Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Y1KeLJjEYU_3IysR4zE2rDUTsSA.roa
File: Y1KeLJjEYU_3IysR4zE2rDUTsSA.roa (raw, json)
Hash identifier: 7sGXI5lYU8s2tEbfblVluO2/JB3rbhZA5y/VwIMUEQs=
Subject key identifier: 63:52:9E:2C:98:C4:61:4F:F7:23:2B:11:E3:31:36:AC:35:13:B1:20
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973F26D231A998FD5F4279D7561E6FC01B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Y1KeLJjEYU_3IysR4zE2rDUTsSA.roa
Signing time: Thu 05 Jun 2025 08:13:18 +0000
ROA not before: Thu 05 Jun 2025 08:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Jun 2025 09:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:26:d2:31:a9:98:fd:5f:42:79:d7:56:1e:6f:c0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 08:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63529e2c98c4614ff7232b11e33136ac3513b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:42:d7:c1:3d:5b:2d:30:c5:c8:f0:f6:77:1e:
d0:f6:b6:6f:cd:1b:c3:8e:0e:98:82:31:ad:ed:66:
06:09:29:23:a8:c0:f1:b3:9a:ca:71:cd:41:52:d7:
3e:cd:9a:eb:9f:51:3c:e0:28:51:63:28:9e:85:69:
26:c6:71:21:0c:ed:29:8f:d3:e1:90:8a:68:da:01:
b5:f3:08:a7:c3:74:f3:ff:6e:bd:18:62:7e:98:84:
86:af:93:06:a1:6d:f6:0f:0d:8e:85:3b:47:a2:fe:
24:43:e6:f9:c4:66:c2:70:dd:15:c4:bd:34:55:de:
ba:8f:cf:bc:8c:4d:79:63:b8:52:b4:05:fa:1c:09:
fb:56:61:d4:bb:c4:56:cd:5d:6b:28:87:04:be:e4:
67:c9:06:fd:8a:b2:45:86:8a:b9:3b:45:82:40:00:
aa:b2:10:a2:99:bb:02:83:43:1f:a5:76:3c:e1:fe:
8b:44:bd:f6:8d:18:42:66:26:c2:14:32:43:f6:50:
1d:74:d3:9e:0c:66:8e:40:c7:22:2b:45:99:35:3e:
4b:8b:ca:fa:03:ed:59:fe:27:00:66:6c:ad:3a:b9:
d5:24:75:53:a3:eb:94:01:4e:53:cc:ed:7b:3f:c2:
d4:54:f3:1e:7f:a8:bc:e7:55:9f:55:e9:d4:eb:62:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:9E:2C:98:C4:61:4F:F7:23:2B:11:E3:31:36:AC:35:13:B1:20
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Y1KeLJjEYU_3IysR4zE2rDUTsSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
78:bc:95:1e:2a:9e:50:8e:3c:9d:04:4e:8d:45:2e:80:5b:f5:
27:8b:1a:e9:24:d2:a4:83:dd:03:9d:55:b1:28:86:d0:73:93:
79:85:d2:bc:87:89:5b:d9:c8:3a:cd:b3:8f:57:a6:35:57:74:
7e:da:bb:f5:a8:0c:c1:a0:02:f5:07:c1:ad:68:d3:e4:75:cb:
43:6b:f5:ee:97:3f:85:f6:ed:f6:32:12:54:a3:b0:fd:d2:5e:
3a:e3:de:46:91:55:62:c3:9e:ec:e7:c4:0e:58:5d:de:78:19:
82:0e:3a:1a:ad:c9:19:01:c7:d1:bd:a5:da:94:b9:7d:46:e6:
af:93:88:f8:f4:80:54:01:c0:15:f6:4a:fa:b4:df:c7:85:a0:
dc:c7:2b:af:32:3c:e3:73:c6:4b:ce:91:49:af:7b:ee:df:e0:
77:1e:35:6d:11:55:1a:08:cc:9c:cd:29:bf:bf:52:68:bb:4b:
67:97:73:43:d6:fd:dc:a8:03:b3:05:08:ee:48:2b:06:65:7a:
b5:de:73:01:53:0e:51:24:88:f5:76:bf:c5:d4:55:6a:c1:4c:
8f:c2:8a:65:f7:4a:a9:92:bc:66:2d:f9:a5:be:7c:75:aa:51:
a6:91:b7:db:78:cc:2e:ff:e3:01:78:19:04:a8:05:c3:af:ce:
5e:da:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:18 2025 by rpki-client