Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/ycRPs6-W6UFuUAtMYfi07IWxqP0.roa
File: ycRPs6-W6UFuUAtMYfi07IWxqP0.roa (raw, json)
Hash identifier: CdpauRmYxs3QHZnjocGRcB/tirpddEyjH3JRk24AEJA=
Subject key identifier: C9:C4:4F:B3:AF:96:E9:41:6E:50:0B:4C:61:F8:B4:EC:85:B1:A8:FD
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0194A748628935ED93D33A99DC86390D4099
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/ycRPs6-W6UFuUAtMYfi07IWxqP0.roa
Signing time: Mon 27 Jan 2025 10:22:06 +0000
ROA not before: Mon 27 Jan 2025 10:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a11:8447::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 09:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:48:62:89:35:ed:93:d3:3a:99:dc:86:39:0d:40:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jan 27 10:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c44fb3af96e9416e500b4c61f8b4ec85b1a8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:52:e3:f5:ca:c7:32:02:c1:73:9c:3d:a5:
4b:7a:58:49:a0:3c:5a:c2:a7:28:70:ac:19:79:87:
05:e7:f7:eb:12:50:9e:81:60:af:3e:0f:b6:ec:16:
dd:a9:5b:55:62:a0:62:f0:b6:ce:74:61:b9:97:11:
e6:37:6f:6f:5e:c8:66:6b:47:e2:55:1b:01:cd:a5:
fc:d6:ef:13:3a:8b:11:9d:63:d8:9c:77:0d:cc:82:
3c:b9:5a:f4:20:bb:8e:a5:b0:4d:b0:fc:cb:af:51:
9b:07:b7:cb:30:d2:97:7f:88:22:ce:c2:c3:f4:64:
13:b5:d3:23:96:31:ac:f0:49:37:7b:14:6e:6b:62:
a0:32:27:ef:17:af:e5:03:c1:8e:c3:f9:f5:f1:9e:
9c:a9:70:74:9e:c3:35:b8:93:f9:b8:08:5c:5b:e6:
89:cd:bb:d3:98:98:b9:8f:b8:c8:a8:13:96:ef:de:
4b:45:0b:fd:50:74:33:1f:dd:87:c5:52:20:63:2d:
48:a5:2d:31:54:67:f4:e4:a6:ea:cf:b7:33:39:cd:
26:69:9c:b6:7c:77:88:94:2d:b3:f8:24:c2:4e:95:
2b:7b:3f:c6:d6:f3:bd:fe:06:bc:98:13:c3:bb:b8:
30:70:8d:32:62:b7:1c:17:f5:fe:18:06:5e:92:82:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C4:4F:B3:AF:96:E9:41:6E:50:0B:4C:61:F8:B4:EC:85:B1:A8:FD
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/ycRPs6-W6UFuUAtMYfi07IWxqP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8447::/32
Signature Algorithm: sha256WithRSAEncryption
ac:f7:66:5e:60:f4:46:fb:55:28:62:f5:21:8b:45:a4:d9:28:
e1:9a:38:51:8e:71:64:e1:27:67:3f:8c:05:77:d1:0a:a9:3f:
da:cb:89:84:5f:47:e6:cb:e3:f6:64:cd:38:54:8f:51:c7:c7:
c5:59:49:2d:94:15:4c:ea:bc:9b:4d:46:dc:36:6f:9a:b2:78:
9c:3b:26:b3:c2:9b:a3:bf:cd:5f:76:69:33:30:b6:ef:1f:a3:
5d:69:f5:84:cd:cf:8d:bd:d0:b2:13:07:45:a7:2d:7f:a7:5c:
65:c6:40:cd:2f:ea:11:4c:27:e6:da:1f:cb:ab:12:a1:f5:2a:
d3:de:97:e5:56:ff:34:e7:42:14:2c:a8:4f:7f:ae:32:a7:8b:
0f:38:8a:ec:86:68:70:47:c5:1a:b4:a4:e3:99:2f:2e:74:d0:
d3:ec:66:8f:af:10:4f:ca:17:fb:0d:12:50:53:de:95:74:78:
4a:22:0a:e5:fe:48:d7:b6:e4:b7:73:14:fc:fb:d1:bc:86:05:
98:50:da:4b:fe:e1:67:d1:7e:a2:f1:4d:21:fb:19:12:a9:35:
39:9f:4c:01:9b:42:78:b5:a7:84:fc:4c:8f:be:ce:01:d6:34:
45:3e:c2:82:f1:d2:1d:03:6f:03:8b:8f:8c:05:5e:5c:ef:19:
85:14:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:48:45 2025 by rpki-client