:8a:f5:1d:15:c9:6c:0e:8b:34:4a:85:4b:cc:96:d4:0e:d0:
32:8c:f4:52:68:ce:a2:a7:1d:cb:63:7a:9a:e2:d8:1a:55:4f:
55:c7:50:57:56:4b:d4:6d:65:3e:e2:4f:34:68:9b:d6:b7:ca:
ff:b0:45:e5:44:6c:4a:e6:c2:71:93:dd:ee:44:ab:bc:3f:01:
2d:38:56:7b:2f:e4:1e:3c:cc:93:02:71:36:b1:e7:8d:a9:77:
4c:96:5f:bb:d3:79:2a:11:2f:81:d0:69:18:c2:f0:e0:09:f2:
f5:1f:00:2a:3e:f6:f1:5c:e7:e2:54:24:5a:4b:8c:41:17:8a:
11:0f:c0:b0:68:96:7b:35:60:f9:89:7e:02:a2:cc:bb:5b:2c:
cb:7b:b0:0c:cf:9a:1b:a2:57:89:c1:62:38:64:6b:cf:1e:aa:
41:c9:d4:d1:c6:78:5a:73:57:7d:bd:c6:a6:5d:58:4a:04:b1:
db:2f:00:9b:cf:00:c3:78:20:a8:b0:57:56:8d:6e:da:3e:e6:
3b:51:b5:af:5b:c4:74:e4:dd:eb:55:88:d6:88:c0:a1:80:f4:
5d:f1:6c:ce:32:ae:5a:c7:2a:25:be:f4:c4:0c:94:b5:a2:32:
9d:5d:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:46:13 2025 by rpki-client