Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/LYmgAEq_TMYA5gzqcgFOmyvw-vI.roa
File: LYmgAEq_TMYA5gzqcgFOmyvw-vI.roa (raw, json)
Hash identifier: /Sqf8n8UpQBnVVkRua4o+O4XFViCWTLD5p3U84YnHKs=
Subject key identifier: 2D:89:A0:00:4A:BF:4C:C6:00:E6:0C:EA:72:01:4E:9B:2B:F0:FA:F2
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019785BF533E7E443E0052ACDC7B6B7F74FD
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/LYmgAEq_TMYA5gzqcgFOmyvw-vI.roa
Signing time: Thu 19 Jun 2025 01:13:17 +0000
ROA not before: Thu 19 Jun 2025 01:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 02:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:bf:53:3e:7e:44:3e:00:52:ac:dc:7b:6b:7f:74:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 01:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d89a0004abf4cc600e60cea72014e9b2bf0faf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:9c:45:62:17:57:40:ee:4d:32:59:e5:94:
8c:2b:e4:7a:b9:38:16:99:e0:6d:21:60:84:8d:66:
2b:cb:4d:f8:cc:0b:61:4c:b4:74:68:c9:09:e1:9d:
5d:77:08:3d:42:89:3d:c2:a2:2c:bc:22:fe:18:10:
47:47:22:63:c8:af:d8:21:77:ec:d2:78:fc:29:94:
af:54:2a:ba:7a:c4:6f:6f:5a:6d:60:36:9b:b2:ec:
cd:21:dd:2a:81:30:82:7a:e0:c5:ef:d7:47:1d:78:
0a:66:19:90:0a:00:92:79:04:05:4a:4e:03:3d:8e:
66:49:e5:74:a0:70:3c:28:04:41:0e:33:7a:3e:52:
ad:87:3b:56:71:55:bf:6e:f7:fe:e6:2e:66:d3:83:
b9:16:d6:cf:b2:49:cb:75:c5:b0:fa:0b:69:02:e6:
46:d9:21:e2:f3:04:b4:3c:3c:5e:69:83:0d:2c:ca:
a2:a1:eb:5e:7f:b4:e2:61:6b:23:0e:c1:94:5d:b9:
45:ab:be:c8:b4:54:a7:e3:d7:10:35:7d:96:5a:06:
95:c7:26:c7:67:f3:2e:76:78:8b:7c:12:a7:9a:23:
ca:08:2c:7e:9c:e0:31:c0:89:1d:fe:27:a8:f4:b9:
8b:89:d2:90:7e:e5:e3:48:6b:cc:a3:0f:57:8c:5d:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:A0:00:4A:BF:4C:C6:00:E6:0C:EA:72:01:4E:9B:2B:F0:FA:F2
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/LYmgAEq_TMYA5gzqcgFOmyvw-vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
47:d6:63:73:ae:7b:b2:3b:c7:b6:14:53:1f:49:d7:04:64:86:
ee:81:53:54:97:a1:11:2f:a5:57:9f:af:e1:7f:96:9a:ce:13:
23:5d:0f:72:71:90:06:2b:88:09:cd:f5:de:eb:c8:f7:ea:1f:
a0:4e:d8:43:40:23:03:a3:a3:01:f6:ae:78:6d:17:fe:47:4d:
3a:3a:80:1c:f1:79:f5:4b:83:ac:fd:dd:df:7e:fb:54:06:7f:
b6:16:e0:bb:9b:18:af:4b:ed:3f:98:a1:a7:48:d1:54:d0:c9:
c1:b2:c1:8a:c4:54:8a:09:3d:5a:80:56:90:68:64:43:3e:c7:
c9:54:d1:78:f8:29:fe:00:d5:12:70:70:9d:39:d9:9f:86:25:
bc:01:fe:fc:b4:42:d4:07:ac:26:51:57:cc:e7:34:0b:d4:e8:
86:83:62:48:7c:d6:02:9a:89:c9:ec:be:4a:91:0d:6e:f3:40:
48:51:66:f0:3d:b3:46:14:04:69:00:5e:7f:fc:0e:de:70:3c:
14:f4:ec:75:e3:08:fb:fc:9c:fc:9a:20:72:1e:e4:27:fa:aa:
69:57:5f:a0:83:3b:bc:b8:a0:41:10:06:74:49:43:a1:b2:6f:
73:0e:03:2d:0a:27:e0:48:9d:c2:b7:1b:d1:10:43:94:9d:16:
4e:f6:fa:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:56:55 2025 by rpki-client