Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yBcv9BrWkrrb335qnFOL5qYwWbM.roa
File: yBcv9BrWkrrb335qnFOL5qYwWbM.roa (raw, json)
Hash identifier: iaTTLvxW5dD8VtFzL8QCssLnEbQSU/FIxRy2QonDRUM=
Subject key identifier: C8:17:2F:F4:1A:D6:92:BA:DB:DF:7E:6A:9C:53:8B:E6:A6:30:59:B3
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C7D6A658F0E93ACD71BFD3A48682A14B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yBcv9BrWkrrb335qnFOL5qYwWbM.roa
Signing time: Tue 01 Jul 2025 21:13:42 +0000
ROA not before: Tue 01 Jul 2025 21:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 22:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:d6:a6:58:f0:e9:3a:cd:71:bf:d3:a4:86:82:a1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 21:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8172ff41ad692badbdf7e6a9c538be6a63059b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:cf:3f:c5:17:13:68:a8:42:fb:bb:13:71:
38:f6:54:81:93:82:e5:55:73:f5:67:3a:5e:e3:79:
c5:3b:8c:22:b2:5b:ee:6f:7d:95:28:20:c8:4c:e8:
33:06:f8:66:92:5e:ba:ee:14:f6:b6:6c:57:ba:ea:
c8:6a:17:5e:43:52:76:44:9d:b2:be:23:0d:5f:5e:
a4:f1:80:a6:1b:62:25:73:56:0b:89:c2:aa:d9:26:
22:ab:81:bc:8d:8a:8d:9b:4b:10:ed:43:75:05:3d:
05:3a:57:15:9b:02:fa:5c:57:cc:4c:18:ce:aa:37:
4a:a9:a5:9f:11:f1:7a:9d:b5:0b:b2:2b:5f:a5:99:
d2:26:55:56:0a:5a:bf:4a:fd:c6:36:35:7e:02:c8:
17:48:08:9e:ab:ae:0f:88:e7:85:f0:99:ba:d1:dc:
4f:db:fc:9a:76:9a:5f:a2:25:37:9a:1a:e2:a5:a2:
44:a9:61:52:f5:b3:19:9f:dd:b7:bf:5e:0c:81:9f:
ab:00:0d:c8:b2:00:fc:70:f0:06:d6:49:ad:f0:c0:
78:ba:da:01:eb:be:fd:93:4a:d3:37:a6:1b:6d:8d:
e9:28:e4:19:3b:35:0e:bb:7f:28:d5:20:59:7e:2b:
6c:78:22:43:a3:cc:fb:86:be:79:34:40:24:81:95:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:17:2F:F4:1A:D6:92:BA:DB:DF:7E:6A:9C:53:8B:E6:A6:30:59:B3
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yBcv9BrWkrrb335qnFOL5qYwWbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
20:49:1e:e3:32:7d:34:5e:80:cc:e7:66:3b:e1:3a:c9:cf:af:
4d:69:99:72:fe:67:89:ba:5d:d0:33:51:1b:d0:90:61:14:73:
6f:cb:09:ce:5a:fe:f5:c3:05:6d:f4:e0:aa:63:bd:1e:80:9c:
bd:eb:75:f1:ea:d5:b6:9e:2f:43:07:c9:ec:df:f4:fa:f9:df:
bc:b8:f3:1b:83:f8:29:ef:46:48:8c:69:c8:13:fc:ad:41:cc:
ac:64:31:dd:81:0c:a9:bc:7d:e7:eb:00:6b:1a:1e:bd:d3:93:
5b:7d:cc:56:fc:79:9b:5c:ae:64:3d:a3:90:e7:5c:55:10:0a:
a2:f0:64:d0:a5:d1:47:0e:7b:f2:8a:96:44:5f:e4:29:79:00:
4b:10:fc:9d:b8:f8:8c:41:e2:26:0e:bb:24:c4:b0:fe:72:f3:
6e:5c:c7:a9:5f:ad:be:0e:f6:e7:d1:11:2f:db:0f:19:de:b6:
7f:a9:a6:fc:f7:a1:50:e9:22:d0:60:47:ba:c1:db:61:db:1f:
b6:5c:2e:f2:e8:9f:90:71:73:11:83:44:2c:02:00:aa:6b:35:
50:1e:88:bf:6c:07:85:6e:c1:46:b1:2e:22:ea:c9:a4:ea:c0:
a2:f8:5c:71:37:95:ae:b4:bd:8f:43:c1:53:26:69:40:81:2d:
02:66:e5:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:05:59 2025 by rpki-client