Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/y2n-PyvETKN4aclMju7ZXXgMGmE.roa
File: y2n-PyvETKN4aclMju7ZXXgMGmE.roa (raw, json)
Hash identifier: fspFhOexa+iH+9vuSjJL52VMsqRmLTU1GoeWdYwhApk=
Subject key identifier: CB:69:FE:3F:2B:C4:4C:A3:78:69:C9:4C:8E:EE:D9:5D:78:0C:1A:61
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197297974D95978F3F9B54E1E856E3F0BB7
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/y2n-PyvETKN4aclMju7ZXXgMGmE.roa
Signing time: Sun 01 Jun 2025 03:11:54 +0000
ROA not before: Sun 01 Jun 2025 03:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Jun 2025 04:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:29:79:74:d9:59:78:f3:f9:b5:4e:1e:85:6e:3f:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 03:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb69fe3f2bc44ca37869c94c8eeed95d780c1a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:5f:fe:66:98:de:08:a5:9e:8a:e8:68:f1:
57:b1:ed:e5:51:74:d6:78:5a:fb:aa:a5:be:3e:a0:
91:a1:47:ce:99:6b:2c:f8:cb:55:02:fd:93:cc:4e:
6b:6f:8e:f4:79:d5:d3:1b:aa:59:6a:32:f3:c1:92:
24:6a:cd:e5:07:2e:ed:fe:83:4a:dc:b9:56:42:82:
11:f6:92:69:69:f2:e9:e8:7f:43:59:10:0d:be:f2:
77:b7:e7:52:1a:41:06:81:89:16:dd:03:18:3f:00:
97:59:ed:fb:63:b9:68:7a:a6:42:c5:df:ba:35:39:
e2:f9:84:f9:42:aa:7e:97:99:26:38:c4:25:56:df:
9b:8d:95:a1:ca:4c:fa:df:ed:7b:7a:97:99:9f:b6:
32:fe:00:5e:ff:54:ac:f7:f9:97:37:f5:fa:4e:e7:
fc:d2:60:5a:96:81:91:25:0a:d7:42:0c:94:64:42:
f0:14:ed:e0:db:35:6b:0d:2a:80:c8:31:53:41:29:
8b:2d:c4:ae:c7:40:77:61:ab:66:93:b6:40:10:b9:
99:43:73:1e:a1:db:4e:f6:bd:47:db:f0:81:e3:db:
2c:e5:14:6e:98:4e:2a:05:0e:ee:23:8f:f3:84:fd:
46:d6:0a:a6:68:b4:d6:e1:94:63:0c:8e:15:9a:6e:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:69:FE:3F:2B:C4:4C:A3:78:69:C9:4C:8E:EE:D9:5D:78:0C:1A:61
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/y2n-PyvETKN4aclMju7ZXXgMGmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
2d:d0:d9:6b:ca:22:8e:34:ff:40:10:49:22:44:e1:c4:a8:e6:
cf:3f:75:d8:38:b7:8a:c3:11:27:73:1a:19:bc:14:41:a3:4b:
72:d4:13:34:99:22:ea:cf:38:8c:a1:ac:75:2f:56:fd:9f:9a:
35:d3:2c:d3:00:63:99:d1:79:53:90:6a:0e:06:28:b8:96:8a:
de:ec:14:44:89:ed:9d:87:ed:e7:c1:36:87:74:f6:63:a6:5a:
00:51:2f:e7:1d:8b:e1:8e:84:e2:98:35:d1:ee:1d:9f:66:eb:
c7:cb:78:48:5f:32:1a:4c:d4:78:a5:28:33:f2:bd:39:ca:e4:
12:60:0e:89:cb:ae:97:cc:49:0e:93:82:db:e9:4a:48:eb:ac:
6d:1e:ae:26:45:24:21:c8:92:d6:6b:f5:64:47:5b:b6:50:e4:
34:c4:3f:4a:40:c9:7c:ec:73:92:8d:b9:ec:b2:56:4f:86:aa:
96:9d:b7:9f:97:c4:9f:42:b4:1d:ec:c1:db:fc:11:42:e6:f1:
ce:96:f8:f1:ba:0d:67:2e:e0:01:97:e8:57:2d:85:20:79:11:
62:f7:f8:e1:2f:a3:f7:42:a4:08:6f:5b:5b:a9:0e:34:68:9f:
a5:39:fe:02:83:87:69:97:67:ea:e1:f7:ce:97:ea:e0:e0:1e:
b1:3b:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:40 2025 by rpki-client