Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LYrI94MPJy-pQEpOLCXOBUaStEY.roa
File: LYrI94MPJy-pQEpOLCXOBUaStEY.roa (raw, json)
Hash identifier: U0/6q3CWsj1XjGv5VnsWdObpatLzo1m0DVMSj6ssbGk=
Subject key identifier: 2D:8A:C8:F7:83:0F:27:2F:A9:40:4A:4E:2C:25:CE:05:46:92:B4:46
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F630CB040BD8063656ECB3FBDED8E7F3
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LYrI94MPJy-pQEpOLCXOBUaStEY.roa
Signing time: Thu 22 May 2025 04:11:54 +0000
ROA not before: Thu 22 May 2025 04:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 05:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:30:cb:04:0b:d8:06:36:56:ec:b3:fb:de:d8:e7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 04:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d8ac8f7830f272fa9404a4e2c25ce054692b446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:3c:74:67:ab:e4:63:e1:e9:f3:6d:c7:9e:
ed:d1:02:5b:6e:18:5a:fe:54:37:63:42:52:67:14:
0c:02:f8:0d:8a:aa:11:b5:bf:83:4c:3c:ff:71:6f:
a2:25:47:e1:ec:ee:1a:9f:52:f1:90:ab:b2:0f:69:
2e:79:35:5a:21:c7:a0:43:57:fa:ac:d5:39:50:51:
32:81:91:8a:0f:1a:c2:59:96:c6:58:e3:55:cb:eb:
b2:a4:24:25:3b:bc:6c:1c:00:7a:55:dd:e8:12:bb:
c1:1e:e0:d1:04:c3:12:ef:26:0d:c4:7a:32:3d:e4:
e6:91:5a:f8:90:42:6b:af:c3:77:7a:c4:4f:42:20:
81:b6:e2:06:d0:ca:7c:f6:41:da:bb:7b:b0:9e:4d:
33:74:23:2f:45:6a:a0:7b:af:39:27:29:c0:e7:c8:
4d:c8:29:01:fa:5a:a5:6e:8c:72:c4:6d:e6:d3:64:
0a:bd:b8:08:a2:19:dd:ba:87:d5:4b:66:8e:ba:07:
28:e1:a6:27:bf:e9:92:6f:e8:99:ab:8c:1b:00:83:
27:ae:99:c5:7d:57:b3:7f:6a:ac:c5:68:ee:30:27:
d5:42:05:b8:9c:06:80:24:39:d1:f0:c4:f4:07:0b:
a2:61:08:36:e0:1d:86:b9:14:42:34:d7:3f:31:88:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:C8:F7:83:0F:27:2F:A9:40:4A:4E:2C:25:CE:05:46:92:B4:46
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/LYrI94MPJy-pQEpOLCXOBUaStEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
08:c6:d7:b7:51:49:f1:e1:72:ef:44:d9:97:00:a9:27:f7:39:
76:14:a4:49:db:63:2c:ed:f8:c4:3d:b5:6d:f4:1a:53:8d:75:
2f:89:0f:e1:17:3c:7c:3c:3e:ca:35:e2:d0:a9:d9:2d:9c:a1:
b8:71:27:6c:a2:3c:64:d7:d9:47:3f:cf:49:70:57:4f:d7:ec:
d2:2e:ec:b0:7e:9e:12:4c:11:ef:70:85:21:2a:b4:50:1d:de:
f2:13:86:f4:4f:99:4e:db:21:07:a4:11:1e:28:52:22:96:80:
30:b3:b1:ae:f2:e1:fa:d6:41:a5:55:44:a8:5f:31:ab:e2:31:
ce:36:fb:1e:5e:57:56:3e:ab:1e:57:48:7b:ff:54:2d:24:7e:
4f:70:05:90:92:01:e9:df:29:08:31:55:ff:92:d5:1b:7d:7d:
5d:c3:4b:63:06:fb:83:b1:3e:63:28:64:36:21:40:40:09:f8:
15:a6:d0:84:35:a4:e2:02:7a:29:a0:d6:34:91:aa:f8:4f:f1:
59:3b:23:49:44:f6:24:0d:6e:a2:5e:f8:c8:5a:57:cb:47:ef:
d1:80:6a:41:4a:6b:02:0d:62:3f:db:fb:2c:e0:5b:66:5a:ca:
44:2c:dd:7b:3b:f1:ac:23:f2:d6:24:ba:11:67:30:c2:86:8a:
e5:cd:49:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:12 2025 by rpki-client