Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Yjl-rWBZ2B2BoyfnQ6ydrPdjR68.roa
File: Yjl-rWBZ2B2BoyfnQ6ydrPdjR68.roa (raw, json)
Hash identifier: TRdz4lsxky76SEl8AyGagndGs0ujWcCT+V6iUOZOGSY=
Subject key identifier: 62:39:7E:AD:60:59:D8:1D:81:A3:27:E7:43:AC:9D:AC:F7:63:47:AF
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A8B8A4BD100522E9715E9C51F0B0449B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Yjl-rWBZ2B2BoyfnQ6ydrPdjR68.roa
Signing time: Wed 25 Jun 2025 20:12:42 +0000
ROA not before: Wed 25 Jun 2025 20:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 21:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:b8:a4:bd:10:05:22:e9:71:5e:9c:51:f0:b0:44:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 20:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62397ead6059d81d81a327e743ac9dacf76347af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:e1:a4:83:ff:f9:d9:f2:4e:a2:8f:ba:da:
d0:ba:1b:53:42:7f:41:17:c9:24:6d:e4:fc:6b:55:
37:43:e0:80:e4:b0:ef:9a:a1:e9:78:16:12:2d:90:
af:33:6f:ac:39:bc:54:0a:da:b4:68:d8:a9:a2:52:
28:a0:04:e8:6a:ce:5a:4e:42:02:02:6e:fd:49:71:
9c:4e:08:e6:ac:cf:bb:2c:86:7a:6b:e9:e3:92:80:
1b:2a:cd:d2:10:a3:b5:b9:dd:3a:6d:4c:26:77:e9:
70:33:c5:00:09:6c:d6:1a:b2:f9:09:08:d3:d6:e7:
af:38:8b:4b:b9:9f:e0:0a:51:26:43:2d:55:e6:5f:
a2:26:ed:09:3e:2f:57:6b:f0:aa:c5:69:16:88:01:
33:43:e8:79:2f:99:9b:87:85:6c:6b:7f:d8:d6:92:
1c:fc:aa:58:35:3a:ec:dc:e2:39:15:bf:dd:e7:b7:
80:e4:71:17:80:45:55:fa:b3:91:56:cd:64:b3:71:
38:9c:04:fc:3b:45:1c:4f:94:d0:95:a8:28:66:2e:
bd:71:6d:3b:fd:55:84:1c:ea:f4:cd:fd:18:93:ed:
2d:58:a6:65:06:ce:9e:b4:75:d0:58:7d:fb:b8:4e:
4d:fe:e4:26:94:f3:b3:5c:80:a6:ec:74:85:bd:ce:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:39:7E:AD:60:59:D8:1D:81:A3:27:E7:43:AC:9D:AC:F7:63:47:AF
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Yjl-rWBZ2B2BoyfnQ6ydrPdjR68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4f:c2:82:7d:cc:96:b1:58:ec:b2:d5:56:95:64:2f:04:eb:8d:
81:f6:55:ce:4c:54:9c:14:24:1e:a0:a2:41:bb:70:5b:42:16:
16:71:40:5b:d2:fa:38:64:cd:03:44:27:a1:f1:c6:ec:92:c7:
43:af:a9:38:da:95:9a:51:9e:e9:29:ad:c2:af:3f:b4:39:7e:
22:5c:71:ec:62:ed:d6:78:4e:4e:a4:98:09:c1:0f:c6:77:af:
56:e0:6c:de:3f:3d:e9:65:dd:23:64:5d:5c:ee:3b:a4:cb:c2:
bf:e7:73:46:f4:69:c0:f4:e1:45:38:a3:7d:21:7e:ca:03:6b:
2f:9b:87:b0:b9:20:49:92:6d:9e:1b:a6:54:cb:72:ea:75:c1:
db:a7:a5:b3:e4:a2:ab:a7:32:32:0f:7d:ee:dc:f8:2c:54:7f:
0a:53:61:fb:e5:6b:fa:f4:21:2b:72:a6:86:f5:64:36:4f:9f:
7f:8b:38:09:ad:d1:74:f2:ea:56:35:02:38:b6:61:e9:a3:8a:
28:e1:d0:7b:6a:a8:3f:88:22:a0:e7:bd:44:27:c7:60:fb:cb:
04:37:2d:79:10:70:bb:d4:27:dd:f1:ff:63:eb:03:0c:18:64:
11:90:e7:41:bb:f2:3d:23:ec:0c:fb:f4:43:90:68:51:df:05:
89:eb:37:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:53:48 2025 by rpki-client