Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yNHYf1Ex4_1zlB8pULEeLo0aLpE.roa
File: yNHYf1Ex4_1zlB8pULEeLo0aLpE.roa (raw, json)
Hash identifier: O5TS4cTsKcCDUvccoobm15EtHX3+HI54q4M8Q1XPEz0=
Subject key identifier: C8:D1:D8:7F:51:31:E3:FD:73:94:1F:29:50:B1:1E:2E:8D:1A:2E:91
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019780980D551E6BFBDA056C36D827358156
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yNHYf1Ex4_1zlB8pULEeLo0aLpE.roa
Signing time: Wed 18 Jun 2025 01:12:17 +0000
ROA not before: Wed 18 Jun 2025 01:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Jun 2025 02:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:98:0d:55:1e:6b:fb:da:05:6c:36:d8:27:35:81:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 18 01:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8d1d87f5131e3fd73941f2950b11e2e8d1a2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:12:7b:88:e3:49:5c:7a:13:69:67:87:3b:
af:fd:81:7a:3c:dc:d1:53:b9:fa:96:3b:46:d7:da:
f4:18:46:35:43:b5:b3:c4:87:1a:8e:28:39:56:c5:
19:c1:5a:57:30:0b:69:0a:d7:b8:6b:f5:8c:ee:fc:
66:5f:9e:be:c8:eb:3f:dd:16:4d:7b:27:42:89:bb:
8e:6d:1c:d8:74:9e:74:15:9e:f4:6f:95:87:4c:c3:
24:57:c4:7a:88:5b:bc:a9:9a:f6:be:ee:6f:c0:b4:
46:94:f4:72:11:05:d5:3b:59:a1:f1:a9:d6:f8:0a:
ca:05:bf:33:a8:f1:fa:7f:61:76:f0:90:71:76:19:
3a:31:47:78:7a:97:d5:f8:81:93:00:8e:f3:b3:81:
55:a3:e6:c0:5f:20:ff:f2:01:3a:d4:c3:9a:e6:d3:
3e:c7:6c:39:73:39:a7:cf:05:31:e3:e2:89:dd:21:
f3:fc:7a:cc:b0:cd:1a:42:49:13:dd:fa:50:58:44:
3a:34:5f:33:cc:ff:0a:37:f2:64:c5:d6:66:74:cd:
8d:8b:e7:4d:4a:a0:39:0f:d1:65:47:bb:ba:9c:49:
a1:2e:c5:f3:af:a2:1a:ff:c6:45:03:2d:e7:32:67:
63:2d:ab:58:3d:ac:bb:ff:fa:c4:83:29:44:0a:0c:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D1:D8:7F:51:31:E3:FD:73:94:1F:29:50:B1:1E:2E:8D:1A:2E:91
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yNHYf1Ex4_1zlB8pULEeLo0aLpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
26:f2:dd:6b:84:62:0d:27:4f:5c:84:e9:4a:e7:a0:e0:68:94:
44:2c:28:2d:8a:1c:a7:28:01:97:c2:87:4d:49:94:29:ca:e2:
5d:bd:c8:a4:2d:6a:1d:e8:50:3c:9f:32:fb:4a:8e:1c:a3:2e:
f8:84:ab:0f:f6:1a:f3:eb:35:01:f8:ac:0e:29:a0:4d:73:48:
ea:6d:50:42:72:a7:0a:2e:b1:32:32:cd:ae:4a:e1:b6:5a:51:
4d:47:b5:65:e9:b4:42:37:28:4e:3c:e9:59:ef:6b:66:8b:1b:
99:69:e0:23:59:5e:5c:7c:0a:80:46:a1:b7:20:76:40:2e:89:
e5:5e:fc:c4:3f:c2:a8:07:6d:93:c0:c1:c2:3c:bf:ca:c6:d0:
41:3d:d9:0e:c2:3a:46:62:35:c5:c9:c2:43:79:65:f3:fd:af:
98:28:49:ef:70:41:78:70:dd:7e:92:5f:17:77:50:aa:35:17:
a3:b0:de:ac:52:b4:55:d6:56:42:34:49:cb:39:0e:ec:40:ed:
f0:49:5a:1c:f4:74:a3:ec:73:07:cc:78:8f:d4:16:67:bd:12:
fe:eb:ca:d7:72:d6:ae:2f:ee:85:5c:c0:ce:eb:ea:0a:5c:eb:
f4:3b:b3:c6:56:1f:95:93:3a:a3:7b:49:fc:f9:b3:55:79:ee:
4e:e4:56:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:28:34 2025 by rpki-client