Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/yMi1BTkCY7SszC1OqDWG9RLC8RM.roa
File: yMi1BTkCY7SszC1OqDWG9RLC8RM.roa (raw, json)
Hash identifier: duY6W4ZgzbO/YjI98WRb2kLqj5mzJI2NhW4P8NOYBLA=
Subject key identifier: C8:C8:B5:05:39:02:63:B4:AC:CC:2D:4E:A8:35:86:F5:12:C2:F1:13
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019712BB9D8988D7301AC04E41A2D151E9AA
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/yMi1BTkCY7SszC1OqDWG9RLC8RM.roa
Signing time: Tue 27 May 2025 17:12:54 +0000
ROA not before: Tue 27 May 2025 17:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 18:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:bb:9d:89:88:d7:30:1a:c0:4e:41:a2:d1:51:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 17:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8c8b505390263b4accc2d4ea83586f512c2f113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:01:21:46:ae:e8:3d:fb:c4:fc:24:b1:c1:
29:2a:73:51:29:08:e4:9e:5e:ff:58:03:e6:c2:63:
07:0e:6a:01:ce:eb:ec:2b:2c:f5:61:60:35:68:e7:
fc:a2:23:0d:e6:88:42:55:a9:3d:05:3d:f1:f4:4f:
32:f2:32:0c:be:de:56:06:11:d5:22:2d:73:f5:f8:
ec:a8:c7:e4:7d:da:3a:02:13:36:19:94:98:96:8f:
f9:9d:8b:68:79:da:29:2c:7d:71:91:43:02:6c:25:
36:dc:bb:fd:6e:25:aa:c4:8e:fa:ab:0c:6f:3d:48:
57:ed:e6:b3:c2:67:45:9d:5d:b9:6d:1e:03:d2:07:
86:84:6a:04:ab:8c:8d:62:46:35:89:86:5f:ad:d9:
66:92:b5:c5:f8:cc:bd:0d:6b:67:07:b3:0a:66:f0:
0b:74:49:46:0b:48:2a:3b:51:7d:28:1a:81:71:cd:
4f:08:93:c8:40:46:ec:5a:f3:01:3d:18:c2:1c:d9:
50:58:14:62:e2:d4:24:79:ca:57:21:14:a6:a7:b1:
0c:77:27:4d:3c:65:78:8e:8c:e1:0f:ad:7d:5d:fd:
9b:00:2c:a6:79:4a:ee:8a:34:54:8c:51:c6:4e:d4:
77:1b:0d:fa:7b:06:cf:f1:fb:cb:16:ad:f3:45:37:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:B5:05:39:02:63:B4:AC:CC:2D:4E:A8:35:86:F5:12:C2:F1:13
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/yMi1BTkCY7SszC1OqDWG9RLC8RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
Signature Algorithm: sha256WithRSAEncryption
ba:b7:ef:48:8f:73:91:a6:48:f9:e5:e7:a4:4d:3f:fb:d7:14:
6e:7f:da:fe:c4:b7:73:cc:38:13:5e:10:17:d0:02:b5:f0:b4:
bb:a7:96:98:42:ff:ff:78:7c:9e:db:b5:b3:88:e0:94:0c:32:
42:02:df:0e:e2:d4:79:d0:27:cc:09:19:ce:11:bc:a1:c6:c0:
06:d8:a1:b9:7b:94:37:d4:35:9b:ec:56:9a:6a:c9:8f:87:b3:
dd:28:06:e4:69:35:11:02:37:ad:a7:50:e1:61:5b:bb:b9:51:
6e:7a:17:5e:c8:91:f1:6d:9a:c0:a1:84:7d:a1:01:5b:67:9e:
86:5e:8a:2a:c1:29:e7:42:f0:73:56:50:3f:c9:f5:49:92:ae:
c1:e4:16:28:a9:91:10:de:2f:59:ad:a8:af:cb:e8:7a:75:ff:
bf:9c:2c:33:4f:21:f6:97:5b:fb:ae:1f:b7:e1:6a:ad:05:1a:
cd:4c:9f:6c:bc:f3:15:70:65:17:89:5a:61:92:59:a6:c4:19:
20:5e:34:4a:f7:37:94:85:2d:87:46:22:ee:c3:f2:cd:30:f9:
32:77:f0:f8:62:f6:16:77:cc:c7:5e:b0:0a:0c:69:1a:da:64:
9b:53:9f:86:04:9c:8d:11:51:d4:a5:3f:fb:cc:1b:5d:0e:b6:
7c:26:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:12 2025 by rpki-client