Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yqkbcu5FQ-2qrOFF_JVcGEr6MxY.roa
File: yqkbcu5FQ-2qrOFF_JVcGEr6MxY.roa (raw, json)
Hash identifier: ha0LIlqQkQk8x+cZ64mWW0Fr2PYXldas25qDyTCeKdo=
Subject key identifier: CA:A9:1B:72:EE:45:43:ED:AA:AC:E1:45:FC:95:5C:18:4A:FA:33:16
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01975170D33BADB397CBA07CBD42DD672875
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yqkbcu5FQ-2qrOFF_JVcGEr6MxY.roa
Signing time: Sun 08 Jun 2025 21:27:17 +0000
ROA not before: Sun 08 Jun 2025 21:27:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 20:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:70:d3:3b:ad:b3:97:cb:a0:7c:bd:42:dd:67:28:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 8 21:27:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa91b72ee4543edaaace145fc955c184afa3316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:5f:21:5d:13:42:53:01:1b:f9:bc:11:fc:
e7:98:56:d0:55:7f:9e:b5:02:24:2c:bb:4f:94:0b:
8d:9a:24:0c:b2:63:67:2a:37:54:6d:ec:2b:b2:9c:
39:b7:49:39:7b:47:f7:18:89:f4:f3:96:fa:36:4d:
50:ea:16:81:43:6d:84:65:2f:26:57:10:83:7b:ae:
3d:85:3a:1e:79:89:03:42:6f:44:e1:d6:dc:8a:2e:
21:63:c4:2d:ce:2f:cc:b1:6c:8e:40:50:e4:0e:20:
78:28:06:6c:98:d0:22:80:f9:e9:91:38:bf:e8:10:
c8:ca:81:4b:96:a4:89:65:6d:6f:7c:40:5a:0f:6c:
69:a2:ad:e3:f5:21:7b:75:61:d8:3d:a5:63:58:fc:
5d:71:99:62:1a:d7:ce:1f:57:95:97:ed:09:99:82:
c6:48:45:16:52:b3:56:6a:78:73:98:82:01:01:ce:
a8:cb:c5:28:5b:ba:25:bd:7a:80:8d:e3:ff:53:0e:
35:7c:84:49:fd:77:27:1a:1c:e4:4e:44:23:9f:b1:
aa:f3:4f:c3:94:21:63:1e:18:34:4b:e9:85:07:2d:
d0:12:34:52:fe:6f:75:69:47:8f:5a:f8:a2:dc:a7:
4e:e1:0f:1e:c0:22:49:85:b0:26:66:6c:77:51:e3:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A9:1B:72:EE:45:43:ED:AA:AC:E1:45:FC:95:5C:18:4A:FA:33:16
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yqkbcu5FQ-2qrOFF_JVcGEr6MxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
48:39:3f:8d:a6:4b:38:17:21:14:2d:5a:3a:28:8b:97:d9:f0:
dc:65:a6:2b:e8:ea:07:d9:d5:5c:1f:00:99:da:d3:c4:cb:7c:
dd:1f:4e:2a:b5:02:3c:1d:d0:71:ea:34:f5:88:85:fe:1a:b4:
e3:7a:86:60:08:80:e9:e3:9b:ad:5c:b7:34:97:0e:1f:27:7f:
65:a6:7f:53:13:ba:6a:f8:02:f3:2e:5f:3e:62:cc:2f:b7:a5:
ea:da:9a:8e:c7:2e:a4:a8:5f:46:a2:14:9b:e3:6c:91:cf:70:
a9:29:e0:12:94:dc:07:dc:3b:dc:f4:13:b0:5b:66:44:f0:55:
1d:fc:aa:e9:ec:f4:2a:1e:73:fd:63:6e:db:00:59:47:a6:f4:
d2:e8:34:8f:8d:9a:f5:5f:fc:89:54:95:f7:2d:18:1b:5f:ea:
7c:6a:13:e1:1d:60:b6:82:1e:a3:40:1b:13:c4:67:b8:e3:40:
d4:ee:5c:88:a7:a8:a0:3e:31:5f:e3:01:45:75:3f:c1:c9:a5:
e9:01:c0:90:3b:60:1e:8d:6e:c8:a0:51:18:66:43:93:ab:23:
ee:e3:d2:89:ef:5b:18:d3:2c:75:11:94:b8:5e:50:cc:25:1e:
d1:83:a7:14:49:9f:52:d7:33:d9:4a:f6:1c:23:64:41:16:9d:
5c:a5:84:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdRcNM7rbOXy6B8vULdZyh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwNjA4MjEyNzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWE5MWI3MmVlNDU0M2VkYWFhY2UxNDVmYzk1NWMxODRhZmEzMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHRfIV0TQlMBG/m8EfznmFbQVX+e
tQIkLLtPlAuNmiQMsmNnKjdUbewrspw5t0k5e0f3GIn085b6Nk1Q6haBQ22EZS8m
VxCDe649hToeeYkDQm9E4dbcii4hY8Qtzi/MsWyOQFDkDiB4KAZsmNAigPnpkTi/
6BDIyoFLlqSJZW1vfEBaD2xpoq3j9SF7dWHYPaVjWPxdcZliGtfOH1eVl+0JmYLG
SEUWUrNWanhzmIIBAc6oy8UoW7olvXqAjeP/Uw41fIRJ/XcnGhzkTkQjn7Gq80/D
lCFjHhg0S+mFBy3QEjRS/m91aUePWvii3KdO4Q8ewCJJhbAmZmx3UeOcoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMqpG3LuRUPtqqzhRfyVXBhK+jMWMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEveXFrYmN1NUZRLTJxck9GRl9KVmNHRXI2TXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBqMA0G
CSqGSIb3DQEBCwUAA4IBAQBIOT+Npks4FyEULVo6KIuX2fDcZaYr6OoH2dVcHwCZ
2tPEy3zdH04qtQI8HdBx6jT1iIX+GrTjeoZgCIDp45utXLc0lw4fJ39lpn9TE7pq
+ALzLl8+Yswvt6Xq2pqOxy6kqF9GohSb42yRz3CpKeASlNwH3Dvc9BOwW2ZE8FUd
/Krp7PQqHnP9Y27bAFlHpvTS6DSPjZr1X/yJVJX3LRgbX+p8ahPhHWC2gh6jQBsT
xGe440DU7lyIp6igPjFf4wFFdT/ByaXpAcCQO2AejW7IoFEYZkOTqyPu49KJ71sY
0yx1EZS4XlDMJR7Rg6cUSZ9S1zPZSvYcI2RBFp1cpYQz
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:53:57 2025 by rpki-client