Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/jy-ahAafvgST4qx9BZV2eCK_F3g.roa
File: jy-ahAafvgST4qx9BZV2eCK_F3g.roa (raw, json)
Hash identifier: +zUYntABCr5rW+LlqVG43i3FVmlTqbZRlwySV2PuYFQ=
Subject key identifier: 8F:2F:9A:84:06:9F:BE:04:93:E2:AC:7D:05:95:76:78:22:BF:17:78
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BB9B8B5AA48662F45ACE39CE1C29D778
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/jy-ahAafvgST4qx9BZV2eCK_F3g.roa
Signing time: Sun 29 Jun 2025 12:13:42 +0000
ROA not before: Sun 29 Jun 2025 12:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 13:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:9b:8b:5a:a4:86:62:f4:5a:ce:39:ce:1c:29:d7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 12:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f2f9a84069fbe0493e2ac7d0595767822bf1778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:3a:a2:3c:ff:34:35:32:4f:01:76:08:74:
1f:b9:6a:51:fc:e8:97:e8:db:37:30:8d:6e:da:f2:
0e:c5:b2:ac:8e:55:1b:d0:47:9a:85:44:c5:66:81:
0f:22:45:aa:43:78:69:52:bc:e0:2d:fb:97:25:97:
e9:2c:1e:d0:e7:f6:e5:ae:25:fc:b9:66:22:89:5f:
af:1f:d1:98:9e:d4:e2:d8:55:8c:38:fd:37:d2:2b:
fc:1c:5b:06:85:a0:d5:03:08:d2:43:b2:91:8c:60:
a1:52:63:03:06:03:b3:3d:d8:b9:7d:26:40:17:43:
43:6e:1b:5e:93:dd:f3:03:e6:a3:ba:06:c6:9a:62:
f3:ac:31:83:09:53:0d:93:00:c5:54:55:59:e1:56:
46:c9:e5:17:25:98:3f:c0:2f:be:4f:d5:8a:46:76:
71:15:53:18:dc:bb:c7:e8:a5:5f:98:76:54:41:15:
6f:7b:69:85:cd:b3:d8:3d:09:8b:27:06:a5:8d:17:
58:9a:1b:73:0b:09:50:b9:ad:31:50:e6:6c:5c:32:
7c:15:64:27:35:e2:f1:da:6f:b5:cf:26:5c:75:34:
43:a4:35:10:e6:6b:7e:3c:04:36:d2:6f:e0:9a:7f:
90:96:11:ed:61:e3:59:aa:7f:a2:89:a0:bb:81:ff:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:9A:84:06:9F:BE:04:93:E2:AC:7D:05:95:76:78:22:BF:17:78
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/jy-ahAafvgST4qx9BZV2eCK_F3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
75:ea:62:43:94:e4:c4:a8:5c:9e:7c:55:e2:3e:52:a8:2c:15:
68:9c:ec:85:bf:64:06:b3:1a:41:9e:46:48:9a:89:91:4e:91:
44:01:80:8c:60:6a:78:e9:f5:40:38:6a:e0:3f:a8:08:66:fc:
9c:2f:bc:c2:d4:e5:b9:54:a8:8c:09:3b:2e:91:09:4e:a3:6c:
44:a7:f3:df:92:18:b3:db:ce:82:7d:44:ff:f3:e1:da:9b:02:
c1:01:6c:75:0c:2c:3f:92:7d:b6:28:4e:78:a4:50:a4:49:9b:
40:a8:e9:b3:a6:0c:81:be:b3:5f:0e:c8:a2:7b:5d:0e:7a:d3:
14:c0:0e:b9:a1:ce:1f:db:1d:35:6e:b6:63:ab:86:17:84:33:
a1:21:40:63:c3:f9:da:52:19:85:3d:6e:a3:8f:1f:b2:45:bf:
07:a3:a0:59:f6:df:9e:79:39:35:13:ef:59:94:66:c1:bc:34:
5a:0c:96:16:6e:c2:16:f9:88:27:4d:ad:4d:b8:42:d8:ad:4d:
ef:95:ed:b9:9c:e1:27:9f:9b:05:a9:b2:49:62:bf:41:74:a3:
3b:f2:c2:27:ca:76:7d:b0:ad:09:72:19:9c:7f:12:b3:a3:40:
45:08:44:47:97:3a:05:a6:58:3e:fb:ce:6d:89:8b:40:76:09:
5b:76:92:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:20:48 2025 by rpki-client