Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ycndqDZwr5KYHAScIzNKnOi-6W4.roa
File: ycndqDZwr5KYHAScIzNKnOi-6W4.roa (raw, json)
Hash identifier: idqNNqpsGMgRLP/VVb3W6oMwJftka/f7KmuB6ZAEZ2g=
Subject key identifier: C9:C9:DD:A8:36:70:AF:92:98:1C:04:9C:23:33:4A:9C:E8:BE:E9:6E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197731270B19BA6D924E74015E2897E833E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ycndqDZwr5KYHAScIzNKnOi-6W4.roa
Signing time: Sun 15 Jun 2025 10:11:17 +0000
ROA not before: Sun 15 Jun 2025 10:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 11:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:12:70:b1:9b:a6:d9:24:e7:40:15:e2:89:7e:83:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 10:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c9dda83670af92981c049c23334a9ce8bee96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:f1:3e:3c:96:95:22:c5:b8:be:a5:d5:57:
94:8e:fc:ce:53:51:91:58:87:7e:c6:79:89:aa:0a:
29:fc:61:46:8b:cd:be:93:7e:e2:ef:da:45:b4:85:
6e:a4:d0:83:43:81:b6:a6:ce:6c:51:a0:a4:90:34:
1b:9a:04:ec:c0:75:a7:4c:3d:1a:31:ec:c2:33:8e:
1c:24:e1:29:1c:34:a7:60:47:b4:f2:7e:00:ba:7d:
4f:b0:aa:7f:52:93:36:75:aa:e4:9c:ed:c2:9b:ea:
cc:b7:97:29:b4:e2:90:16:45:54:76:56:b9:13:df:
2a:cf:55:99:05:16:fc:04:b3:01:b0:88:cd:28:3e:
60:54:53:0f:a4:6f:98:88:93:5c:3f:1f:c4:5e:cb:
eb:5f:f0:40:38:a7:cd:82:66:40:a7:a7:30:9d:83:
2f:20:69:be:de:ee:ff:21:24:52:9f:7f:7d:2e:0f:
0e:39:82:51:9d:18:f8:66:6a:ea:75:80:25:99:58:
4c:92:fb:41:37:17:56:22:13:b6:d8:d2:3c:cb:62:
33:52:4c:69:47:8d:07:6c:ce:28:44:33:0a:ec:ba:
cc:0e:9b:76:42:32:53:bf:b4:74:a0:7d:a4:94:bd:
31:9d:98:05:56:32:a0:b4:8f:6a:c1:23:41:47:3c:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:DD:A8:36:70:AF:92:98:1C:04:9C:23:33:4A:9C:E8:BE:E9:6E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ycndqDZwr5KYHAScIzNKnOi-6W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
81:73:eb:e7:48:f2:b5:b0:3a:ec:73:44:81:ba:8d:db:4d:5d:
61:d5:30:17:6d:5a:31:55:06:27:6f:90:f1:c0:a8:2b:78:ef:
35:f9:bb:64:ff:1f:79:32:41:8f:4b:78:e1:bd:6f:f1:35:1c:
8b:8f:e4:47:40:57:f7:83:4c:b2:92:5b:ba:a7:10:80:75:65:
a1:70:06:65:eb:c5:a8:d5:a7:76:83:83:bb:37:31:c8:c8:6a:
19:13:3f:ea:46:26:63:28:de:f1:ca:c2:61:99:0a:40:a7:45:
9f:a0:eb:13:88:1b:ba:c4:9f:5e:e8:1a:e4:f5:a7:6b:d3:3a:
8e:60:cc:d8:5b:57:42:db:ba:fd:ec:36:1b:1c:c4:16:24:87:
b1:ad:33:11:f9:8e:c0:07:46:5a:f6:6f:ea:40:c7:ab:38:80:
04:f9:d7:37:65:93:7b:48:4a:fc:0d:27:02:9b:ab:0c:d6:62:
d1:b6:01:e3:02:6a:60:f3:61:0f:ea:93:85:64:5b:19:d5:b9:
7b:66:bf:81:62:05:09:60:19:c1:92:56:2b:dc:24:b2:7e:3e:
00:a5:14:2f:93:ac:7e:27:6e:85:bb:4a:31:98:2a:bb:d7:dd:
d2:db:2b:bf:15:a8:ad:04:a6:ae:bb:1a:c4:df:57:a3:cc:90:
0d:bd:5b:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:00:05 2025 by rpki-client