Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/DyRiLmnj1BKomBVeSSl6T_OEjGc.roa
File: DyRiLmnj1BKomBVeSSl6T_OEjGc.roa (raw, json)
Hash identifier: 673p/2fimxYrZ/30mTe5AZgZsq5dsieT8XHQgC/hooE=
Subject key identifier: 0F:24:62:2E:69:E3:D4:12:A8:98:15:5E:49:29:7A:4F:F3:84:8C:67
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019737205FB3BDBB54B93A4B899BF196A0FD
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/DyRiLmnj1BKomBVeSSl6T_OEjGc.roa
Signing time: Tue 03 Jun 2025 18:49:17 +0000
ROA not before: Tue 03 Jun 2025 18:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a13:c040::/32 maxlen: 32
2a14:6ac0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Jun 2025 19:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:20:5f:b3:bd:bb:54:b9:3a:4b:89:9b:f1:96:a0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 3 18:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f24622e69e3d412a898155e49297a4ff3848c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:16:c1:2d:28:5e:70:84:da:1b:f1:dc:1a:
2d:3f:2b:fa:44:7f:bc:26:ed:42:e5:84:f9:6b:af:
ce:c8:28:5a:d5:cd:ae:af:cc:e5:c8:c1:d2:4f:16:
9d:aa:80:3a:44:97:d5:23:a9:d9:0b:82:bf:0a:bc:
5c:51:b7:2f:b5:0d:08:4e:f0:16:a1:f0:9b:9a:86:
38:67:79:6b:0e:d4:25:81:44:68:8c:e8:c2:fb:76:
d6:3e:5c:b5:55:a8:1f:71:1c:41:3c:58:8d:c9:cf:
59:31:5d:95:1a:c6:a1:ef:e4:23:14:d9:f0:d4:cd:
75:1e:96:4d:d1:b1:5d:72:8d:1b:88:b5:97:39:88:
7f:ca:af:38:ce:2c:11:4b:d1:a6:49:12:09:47:3f:
1e:ec:51:e5:75:b4:2d:ef:94:a0:d8:52:e6:5a:c1:
ca:3f:56:fe:5f:68:d2:3f:5d:78:f2:5e:e1:0e:bc:
26:b8:84:6f:e2:86:8e:40:82:c6:6c:95:9f:32:ed:
46:ad:25:1b:ab:b3:28:1f:11:8a:84:90:44:bb:c2:
8c:e4:80:fc:9b:d5:2a:4a:12:f4:61:2b:65:47:41:
40:05:de:32:79:25:7d:09:40:18:34:b2:e1:13:d2:
79:2d:3f:da:e1:8d:cf:79:1f:6d:99:7f:d4:ff:94:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:62:2E:69:E3:D4:12:A8:98:15:5E:49:29:7A:4F:F3:84:8C:67
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/DyRiLmnj1BKomBVeSSl6T_OEjGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c040::/32
2a14:6ac0::/32
Signature Algorithm: sha256WithRSAEncryption
04:b6:27:2c:e2:eb:f1:fa:b7:80:28:a4:29:48:81:ac:3c:6e:
bf:04:fb:ce:15:67:02:55:38:6e:71:5e:c2:3e:3b:39:a1:01:
d8:f4:bd:32:1f:d6:54:dd:2a:59:95:a0:6b:8c:c9:61:cb:77:
e5:89:0c:00:ae:17:8b:9b:17:d7:3d:06:a7:28:ad:9b:ec:60:
92:bb:b1:37:ba:29:c1:ec:c1:27:55:de:bb:c8:29:2c:9c:58:
5b:b5:62:dd:f1:cf:9a:71:53:e3:af:aa:f9:e5:42:30:51:85:
71:e1:0c:70:30:80:8b:7f:2c:39:1f:37:27:ec:b3:aa:99:1c:
5d:19:70:10:51:2d:ab:80:5f:79:8a:a6:ed:4a:6e:a5:ef:d4:
ac:4e:c3:ec:3d:f2:76:d8:1e:b7:01:65:83:28:3c:c3:42:6a:
eb:19:f8:eb:cb:a1:7d:8f:bc:53:36:f6:71:8a:3f:44:6d:7f:
83:d9:54:cb:7f:6a:b1:57:59:7c:2a:34:d0:df:3a:f4:45:c9:
ae:ec:5e:d5:9b:f0:8d:78:db:8d:d6:d3:34:83:7b:da:b8:dd:
e8:8d:61:b4:71:5d:b1:7d:33:8f:bb:c8:c9:9c:55:4d:05:f1:
07:ee:48:9b:60:a9:46:23:69:6e:da:d6:7a:f2:2a:10:0e:a2:
1f:3c:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:40:04 2025 by rpki-client