Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yxWy-uMlN9OQAhL9PwCMYZGNwOA.roa
File: yxWy-uMlN9OQAhL9PwCMYZGNwOA.roa (raw, json)
Hash identifier: kY6KyXWLnaZepiA4odaX4wEaB85xGHdTRz+Y5Buyli4=
Subject key identifier: CB:15:B2:FA:E3:25:37:D3:90:02:12:FD:3F:00:8C:61:91:8D:C0:E0
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977FF341E3E5D1A033C70F7F14B4BA8BF4
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yxWy-uMlN9OQAhL9PwCMYZGNwOA.roa
Signing time: Tue 17 Jun 2025 22:12:17 +0000
ROA not before: Tue 17 Jun 2025 22:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 17 Jun 2025 23:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:f3:41:e3:e5:d1:a0:33:c7:0f:7f:14:b4:ba:8b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 17 22:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb15b2fae32537d3900212fd3f008c61918dc0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:4c:54:9b:ad:a1:82:5f:f7:a2:ee:03:94:
cf:f9:02:be:cb:60:89:e0:09:de:fd:e1:b5:cd:ac:
8f:22:a3:77:d2:ea:8c:e1:e0:48:e1:9b:c8:ef:01:
b2:59:ae:3e:ad:56:d9:58:96:72:c5:f0:b5:db:2f:
5b:69:25:a5:eb:53:11:18:fc:dc:d6:a5:92:ab:de:
83:d0:56:a0:7d:11:28:11:95:13:a1:bd:fa:4c:22:
5e:90:ae:c8:61:29:64:3d:6f:b3:c3:41:e4:40:83:
b6:65:b3:11:01:f6:44:2f:0e:4a:41:97:be:8a:e7:
b7:da:67:4d:43:7e:9f:66:1f:60:04:c6:52:a5:1c:
6f:28:48:a5:8c:3c:25:96:4d:69:66:63:18:31:60:
83:13:31:3b:4e:5c:27:2b:18:d5:98:72:5b:d4:86:
88:73:3c:60:2b:89:65:a6:41:f7:3c:0f:4d:a4:9b:
90:79:43:84:91:83:11:a9:3a:b0:79:6a:17:0e:1c:
ff:3a:fb:67:63:a1:ee:6c:26:7d:c2:d4:c6:bf:e0:
5d:da:9f:0f:53:85:79:fb:41:4c:13:ab:25:55:de:
28:fe:14:83:d6:89:43:7d:c0:62:01:79:7a:21:05:
a7:87:bc:78:90:63:c3:71:c0:8c:fb:bc:10:48:bc:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:B2:FA:E3:25:37:D3:90:02:12:FD:3F:00:8C:61:91:8D:C0:E0
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yxWy-uMlN9OQAhL9PwCMYZGNwOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
19:8e:d9:bf:e8:ee:9e:01:eb:87:b8:00:d4:22:71:19:99:44:
b3:45:24:07:af:6b:80:0c:42:68:0e:a4:60:27:e6:3e:60:2d:
60:22:c3:80:f9:54:47:56:37:99:b7:8b:d9:2b:7b:8a:42:5e:
93:dc:d3:d3:7b:df:1b:87:fc:76:f6:96:3f:34:f6:68:a8:96:
57:b2:0d:51:e7:13:79:b8:5b:fc:76:b1:e5:5b:a4:8d:10:63:
d6:93:7f:ca:a4:a8:3e:4b:cc:ab:97:45:cb:9c:fd:0a:cc:a2:
60:59:f8:6f:be:8f:b2:7a:fc:60:8e:4c:10:ee:3e:15:58:0b:
27:54:e7:66:98:72:e6:53:6d:89:b1:91:9f:ce:06:a6:08:ed:
60:f5:7f:d1:1e:9f:36:80:ee:c0:fe:24:8e:b0:09:af:97:4c:
14:d2:08:ac:7f:13:8f:ce:a4:4c:c1:d7:a6:e1:8b:b8:af:21:
5b:a1:7c:07:55:9e:24:ab:3f:ad:f6:12:33:fe:72:0a:73:c6:
80:d1:f2:ef:66:2e:c5:25:c0:e8:d4:0e:68:6b:ea:de:24:56:
05:6e:49:02:da:3e:70:c2:10:75:12:23:2a:59:81:d5:6e:c7:
c9:6c:8a:5b:8e:d6:40:1f:03:78:0e:1f:32:c9:a9:81:bb:1d:
ba:fb:51:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:27:02 2025 by rpki-client