Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yo3_6c_9wTD5Sa-S5JKxPITt-rc.roa
File: yo3_6c_9wTD5Sa-S5JKxPITt-rc.roa (raw, json)
Hash identifier: YwQgKfpz/xyPEmKvh/Zn163gBi0DZrvphjYzayv9xt4=
Subject key identifier: CA:8D:FF:E9:CF:FD:C1:30:F9:49:AF:92:E4:92:B1:3C:84:ED:FA:B7
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197828759C61676F868243D08BD8E07E602
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yo3_6c_9wTD5Sa-S5JKxPITt-rc.roa
Signing time: Wed 18 Jun 2025 10:13:17 +0000
ROA not before: Wed 18 Jun 2025 10:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Jun 2025 11:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:87:59:c6:16:76:f8:68:24:3d:08:bd:8e:07:e6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 18 10:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca8dffe9cffdc130f949af92e492b13c84edfab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:5c:f7:f0:87:1b:1d:18:ba:69:3c:a8:63:
3f:47:74:58:70:45:c3:32:35:ec:20:05:7b:ee:9d:
c6:a1:66:cf:b2:26:7d:7d:44:32:fd:aa:a9:dc:b9:
69:78:bf:f6:5f:22:d6:78:61:48:d8:0e:be:49:11:
ed:aa:b0:f2:12:8e:75:ad:cd:a5:49:34:d6:53:e7:
00:f0:4c:16:14:7e:c4:4a:30:5c:86:90:25:fb:72:
eb:7b:06:ff:40:5c:c6:08:97:12:43:9d:b1:67:e0:
58:23:a4:58:0f:31:0d:ce:7f:19:ab:7c:59:7f:87:
65:f6:10:88:68:bf:e1:db:08:be:11:68:05:b4:56:
91:c4:38:b2:e2:5d:67:40:53:13:66:8e:b7:02:2a:
55:9b:0a:bd:fb:0f:70:7c:43:16:cb:4e:3c:9b:57:
ee:54:0f:4f:4d:04:e4:da:bc:9b:90:51:fb:b1:63:
8b:a0:b2:8a:67:e5:80:31:9e:66:48:c7:87:4c:9d:
5e:f1:ed:40:5d:d4:0f:23:d3:5e:99:10:6a:38:0c:
4f:5f:1b:ab:db:13:80:c3:76:e8:ef:a9:d3:b9:b8:
fe:8f:d7:be:3c:63:77:35:f9:5f:9e:64:a9:be:ac:
c0:14:bb:bf:15:5c:2b:36:d1:86:09:92:33:ea:aa:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8D:FF:E9:CF:FD:C1:30:F9:49:AF:92:E4:92:B1:3C:84:ED:FA:B7
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yo3_6c_9wTD5Sa-S5JKxPITt-rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
14:c7:18:41:84:8e:7f:7d:d8:c0:7b:d8:f0:66:b2:9f:49:72:
75:13:29:b6:08:c6:22:8d:37:64:b4:27:0d:16:1a:92:b0:ea:
fd:54:a3:41:4c:a6:a0:e3:c7:9a:15:67:86:79:a0:1a:b7:fa:
67:34:10:5b:bf:f0:7b:71:3c:a9:f6:18:6e:f0:fa:27:52:26:
63:5b:80:f3:be:30:39:38:59:5b:c3:d2:56:28:a0:c8:1b:63:
ac:82:40:50:a7:40:8e:9c:df:af:8e:6f:48:f8:37:00:c1:72:
4a:47:57:85:c1:e1:a8:42:3d:12:22:87:29:1e:16:ed:00:7a:
c7:60:93:5a:5f:53:17:57:eb:d3:75:33:51:5f:61:d4:f7:7e:
0e:4c:e8:83:48:6d:54:62:84:15:e6:f9:dc:05:c3:d8:18:25:
32:60:1f:69:60:77:ed:c4:d1:f6:5e:c1:04:aa:8a:2d:fd:c1:
0d:9e:75:f8:ec:a9:7e:f3:73:a8:18:6e:ea:73:11:c1:fb:e5:
fe:d8:b1:22:ea:5e:ed:67:a5:30:2d:dc:93:cd:88:95:74:17:
0a:b2:44:28:17:ee:ed:24:b6:52:91:1d:7b:bb:c4:06:84:9d:
44:8c:80:ba:fb:93:d5:10:f8:e1:47:88:bc:bd:d2:ae:45:5e:
b2:0f:27:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:16:22 2025 by rpki-client