Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/YyvGDxHHri0zS4ZTIiFk_t8f7to.roa
File: YyvGDxHHri0zS4ZTIiFk_t8f7to.roa (raw, json)
Hash identifier: PwHnXXesQiW7MtaJBfSJk87RDYsibaNM+bV3/Wo6HXQ=
Subject key identifier: 63:2B:C6:0F:11:C7:AE:2D:33:4B:86:53:22:21:64:FE:DF:1F:EE:DA
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979C0FFEC7A4128493BE4BC995CA619AD9
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/YyvGDxHHri0zS4ZTIiFk_t8f7to.roa
Signing time: Mon 23 Jun 2025 09:13:03 +0000
ROA not before: Mon 23 Jun 2025 09:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 10:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:0f:fe:c7:a4:12:84:93:be:4b:c9:95:ca:61:9a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 09:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=632bc60f11c7ae2d334b8653222164fedf1feeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:c7:45:d5:4c:2c:cb:69:e9:38:94:60:32:
38:08:37:02:55:52:f9:d7:c0:62:e2:3c:e4:c6:69:
c2:83:0e:56:93:8e:3f:aa:fc:9b:25:f7:3c:cd:4e:
c2:a0:1e:ca:16:3e:77:38:f1:4e:91:03:64:b8:61:
7b:25:05:8b:bb:38:4f:ea:e9:9c:25:6f:f7:bb:e4:
0e:d7:60:3e:76:fa:47:09:d6:9e:91:e8:25:6a:6b:
c4:67:47:e6:15:0c:ca:bd:36:bf:5c:20:a0:31:72:
f6:62:95:f9:2b:46:86:41:21:7c:12:4b:0b:fa:d2:
cd:e2:9d:4c:59:cc:6f:b4:e2:43:f7:41:19:e7:86:
c1:09:4b:da:9c:39:fc:76:76:29:6a:33:40:a2:3f:
14:bc:ea:47:09:c1:c2:82:dd:1f:6a:03:87:df:15:
3a:c4:68:48:4e:f6:b8:6d:53:55:ce:f3:71:da:a4:
16:86:d7:e1:aa:84:a4:4a:d7:f7:d8:62:aa:6f:34:
8e:50:8b:40:18:d1:ea:67:9b:2b:ec:11:1e:c0:4e:
4b:2f:0c:cf:e0:94:cf:1e:f9:0e:e5:da:0b:38:3f:
eb:5f:75:47:a2:ae:60:8d:8f:a2:f6:b7:3c:b3:92:
9f:1a:1a:5c:d2:6a:61:ec:17:fb:b3:a9:10:c1:f5:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:C6:0F:11:C7:AE:2D:33:4B:86:53:22:21:64:FE:DF:1F:EE:DA
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/YyvGDxHHri0zS4ZTIiFk_t8f7to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
24:aa:79:42:e0:a2:63:75:7d:d6:fd:97:1c:fe:ae:c0:06:1f:
b0:fa:8a:68:fb:4d:71:ac:15:5b:b8:6d:b8:47:ba:7d:7c:1c:
8f:00:1b:5f:4b:04:ff:ba:54:75:48:14:5f:59:81:41:94:c6:
72:b3:b8:e2:40:e6:42:c5:b8:a3:b3:71:0d:57:d3:37:82:c4:
33:82:42:50:8d:67:3d:67:d7:83:9c:32:d9:31:e4:fd:85:0b:
dd:c1:ce:45:c5:da:cc:e1:87:83:6a:c8:4d:51:3c:5c:85:cc:
46:1d:c0:b6:02:80:b5:71:5b:d2:35:8f:29:34:5e:02:a5:b2:
17:6d:d9:1e:31:52:26:6a:de:af:af:10:55:51:65:0b:37:a6:
d7:72:57:fb:81:65:60:85:8b:47:2a:0b:25:55:53:d8:75:59:
86:64:9a:7a:cd:62:f9:05:39:16:ed:fe:c8:58:e5:ee:e8:f6:
46:c4:9a:ed:4d:4a:e3:6a:a1:47:59:1b:46:ff:ec:a9:11:7d:
6c:37:d9:44:17:70:a0:9f:00:06:02:f7:fd:92:5c:87:93:9b:
d2:b1:7f:48:de:3d:04:b2:26:69:5e:06:bb:d4:b8:78:be:33:
1c:42:9f:9f:73:d9:04:b1:6d:67:46:70:99:c6:40:15:d6:4f:
ed:a0:c3:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:40:32 2025 by rpki-client