Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/Yd6RH6f6ekFSZklH5BTb9CKyWeM.roa
File: Yd6RH6f6ekFSZklH5BTb9CKyWeM.roa (raw, json)
Hash identifier: ydOajYEM5cYH5TED7J6JZ7Hw1ta/M/Cwk97l9q+EFPE=
Subject key identifier: 61:DE:91:1F:A7:FA:7A:41:52:66:49:47:E4:14:DB:F4:22:B2:59:E3
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 0195EC613A823FAB215FFA559D8B4B459D6F
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/Yd6RH6f6ekFSZklH5BTb9CKyWeM.roa
Signing time: Mon 31 Mar 2025 13:25:49 +0000
ROA not before: Mon 31 Mar 2025 13:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25180
IP address blocks: 195.60.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 11 Apr 2025 13:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:61:3a:82:3f:ab:21:5f:fa:55:9d:8b:4b:45:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Mar 31 13:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61de911fa7fa7a4152664947e414dbf422b259e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:22:29:64:08:f4:36:9d:65:b4:8f:71:63:
b8:70:42:3f:db:65:5d:ac:8b:a5:7a:a1:cb:63:db:
28:51:a4:6c:4e:b2:58:62:33:97:ee:60:a1:ce:56:
92:a5:55:3c:68:b2:bb:ce:db:78:b8:35:1a:85:54:
21:c1:c2:8f:93:98:18:39:10:44:a3:b2:9e:28:ea:
8b:be:73:7f:1b:34:9a:30:22:fe:b5:fb:6d:1c:c3:
1f:d1:cc:49:2e:80:6e:76:32:47:a4:f9:9b:c2:b6:
39:b8:11:e3:6a:fe:cf:d8:23:d6:16:12:79:36:08:
e0:b4:25:aa:03:e1:9c:62:eb:66:b3:be:36:a4:22:
4b:38:71:64:31:a7:e4:1d:19:9c:b3:9a:32:fb:12:
ca:cf:aa:d5:8f:94:10:64:10:26:53:c9:1a:00:ce:
09:b9:eb:ef:80:01:f9:83:3c:5e:a8:1f:b0:90:8a:
66:6f:27:1a:9f:b7:35:15:7f:bc:4b:78:c5:5d:60:
c9:02:04:22:e5:10:26:b2:c1:bf:72:13:c7:21:46:
a6:4f:5d:86:9b:a9:4f:3f:60:43:c4:ea:71:46:f7:
25:bd:b9:f3:72:9d:14:d2:46:c4:15:e3:fb:59:54:
5c:30:56:f9:45:d9:a3:03:b2:09:0b:92:45:cd:04:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DE:91:1F:A7:FA:7A:41:52:66:49:47:E4:14:DB:F4:22:B2:59:E3
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/Yd6RH6f6ekFSZklH5BTb9CKyWeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.172.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:7c:93:04:93:57:2c:af:2a:1e:76:b4:c9:03:ed:df:21:2a:
07:27:bc:bb:8b:4a:f9:a8:56:1f:2e:6c:f7:1c:a4:cf:21:71:
20:5b:81:9a:5f:c2:5f:cb:9d:40:1a:c5:fb:6f:f5:66:d7:05:
0a:b6:cf:92:e8:87:67:6a:f4:8a:e0:b7:12:01:a3:2c:db:f4:
87:cf:80:ae:af:90:d9:60:d4:c8:b7:a2:98:87:65:c2:9c:86:
2c:7c:79:e2:4d:0c:4b:10:42:e1:36:51:8b:d5:3b:fc:79:d0:
b3:24:c6:90:5f:2a:30:f7:37:a7:f8:52:00:2f:5a:fe:16:a6:
94:9f:46:e7:98:b4:0a:3b:df:b5:c2:2e:4a:f0:c0:ae:e7:6f:
04:35:54:42:15:f7:a7:4f:50:ac:70:57:1f:7c:50:6f:dc:0a:
1c:f1:41:5b:13:cf:08:5c:97:28:da:8d:a8:26:27:19:b4:30:
96:5a:28:88:35:d2:d8:83:cb:99:19:60:3c:3c:23:1a:c4:ea:
10:02:98:7b:18:13:ee:7d:31:1e:81:c3:87:60:1a:65:5a:ee:
a6:f8:86:3f:a9:81:97:75:3f:fa:a2:1f:4c:6f:cf:99:19:fa:
08:69:cd:ad:41:0c:ab:33:85:eb:b4:d2:36:24:51:65:27:e2:
db:e9:0e:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXsYTqCP6shX/pVnYtLRZ1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI1ODYzYzMwOWYyNjU1Yjg4NGMxNjAwMzk0YzQzMzhl
N2ZiNDEwHhcNMjUwMzMxMTMyNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWRlOTExZmE3ZmE3YTQxNTI2NjQ5NDdlNDE0ZGJmNDIyYjI1OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4UiKWQI9DadZbSPcWO4cEI/22Vd
rIuleqHLY9soUaRsTrJYYjOX7mChzlaSpVU8aLK7ztt4uDUahVQhwcKPk5gYORBE
o7KeKOqLvnN/GzSaMCL+tfttHMMf0cxJLoBudjJHpPmbwrY5uBHjav7P2CPWFhJ5
NgjgtCWqA+GcYutms742pCJLOHFkMafkHRmcs5oy+xLKz6rVj5QQZBAmU8kaAM4J
uevvgAH5gzxeqB+wkIpmbycan7c1FX+8S3jFXWDJAgQi5RAmssG/chPHIUamT12G
m6lPP2BDxOpxRvclvbnzcp0U0kbEFeP7WVRcMFb5RdmjA7IJC5JFzQTNZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGHekR+n+npBUmZJR+QU2/QislnjMB8GA1UdIwQY
MBaAFCZCWGPDCfJlW4hMFgA5TEM45/tBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMt
YzE0ZjZiYTI1Y2IwLzEvWWQ2Ukg2ZjZla0ZTWmtsSDVCVGI5Q0t5V2VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMtYzE0ZjZiYTI1Y2Iw
LzEvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzysMA0G
CSqGSIb3DQEBCwUAA4IBAQBKfJMEk1csryoedrTJA+3fISoHJ7y7i0r5qFYfLmz3
HKTPIXEgW4GaX8Jfy51AGsX7b/Vm1wUKts+S6IdnavSK4LcSAaMs2/SHz4Cur5DZ
YNTIt6KYh2XCnIYsfHniTQxLEELhNlGL1Tv8edCzJMaQXyow9zen+FIAL1r+FqaU
n0bnmLQKO9+1wi5K8MCu528ENVRCFfenT1CscFcffFBv3Aoc8UFbE88IXJco2o2o
JicZtDCWWiiINdLYg8uZGWA8PCMaxOoQAph7GBPufTEegcOHYBplWu6m+IY/qYGX
dT/6oh9Mb8+ZGfoIac2tQQyrM4XrtNI2JFFlJ+Lb6Q7O
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:28:24 2025 by rpki-client