Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/yXpmuCk4-TgtqEKV7f-8dkZN8jw.roa
File: yXpmuCk4-TgtqEKV7f-8dkZN8jw.roa (raw, json)
Hash identifier: tt13BI2Zyt5DzYa+RryL23xJb9QR72Z5pPfyqrVfGIc=
Subject key identifier: C9:7A:66:B8:29:38:F9:38:2D:A8:42:95:ED:FF:BC:76:46:4D:F2:3C
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019427477B8C4BF130DF0A82E3F6E524A6BA
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/yXpmuCk4-TgtqEKV7f-8dkZN8jw.roa
Signing time: Thu 02 Jan 2025 13:49:43 +0000
ROA not before: Thu 02 Jan 2025 13:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3573
IP address blocks: 2a02:ee80:404a::/47 maxlen: 47
2a02:ee80:404a::/48 maxlen: 48
2a02:ee80:404b::/48 maxlen: 48
2a02:ee80:4066::/47 maxlen: 47
2a02:ee80:4066::/48 maxlen: 48
2a02:ee80:4067::/48 maxlen: 48
2a02:ee80:415c::/47 maxlen: 47
2a02:ee80:4170::/47 maxlen: 47
2a02:ee80:4170::/48 maxlen: 48
2a02:ee80:4171::/48 maxlen: 48
2a02:ee80:41a8::/47 maxlen: 47
2a02:ee80:4354::/47 maxlen: 47
2a02:ee80:4354::/48 maxlen: 48
2a02:ee80:4355::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 27 Mar 2025 13:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7b:8c:4b:f1:30:df:0a:82:e3:f6:e5:24:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 2 13:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c97a66b82938f9382da84295edffbc76464df23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:6d:46:60:19:0c:39:1a:40:50:8c:e9:49:
69:b6:1d:50:c1:27:45:b4:a7:38:d4:cf:8a:e8:12:
07:75:f7:23:4e:e3:b2:9f:92:28:9c:e2:9c:d7:53:
17:b5:99:92:96:00:2c:df:8b:6a:94:a3:b4:a6:6a:
f9:22:05:7d:62:fc:68:44:78:67:a6:61:96:ec:1f:
01:27:0f:5d:b5:32:0a:57:f7:fd:8c:d2:4f:af:b8:
0d:ac:03:65:61:8e:c0:f1:a4:89:ab:ed:c4:c0:75:
b1:3b:c2:f3:2c:64:60:8f:1e:73:0f:7a:83:6a:9a:
53:2a:b5:d2:df:1f:aa:e3:ba:8d:e1:e5:6f:b3:4b:
c0:27:34:30:2d:35:a9:e8:a4:d3:e8:37:33:f9:b8:
47:fd:b9:89:c3:5a:a1:50:d4:94:cf:c9:46:ce:0f:
57:10:a4:af:58:b1:86:dd:56:ab:68:13:91:6b:ae:
df:c4:07:1e:e5:14:64:4e:fb:ff:e8:9c:0f:6f:1d:
7c:62:85:65:bb:d1:6b:a5:7a:f5:d0:34:c1:ce:fa:
50:6f:b2:cc:a8:df:ef:85:a0:d5:93:a0:83:ac:25:
8b:f1:da:b5:db:f8:5a:2a:6b:07:c5:2c:83:63:2e:
4a:48:09:a6:e8:69:3c:0b:d2:52:4e:ca:21:76:67:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:66:B8:29:38:F9:38:2D:A8:42:95:ED:FF:BC:76:46:4D:F2:3C
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/yXpmuCk4-TgtqEKV7f-8dkZN8jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ee80:404a::/47
2a02:ee80:4066::/47
2a02:ee80:415c::/47
2a02:ee80:4170::/47
2a02:ee80:41a8::/47
2a02:ee80:4354::/47
Signature Algorithm: sha256WithRSAEncryption
32:03:53:d3:9f:e0:9f:42:ce:1f:e9:f3:63:d2:5a:73:eb:30:
d1:e9:b5:e0:25:33:5c:bd:8f:8b:ec:69:b5:a5:34:80:ab:cf:
64:fa:e0:f1:3e:4a:9d:5f:cd:fe:cd:a6:e7:2d:70:9c:da:64:
e8:7f:43:a3:04:ce:4e:0e:ed:e9:73:2a:ff:18:16:ff:4a:ca:
b7:cd:75:75:fa:1c:79:95:c6:1d:0c:07:91:8c:51:7a:92:bd:
ac:93:e7:85:a8:aa:a5:d8:ab:d6:3c:b5:db:60:fb:09:6e:fe:
a2:92:1e:f0:2f:3d:c7:ee:79:3d:a8:13:03:7d:45:fd:6b:f1:
94:ec:3b:7a:b2:46:49:c1:37:c3:fd:50:44:aa:3c:4e:bc:ad:
0e:b7:8d:9e:c7:cd:33:88:ed:48:79:97:62:1d:16:f5:eb:1e:
d8:10:09:45:81:ab:f5:00:a8:35:16:32:e7:a8:30:51:40:c2:
06:5b:10:92:2b:b3:cd:f0:ac:69:02:9d:01:98:7e:3e:d7:0b:
c5:1a:c4:8a:88:d3:4c:af:b8:8e:8a:10:ac:1c:8f:57:2f:eb:
18:9e:54:6f:81:8e:cc:d8:91:0e:3e:70:56:c3:f3:58:93:53:
fe:79:f1:ad:36:b9:12:6c:89:78:62:60:cf:9d:b7:b0:7a:ad:
9c:54:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:21 2025 by rpki-client