Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YWqNVyVNX-kIxQscDkIZQLONjl4.roa
File: YWqNVyVNX-kIxQscDkIZQLONjl4.roa (raw, json)
Hash identifier: 6r9pzYzbwJjY8fHhwqYd+tPTn8f46jCHZGcc/ZJXp/Y=
Subject key identifier: 61:6A:8D:57:25:4D:5F:E9:08:C5:0B:1C:0E:42:19:40:B3:8D:8E:5E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01959E8D2BDA3034042E764803B78356FE61
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YWqNVyVNX-kIxQscDkIZQLONjl4.roa
Signing time: Sun 16 Mar 2025 10:43:26 +0000
ROA not before: Sun 16 Mar 2025 10:43:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 2a0f:35c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 17 Mar 2025 11:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9e:8d:2b:da:30:34:04:2e:76:48:03:b7:83:56:fe:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 16 10:43:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=616a8d57254d5fe908c50b1c0e421940b38d8e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:e9:1d:64:cb:04:d9:13:5a:9f:ff:82:c5:
af:91:3f:f6:fd:cd:cb:4e:53:d9:06:bf:07:48:41:
5c:d5:f7:1b:66:1c:4c:07:4c:08:80:52:50:7b:4f:
69:0c:cf:06:b2:79:30:a0:b7:2c:52:7b:31:1d:1f:
7c:3b:eb:34:c0:0e:bf:a2:ff:97:36:a7:ad:93:32:
fa:ae:e1:b2:6c:54:4d:25:58:44:c3:5d:b7:30:70:
66:ff:2b:04:0c:ab:e2:b1:fe:ed:89:d4:c0:ca:d4:
1d:a1:b3:76:85:08:a2:3a:66:fe:80:d7:c2:86:d6:
6b:f2:0f:a3:7e:f3:d5:00:2b:f9:1e:c6:74:f6:34:
65:8e:3b:2f:bd:50:96:6e:83:ca:8a:4a:5d:85:3b:
2c:9c:98:0d:ca:4c:8d:2d:47:a1:41:8b:68:b3:ee:
a0:26:a4:0c:db:b9:64:5c:e0:5b:57:09:1c:15:69:
78:8f:ec:78:66:38:a5:9f:95:7d:28:38:ca:cc:c0:
4f:c9:47:59:d9:4d:00:72:f9:1d:84:d7:6c:b9:f2:
c1:89:4a:a6:25:59:6c:67:fb:2e:da:62:11:22:26:
4d:6d:11:99:02:fe:0a:f0:89:f0:7b:b3:a5:31:05:
78:40:4a:ba:61:86:e8:7d:c8:fe:4b:99:2a:9f:dc:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:8D:57:25:4D:5F:E9:08:C5:0B:1C:0E:42:19:40:B3:8D:8E:5E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YWqNVyVNX-kIxQscDkIZQLONjl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:1e:c7:af:e1:d7:b6:87:f0:9b:60:55:2d:18:92:aa:a2:d2:
55:7c:62:3a:61:a1:57:08:8b:df:04:39:2b:ad:f4:40:7d:cf:
2f:a9:c7:ac:46:a4:d0:91:54:ab:2d:67:05:61:65:5f:57:b8:
d4:25:f9:4f:f7:e6:06:46:c8:70:0c:3a:bd:ad:f8:7f:ac:f4:
9f:69:87:9f:09:88:6c:03:46:46:db:d9:4a:07:f8:5f:f9:4c:
e3:33:2b:f3:f3:6d:96:d1:46:62:62:b5:55:7e:be:f0:54:98:
f4:0d:c4:f2:fd:16:bf:56:91:7c:e8:58:13:6c:76:ed:99:67:
aa:bf:4e:ac:1b:3f:b2:ae:a4:e2:7b:94:e2:37:b2:9f:85:8a:
e5:a3:b3:69:f2:8c:5a:e5:90:f1:2e:d9:00:49:8c:9c:70:e8:
9e:b6:98:1a:9f:e7:c1:fa:c7:1f:ae:15:cd:ad:77:a5:83:5e:
e9:99:86:39:fe:7b:93:7c:07:17:fe:51:91:9d:4d:c9:2a:ab:
e3:24:b1:f9:f3:9a:ee:f2:be:b3:24:fd:df:9a:c2:bf:91:79:
1b:25:53:d1:d1:c5:87:ea:8a:dc:88:8d:7e:21:a0:b7:25:f1:
e0:ce:97:42:2d:c5:37:3a:3a:d0:dd:79:55:79:da:b1:57:87:
a0:bf:f7:8a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZWejSvaMDQELnZIA7eDVv5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzE2MTA0MzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTZhOGQ1NzI1NGQ1ZmU5MDhjNTBiMWMwZTQyMTk0MGIzOGQ4ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo03pHWTLBNkTWp//gsWvkT/2/c3L
TlPZBr8HSEFc1fcbZhxMB0wIgFJQe09pDM8GsnkwoLcsUnsxHR98O+s0wA6/ov+X
NqetkzL6ruGybFRNJVhEw123MHBm/ysEDKvisf7tidTAytQdobN2hQiiOmb+gNfC
htZr8g+jfvPVACv5HsZ09jRljjsvvVCWboPKikpdhTssnJgNykyNLUehQYtos+6g
JqQM27lkXOBbVwkcFWl4j+x4Zjiln5V9KDjKzMBPyUdZ2U0AcvkdhNdsufLBiUqm
JVlsZ/su2mIRIiZNbRGZAv4K8Inwe7OlMQV4QEq6YYbofcj+S5kqn9wqfwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGFqjVclTV/pCMULHA5CGUCzjY5eMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWVdxTlZ5Vk5YLWtJeFFzY0RrSVpRTE9Oamw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg81wDAN
BgkqhkiG9w0BAQsFAAOCAQEArh7Hr+HXtofwm2BVLRiSqqLSVXxiOmGhVwiL3wQ5
K630QH3PL6nHrEak0JFUqy1nBWFlX1e41CX5T/fmBkbIcAw6va34f6z0n2mHnwmI
bANGRtvZSgf4X/lM4zMr8/NtltFGYmK1VX6+8FSY9A3E8v0Wv1aRfOhYE2x27Zln
qr9OrBs/sq6k4nuU4jeyn4WK5aOzafKMWuWQ8S7ZAEmMnHDonraYGp/nwfrHH64V
za13pYNe6ZmGOf57k3wHF/5RkZ1NySqr4ySx+fOa7vK+syT935rCv5F5GyVT0dHF
h+qK3IiNfiGgtyXx4M6XQi3FNzo60N15VXnasVeHoL/3ig==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:55 2025 by rpki-client