Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yyaGmfZPfLAYKUnMwXvfGLvreUk.roa
File: yyaGmfZPfLAYKUnMwXvfGLvreUk.roa (raw, json)
Hash identifier: 5hDCTEdFAzKJKABebr62q24F8CKGTnfb/fjQatgTU4Y=
Subject key identifier: CB:26:86:99:F6:4F:7C:B0:18:29:49:CC:C1:7B:DF:18:BB:EB:79:49
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978AB31C7E03039A7B39A5532B5F4E410A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yyaGmfZPfLAYKUnMwXvfGLvreUk.roa
Signing time: Fri 20 Jun 2025 00:18:03 +0000
ROA not before: Fri 20 Jun 2025 00:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 20 Jun 2025 01:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:b3:1c:7e:03:03:9a:7b:39:a5:53:2b:5f:4e:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 20 00:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb268699f64f7cb0182949ccc17bdf18bbeb7949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:70:60:0b:d7:db:8e:d5:b4:a2:ed:eb:8c:
80:e2:10:58:1f:c5:f9:c1:d5:0c:b9:63:fe:62:6d:
cc:94:b8:aa:62:7c:7a:2a:0d:9d:ac:01:e0:de:87:
49:64:43:cf:44:48:02:8f:27:b3:cd:fb:f8:0b:cf:
82:8b:53:f2:b6:dc:2f:c5:2c:6e:4d:44:bd:6f:f8:
56:51:23:b8:82:5e:78:f2:e1:dd:97:9f:5b:41:f4:
a9:7b:d4:bb:d7:6c:00:83:96:f2:1f:d5:d0:94:e5:
75:a3:b7:40:97:67:fd:eb:1d:66:d1:7b:67:52:07:
a1:63:d0:6c:84:28:c4:f7:56:1a:aa:4e:e9:56:9a:
64:16:c0:37:86:ce:c9:c2:15:84:9c:08:78:36:8c:
26:90:d0:c4:3b:46:f0:1d:4a:c6:91:5f:34:3d:22:
1c:d3:68:0f:64:67:f0:d2:6a:96:6e:19:67:0d:8c:
e6:2c:8c:77:7e:f6:a1:1f:5f:bc:87:6d:58:a8:18:
03:bc:c2:5a:2d:5c:3e:b2:bb:63:a0:a3:e6:dd:bc:
6a:df:a3:47:a7:81:c6:15:3d:df:83:4c:20:46:78:
9d:0a:8a:01:aa:39:f5:7c:28:c3:5a:02:07:33:a0:
5f:ec:71:3c:e2:fe:bc:20:2b:15:64:5c:ed:22:2c:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:26:86:99:F6:4F:7C:B0:18:29:49:CC:C1:7B:DF:18:BB:EB:79:49
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/yyaGmfZPfLAYKUnMwXvfGLvreUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
67:48:86:c5:ee:1e:9a:ef:7b:e5:2c:72:c2:75:a3:c6:0b:c5:
bd:f8:f8:7d:3f:e2:8b:bd:11:7c:46:53:3d:a7:c9:ed:fd:6f:
5f:83:cd:00:88:74:65:a4:1d:d2:3e:01:51:68:3d:38:92:52:
ce:82:28:b3:0c:82:cf:87:36:e1:3e:ee:c7:ca:8d:68:f4:6b:
b9:ca:db:d1:bd:12:a9:62:03:e3:1c:b5:59:a6:75:50:b5:cb:
40:27:ec:a9:c9:34:60:e4:89:7f:d8:30:a2:97:3a:41:97:70:
27:34:42:de:c3:bc:62:3c:a7:53:42:c4:4a:c2:35:14:4b:19:
d6:dd:35:72:04:54:1e:40:8e:63:2d:5a:76:e6:54:01:53:38:
87:b7:8b:37:bb:d1:80:2b:c7:88:7d:20:53:ea:6e:90:77:ff:
37:fc:a1:b0:c4:74:66:31:4b:6a:0e:5e:d1:e3:25:14:74:bd:
54:b6:27:64:d6:7a:4f:d4:cb:d4:52:f8:5c:67:7d:62:94:51:
45:7a:8c:ac:19:4e:a3:e6:0e:31:72:81:98:cc:d8:57:46:99:
ba:20:d5:fd:a4:f8:f1:a4:77:c7:e9:30:12:13:33:da:a6:13:
7e:e8:3c:11:78:8c:66:dd:ce:b0:b2:5f:12:e6:3d:d0:3a:3b:
a5:78:60:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:13:09 2025 by rpki-client