Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jy_4mDRMDWT8ahIuiYUHTt6z3qY.roa
File: jy_4mDRMDWT8ahIuiYUHTt6z3qY.roa (raw, json)
Hash identifier: ewveVelKLPLlRPwSsW4Ka4bY2IOJ8k4nqkRo5ziPox4=
Subject key identifier: 8F:2F:F8:98:34:4C:0D:64:FC:6A:12:2E:89:85:07:4E:DE:B3:DE:A6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F32FBC8537FD982B7E9E8EEDBDA95B13
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jy_4mDRMDWT8ahIuiYUHTt6z3qY.roa
Signing time: Wed 21 May 2025 14:11:53 +0000
ROA not before: Wed 21 May 2025 14:11:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 15:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:2f:bc:85:37:fd:98:2b:7e:9e:8e:ed:bd:a9:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 14:11:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f2ff898344c0d64fc6a122e8985074edeb3dea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:95:5e:be:a4:77:36:d8:0b:57:af:50:26:
49:32:3e:76:ae:54:be:31:ac:f5:8d:ca:92:c2:95:
2a:a6:e8:f5:8d:c3:fa:d3:4e:a5:da:5f:a1:3c:e0:
52:54:55:30:38:a0:58:52:5a:1b:c7:8f:31:d6:93:
2d:09:76:8e:d3:90:7d:8c:ad:41:21:2d:de:39:bd:
9d:51:d8:9a:0e:a4:a3:d6:cd:3f:20:fd:c0:8d:38:
1f:50:31:80:9a:bb:b2:9b:e3:64:37:51:10:9a:66:
47:cc:5d:a1:6a:3d:ee:21:53:78:e2:79:c9:be:b8:
03:e9:fb:b7:ab:23:ad:ae:4e:f7:75:8f:a1:4e:97:
b6:d4:5c:42:e0:85:de:3c:4f:fe:92:61:53:22:eb:
e6:b2:ec:1f:df:03:ba:f2:95:a3:dd:a1:b8:17:a2:
14:3e:ca:12:99:64:52:12:1d:23:a6:58:7f:4c:4d:
d6:24:a9:6c:ef:90:00:ee:2b:89:3f:dc:15:f0:11:
2a:fe:b3:93:64:42:55:52:3e:b5:28:cc:ff:b4:90:
7c:a4:72:f3:fe:9e:a8:eb:2e:20:48:bb:eb:cc:42:
1b:a7:01:40:46:26:40:77:ea:9d:88:31:ee:7b:89:
69:cf:50:a4:04:2a:a0:da:12:db:55:b7:ce:96:a6:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:F8:98:34:4C:0D:64:FC:6A:12:2E:89:85:07:4E:DE:B3:DE:A6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jy_4mDRMDWT8ahIuiYUHTt6z3qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
4d:34:a3:94:32:16:c5:96:cd:24:ee:44:ae:48:aa:b3:7f:30:
1e:b5:f9:48:9d:50:c2:a0:20:6f:76:f3:21:c8:59:c3:a0:e8:
6b:74:f3:48:de:c1:3e:66:4f:a1:22:5a:03:3d:14:61:a2:99:
7d:70:88:3f:6d:3b:ae:1a:bb:9a:e9:f7:04:72:87:fb:08:5a:
f9:c9:a3:87:e7:bb:57:4a:42:c0:59:65:ba:87:86:8d:4d:46:
89:d3:c9:49:91:ea:d6:ea:cc:86:45:83:11:c8:d2:2e:85:a8:
c6:70:ba:d7:3b:56:e0:81:3f:df:3a:b4:e6:58:52:8c:57:eb:
3d:d0:c7:d3:7d:a3:88:9c:ee:48:e9:3f:63:cc:33:f1:54:f2:
9f:80:f7:ca:9c:ac:43:80:61:27:46:53:a2:d3:37:20:ef:28:
82:c8:2f:80:75:2d:54:bb:50:51:fb:e7:70:7c:4f:58:db:2c:
93:35:19:37:e9:33:39:d6:70:cb:2e:6a:e3:78:65:62:c8:c6:
2f:ba:4a:14:1e:c1:bf:e8:1b:6d:2b:a2:9c:69:32:3e:8c:74:
0c:cd:a6:f1:da:8a:71:4d:7d:24:47:fe:56:bb:55:c4:73:b6:
d4:aa:85:a4:1b:b9:ff:c8:7f:98:6f:9e:3a:b9:a2:f5:20:37:
4c:42:fd:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:48:32 2025 by rpki-client