Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/yLGycM2qDslt_LW2kc-XP4jrpbE.roa
File: yLGycM2qDslt_LW2kc-XP4jrpbE.roa (raw, json)
Hash identifier: SUxcyH+GwXCzmN2v5bA/l+yyV4LRZ8YCMOZLM5UjsmE=
Subject key identifier: C8:B1:B2:70:CD:AA:0E:C9:6D:FC:B5:B6:91:CF:97:3F:88:EB:A5:B1
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019747183386CD773AB7806C899E0E2DC9BA
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/yLGycM2qDslt_LW2kc-XP4jrpbE.roa
Signing time: Fri 06 Jun 2025 21:14:17 +0000
ROA not before: Fri 06 Jun 2025 21:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 22:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:18:33:86:cd:77:3a:b7:80:6c:89:9e:0e:2d:c9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 21:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8b1b270cdaa0ec96dfcb5b691cf973f88eba5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:79:f0:33:40:c3:36:8f:41:b3:43:f2:f0:
80:c8:24:b1:f5:62:d7:c5:e2:10:f7:3c:e8:a2:68:
6f:13:4e:ec:d8:5f:10:5e:74:cb:f8:c8:fe:fb:e7:
86:77:cb:98:aa:39:86:81:18:30:b1:25:e0:fd:56:
fc:38:87:0c:df:95:e1:3d:42:be:4a:bd:ed:b9:a5:
52:89:f0:e8:8d:80:41:9c:55:d7:28:7f:42:10:c8:
00:5e:45:ca:2a:a0:ef:46:ff:7b:71:32:46:ed:7e:
1d:3c:02:3a:63:83:f3:3d:b1:fe:49:2d:06:62:a6:
3a:96:53:c8:c8:73:73:c7:87:19:21:38:8c:7b:ff:
7b:06:30:76:3e:6b:d2:ec:bd:15:df:85:0b:e9:d6:
6d:c6:54:54:2f:a1:13:f0:c0:e4:f1:88:53:24:47:
64:ac:60:b5:09:39:94:6f:5c:52:07:22:98:09:2d:
87:f3:91:22:41:a1:b0:f3:e7:a5:3f:33:5e:c6:10:
e5:fe:ec:ab:51:4a:08:ca:d1:0e:78:e3:14:ea:f3:
f2:40:ce:c3:cf:31:55:b8:08:be:f9:84:ef:7e:ca:
f0:49:1f:1b:45:ec:a3:b3:be:16:75:3c:e5:f5:8f:
10:fd:90:d5:fd:1c:d6:e9:b6:42:31:94:01:90:16:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:B2:70:CD:AA:0E:C9:6D:FC:B5:B6:91:CF:97:3F:88:EB:A5:B1
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/yLGycM2qDslt_LW2kc-XP4jrpbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
2c:cc:73:b5:10:0f:4d:02:6d:c1:21:db:ac:df:51:6e:41:42:
76:04:43:81:d5:68:52:93:6b:05:42:20:b2:68:41:e8:52:de:
67:5f:04:82:61:de:c9:70:b1:ce:96:e7:51:4c:04:34:1e:ec:
8a:79:a6:55:d2:82:a5:ef:57:8e:44:92:ba:83:b2:7b:25:a7:
05:be:28:f0:e0:7d:7e:97:52:a7:59:51:c2:66:e7:8f:81:6b:
66:95:ea:02:88:75:bf:35:f6:c4:58:6a:65:e8:f3:4f:80:a1:
30:2a:b2:4a:7f:a6:02:2d:f9:bd:8e:8e:e3:9d:3a:a4:0c:b7:
0d:ba:5f:78:5a:9a:b2:51:69:15:44:b6:e3:75:a7:c2:18:48:
ca:d4:f6:99:c9:7a:16:1b:05:92:4d:2c:fb:6a:2e:05:dd:34:
53:c7:45:21:a4:7d:5f:81:39:38:24:71:de:52:41:b0:c7:6e:
c2:86:e4:ab:05:27:2c:4c:83:19:46:77:f1:92:cb:d6:14:a4:
fc:17:31:7b:a0:6f:07:54:b4:85:8e:ff:41:01:86:7c:8c:2a:
d0:2d:14:85:19:f0:ac:e1:48:50:e4:b2:60:5b:9d:46:78:91:
95:6a:76:92:fe:e6:45:9e:fd:3d:df:ce:ff:e8:09:c5:3b:dd:
35:b7:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:57 2025 by rpki-client