Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ySrWrvk8X9407nnnxLm0_PAxkWE.roa
File: ySrWrvk8X9407nnnxLm0_PAxkWE.roa (raw, json)
Hash identifier: dniJ6zsphZ9NT/NqEXjwQwrlvSVqmFbYwQXHQ4bl/Gk=
Subject key identifier: C9:2A:D6:AE:F9:3C:5F:DE:34:EE:79:E7:C4:B9:B4:FC:F0:31:91:61
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197230A6C7D4B789D39001698D76EDA0862
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ySrWrvk8X9407nnnxLm0_PAxkWE.roa
Signing time: Fri 30 May 2025 21:12:54 +0000
ROA not before: Fri 30 May 2025 21:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 30 May 2025 22:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:23:0a:6c:7d:4b:78:9d:39:00:16:98:d7:6e:da:08:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 30 21:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c92ad6aef93c5fde34ee79e7c4b9b4fcf0319161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0e:13:c0:e3:9c:b8:72:47:af:52:19:92:b7:
db:b8:a9:07:39:00:50:03:85:72:00:ae:0e:93:a5:
97:96:63:83:1e:51:05:35:61:02:d0:43:d3:b5:76:
4f:bf:5f:d0:a1:51:e9:07:e1:f1:02:16:fe:ea:55:
5d:0f:91:96:c5:c2:c0:44:5f:cf:cc:f7:fa:84:34:
18:3b:d5:05:1d:87:91:ec:76:47:b6:d0:0f:71:c4:
09:2e:b9:57:4c:83:af:81:62:3c:53:fc:d3:d4:a8:
4e:22:60:e1:ed:db:bf:90:28:31:17:97:e6:9f:ab:
76:76:55:7f:a3:8c:8e:27:37:31:ca:22:b1:18:d5:
cf:5e:e1:84:95:8e:c4:ad:c2:0f:7a:12:7a:26:1c:
a3:fa:80:f0:e8:ba:63:d6:e7:d5:e9:b7:9d:51:83:
bf:79:5c:bd:30:d2:06:c7:ec:64:6b:4e:48:0d:b8:
1d:6e:8f:87:a8:a7:46:61:01:7b:f4:b2:79:cf:14:
10:af:40:27:91:b6:de:97:3d:bf:25:07:7f:14:bc:
85:f3:72:90:e3:8b:70:82:1a:87:f3:36:ff:72:33:
fc:00:71:fc:21:e8:c3:87:92:91:30:25:0e:d0:37:
db:64:f6:e7:7c:17:88:97:82:65:17:dd:ba:ee:bc:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:D6:AE:F9:3C:5F:DE:34:EE:79:E7:C4:B9:B4:FC:F0:31:91:61
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ySrWrvk8X9407nnnxLm0_PAxkWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
7b:4d:c4:c0:08:fb:dc:1f:b8:7e:60:70:b0:31:00:64:25:74:
b6:74:3e:f4:2d:89:03:89:94:3f:cb:78:19:a0:59:c5:d7:b3:
eb:93:dc:3c:03:2d:4d:06:97:09:24:7c:76:ee:81:e1:09:d4:
ac:36:ff:89:4d:06:48:b4:7c:a1:5c:54:a6:a3:ee:cc:98:20:
98:78:6e:e6:14:60:b7:e8:11:69:50:ae:6b:8e:bb:19:02:5d:
39:48:68:32:32:1f:76:65:de:c2:bf:78:e9:85:06:7d:0e:68:
0f:10:40:d8:d4:41:b6:be:de:46:72:6a:f5:8c:d3:28:fd:d3:
1f:3c:7f:14:41:7f:87:6b:5c:36:f6:a0:92:7f:60:38:84:2d:
76:24:28:58:c8:a5:25:13:24:cc:da:ed:12:93:f8:f7:e9:99:
74:15:89:c5:91:42:ec:37:82:0d:5c:99:73:68:88:86:1d:97:
49:45:11:99:e7:fd:7a:14:c0:a9:d1:90:15:93:4d:ff:a0:1b:
b4:d8:58:09:57:69:f1:d6:48:20:39:b9:09:20:45:ec:05:21:
42:0e:1f:df:1f:28:0f:1e:3a:c8:24:b5:a4:d0:5b:0f:ea:b4:
c9:9f:f7:17:c7:27:4b:6b:9a:7c:37:31:a3:c5:46:e4:e5:56:
00:ed:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:53 2025 by rpki-client