Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Y5VgL3YQq3sMUoMQDyo77IMKb4I.roa
File: Y5VgL3YQq3sMUoMQDyo77IMKb4I.roa (raw, json)
Hash identifier: P7y9ytdD9+6l7QsRPyjyLviYFblH+BcxQM/qP00Sxek=
Subject key identifier: 63:95:60:2F:76:10:AB:7B:0C:52:83:10:0F:2A:3B:EC:83:0A:6F:82
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0198797CEBF589DDEF117B342746B551D1DA
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Y5VgL3YQq3sMUoMQDyo77IMKb4I.roa
Signing time: Tue 05 Aug 2025 09:08:06 +0000
ROA not before: Tue 05 Aug 2025 09:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a03:5000:432::/48 maxlen: 48
2a03:5000:471::/48 maxlen: 48
2a03:5000:481::/48 maxlen: 48
2a03:5000:501::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Aug 2025 15:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:7c:eb:f5:89:dd:ef:11:7b:34:27:46:b5:51:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 5 09:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6395602f7610ab7b0c5283100f2a3bec830a6f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:44:57:8b:cd:21:be:5e:64:2f:48:b3:9a:
b9:e6:7e:3d:a4:e8:72:1b:b9:27:ec:e2:b9:65:ba:
67:36:3c:3f:df:c5:7d:33:f3:3c:cb:92:73:53:06:
5c:3e:ec:0d:d8:91:0d:2c:f8:ef:51:ba:27:09:95:
90:a3:a2:d0:31:bd:66:d0:c8:19:aa:dd:3d:9e:18:
45:fb:2c:df:3f:d0:89:28:01:ed:93:52:77:ae:a2:
d1:61:37:be:c9:db:03:4a:9d:36:4a:2d:12:92:be:
25:24:28:99:3c:8b:b1:16:e0:81:d3:e7:8f:6c:42:
47:ff:72:27:e9:2c:98:7a:d4:de:ba:b5:17:08:14:
2b:4f:c5:27:8b:6d:95:e2:12:d1:93:a0:b1:30:0d:
22:20:f7:99:a9:55:9c:4a:92:dc:90:70:94:28:ae:
5f:4e:46:33:6f:2f:85:d7:81:e5:78:35:97:4f:f2:
98:05:5c:39:da:6c:c3:e2:ed:5f:a6:ef:89:34:22:
a8:e2:2b:c8:f5:ea:68:c7:38:ca:d2:58:68:11:0a:
7f:e2:5a:b3:5d:81:d3:37:62:86:73:29:1b:a3:fd:
56:c1:75:52:c4:8c:e4:9e:c0:4e:b1:5d:4f:6b:26:
fc:4c:e8:c5:3b:98:ed:45:ee:16:22:46:f2:e3:6c:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:60:2F:76:10:AB:7B:0C:52:83:10:0F:2A:3B:EC:83:0A:6F:82
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/Y5VgL3YQq3sMUoMQDyo77IMKb4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:432::/48
2a03:5000:471::/48
2a03:5000:481::/48
2a03:5000:501::/48
Signature Algorithm: sha256WithRSAEncryption
3b:55:01:b8:0c:55:a0:55:d3:21:aa:08:21:a8:18:1c:68:25:
f8:0b:41:c8:4d:8e:88:30:04:06:e8:16:a5:c5:4e:71:bc:63:
82:05:ab:ac:63:ee:b1:16:ce:87:24:95:3b:1a:de:d3:d5:38:
c6:20:eb:17:c3:7c:2c:0e:e4:57:2a:92:c5:80:31:72:0d:d7:
70:b4:ce:1c:09:3a:a9:41:d6:87:e6:12:5b:52:3a:eb:1f:85:
23:6a:52:d9:44:27:50:e4:1b:bb:b4:18:c7:57:dc:14:f3:4c:
9e:8a:58:d4:7c:8b:c6:c0:da:69:99:85:5d:a0:44:47:7f:bc:
6e:43:2f:38:a3:9e:4f:32:59:99:ac:2a:f8:2f:d9:41:bc:bf:
ab:6f:6f:e0:78:be:2b:e4:e8:e2:47:8e:50:fd:d4:7c:8e:d6:
0d:2d:1c:97:22:0e:60:b9:73:26:7d:12:b3:fa:67:a8:76:90:
89:95:ec:f2:b0:1b:b6:9c:e3:fe:f5:f2:ca:b9:b9:85:9e:52:
74:ab:30:46:9e:b6:ba:31:f9:53:42:d0:7a:3a:c3:88:5b:ec:
83:e8:e6:70:4e:01:6f:95:c7:18:dc:02:d2:2c:72:c5:b9:0f:
e6:65:9f:f3:3f:fd:65:4f:6d:50:73:56:0f:1f:12:a5:ee:37:
72:e1:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:44 2025 by rpki-client