Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/jYlvg7ZPLiJ463ABAeQp8qVWmJI.roa
File: jYlvg7ZPLiJ463ABAeQp8qVWmJI.roa (raw, json)
Hash identifier: dR6EYgMMz/VIG/jvQrVBq+sgG/MLfGxrF9z8j1rcT0M=
Subject key identifier: 8D:89:6F:83:B6:4F:2E:22:78:EB:70:01:01:E4:29:F2:A5:56:98:92
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 01974744258FEA5BD840552736E3AF7C5DCC
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/jYlvg7ZPLiJ463ABAeQp8qVWmJI.roa
Signing time: Fri 06 Jun 2025 22:02:17 +0000
ROA not before: Fri 06 Jun 2025 22:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212175
IP address blocks: 185.35.69.0/24 maxlen: 24
185.35.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 10:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:44:25:8f:ea:5b:d8:40:55:27:36:e3:af:7c:5d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Jun 6 22:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d896f83b64f2e2278eb700101e429f2a5569892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:e0:3a:3a:13:bb:0c:3d:79:10:6f:27:48:
38:f2:49:fb:0a:93:fe:3e:15:f3:e9:e5:61:64:09:
16:91:2f:19:fb:9d:b1:2d:b4:48:79:f9:66:c5:d5:
b8:da:c0:0d:c5:6e:17:64:f6:0b:bd:8c:4a:d2:b2:
ee:8f:68:5a:66:4f:f6:83:f7:a1:92:3c:77:fc:8a:
97:75:43:66:2b:fc:1f:57:0c:e7:87:30:e5:a6:3a:
fc:43:3e:8b:95:d0:22:d3:ff:cf:43:53:92:36:b9:
62:46:c8:62:b0:02:c7:ee:26:ac:9c:39:07:ab:f8:
ba:f7:86:41:90:31:dd:07:38:ae:a2:cc:3f:fb:c1:
d1:44:aa:4d:da:61:8c:cd:2e:dd:f3:e6:89:cf:cd:
fc:0d:45:fc:c4:f4:49:cf:82:f5:b0:09:c8:26:a2:
db:02:1c:ae:66:71:c4:bb:4e:bd:6b:fe:e2:2d:7e:
ae:59:ff:a4:06:21:d6:c7:07:a5:a3:66:c1:77:d4:
4e:ef:75:9b:1e:43:87:ab:f9:9c:b0:14:10:57:5d:
5e:ed:28:2a:9b:56:e1:15:a8:db:d6:de:b1:d0:d5:
01:46:47:ae:0d:6f:af:23:ff:c9:10:a5:f3:53:36:
70:f6:1c:8f:44:45:28:09:f6:db:85:50:c4:97:5a:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:6F:83:B6:4F:2E:22:78:EB:70:01:01:E4:29:F2:A5:56:98:92
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/jYlvg7ZPLiJ463ABAeQp8qVWmJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.69.0-185.35.70.255
Signature Algorithm: sha256WithRSAEncryption
98:74:72:6b:57:0a:0d:45:91:d4:f7:44:59:40:f2:b5:e5:39:
b6:25:bf:43:bb:3d:fc:85:6d:e3:7a:15:2b:48:2e:a1:d3:c0:
fc:8e:8b:67:af:8c:bb:ea:30:a4:33:79:26:38:35:0c:af:90:
84:23:3c:f9:8b:46:17:d8:2a:53:49:cc:17:2e:10:94:20:38:
6a:b4:82:77:98:88:bd:ba:be:03:20:ad:56:89:a9:75:ed:9d:
1f:a7:e4:1f:cf:eb:81:a5:43:0c:f5:09:b9:6a:da:af:68:93:
bf:77:9a:1b:28:5f:79:69:b1:4e:8b:94:2f:c6:1b:47:fa:d7:
0c:c2:c8:a2:b2:5a:75:fc:1f:71:d2:38:d3:7c:bd:d0:1b:51:
a7:66:9f:78:e0:21:44:3e:77:32:4d:2e:be:78:0c:6b:a1:83:
d2:9f:13:20:0a:b6:f9:f1:00:30:ab:07:9c:8d:7c:8c:11:cf:
f8:83:82:09:7e:0a:52:38:44:f4:e6:22:d6:c6:00:bf:e6:6c:
76:31:f9:f4:f6:af:50:d1:45:40:af:ac:67:c2:e9:26:95:fb:
64:4f:8c:74:b3:21:a2:78:5a:06:a4:a7:d9:bb:d4:b5:c7:c9:
62:cc:f6:8c:ee:27:ed:7a:3f:11:35:eb:c7:72:fb:a7:e9:24:
f7:fa:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:17 2025 by rpki-client