Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/TYbJFXUbeTrea21KNrUS1dnD4QA.roa
File: TYbJFXUbeTrea21KNrUS1dnD4QA.roa (raw, json)
Hash identifier: nqUl8wuvAElGNQyFU80L/by9eyv73C4wQ6wN+yNf3Jc=
Subject key identifier: 4D:86:C9:15:75:1B:79:3A:DE:6B:6D:4A:36:B5:12:D5:D9:C3:E1:00
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0196AED5826AC11D0C7C3E6F02A2AFF40A67
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/TYbJFXUbeTrea21KNrUS1dnD4QA.roa
Signing time: Thu 08 May 2025 07:39:10 +0000
ROA not before: Thu 08 May 2025 07:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5631
IP address blocks: 79.99.88.0/22 maxlen: 22
79.173.128.0/18 maxlen: 18
79.173.128.0/19 maxlen: 19
79.173.128.0/20 maxlen: 20
79.173.128.0/21 maxlen: 21
79.173.136.0/21 maxlen: 21
79.173.144.0/21 maxlen: 21
79.173.152.0/21 maxlen: 21
79.173.160.0/19 maxlen: 19
79.173.160.0/21 maxlen: 21
79.173.168.0/21 maxlen: 21
79.173.176.0/21 maxlen: 21
79.173.184.0/21 maxlen: 21
83.143.224.0/21 maxlen: 21
83.143.224.0/22 maxlen: 22
83.143.228.0/22 maxlen: 22
195.167.128.0/20 maxlen: 20
195.167.128.0/21 maxlen: 21
195.167.136.0/21 maxlen: 21
195.167.176.0/20 maxlen: 20
195.167.176.0/21 maxlen: 21
195.167.184.0/21 maxlen: 21
2a00:5840::/32 maxlen: 32
2a02:890::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 09 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:d5:82:6a:c1:1d:0c:7c:3e:6f:02:a2:af:f4:0a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: May 8 07:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d86c915751b793ade6b6d4a36b512d5d9c3e100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:8a:0e:cf:f3:6f:c2:75:a8:cf:89:aa:66:
a6:a4:42:f0:6e:c3:81:de:e4:ce:ad:49:1a:e1:90:
26:81:cc:9a:cd:48:f8:b3:e7:ef:69:37:22:e7:87:
6d:ce:99:1a:96:ca:1b:db:b3:61:2b:91:01:b9:91:
a2:db:65:75:c6:4b:be:d6:7c:40:2e:b9:2e:18:6b:
a6:dd:60:7d:c4:ae:ee:ce:82:0c:6a:bb:30:28:7d:
16:54:f7:88:8d:9d:64:02:1e:97:47:24:84:f5:97:
94:ac:73:34:74:02:4a:cf:e7:b1:2b:3c:a5:11:95:
ec:a8:9a:1c:f3:d9:7a:00:a6:93:69:33:31:c1:bf:
14:86:22:ef:89:5e:ab:b6:26:76:f0:d0:3d:ca:7c:
10:d3:1e:e5:fe:0d:b8:e6:c1:e4:77:6f:d0:68:5c:
18:09:a6:ac:5c:18:4f:62:f9:7e:2f:98:06:ea:52:
4b:80:ff:4f:af:46:d6:cb:42:ef:9b:44:b6:f0:06:
a6:09:ae:e1:e5:35:e4:ff:77:ca:28:35:89:fe:46:
83:bc:9a:e3:7e:b2:15:76:b4:5a:b1:42:39:45:d3:
e0:6d:45:6d:01:d6:90:be:2a:ab:de:ce:27:a8:4d:
ac:14:0a:ce:d3:0f:b4:0b:36:71:67:35:c8:b9:91:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:C9:15:75:1B:79:3A:DE:6B:6D:4A:36:B5:12:D5:D9:C3:E1:00
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/TYbJFXUbeTrea21KNrUS1dnD4QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.88.0/22
79.173.128.0/18
83.143.224.0/21
195.167.128.0/20
195.167.176.0/20
IPv6:
2a00:5840::/32
2a02:890::/32
Signature Algorithm: sha256WithRSAEncryption
68:a1:11:e5:bf:a8:0c:15:f4:bf:4a:1f:24:c0:1b:ec:79:3b:
6c:00:1e:c8:42:d8:62:17:2b:7b:1a:fa:82:c1:d3:db:f6:37:
b2:b6:9f:eb:69:de:05:f2:16:46:5e:73:91:50:b4:03:3a:56:
4f:47:e0:9c:af:46:78:8b:ea:f5:89:31:b5:1b:9e:ec:f9:50:
e5:c2:71:3d:d4:4a:82:24:9a:4d:1b:90:77:12:c8:40:08:3b:
8d:ae:c4:11:52:2e:ab:8a:22:a6:23:49:7a:7b:b1:5b:e3:7d:
25:05:e8:af:a2:ca:6d:7a:99:81:5b:bc:65:7f:43:37:10:6f:
53:d5:88:e0:fe:ca:5c:a3:85:01:b7:1a:bc:48:cc:df:ed:7a:
01:60:ec:b6:ce:ea:4b:13:b3:00:bd:80:92:ad:24:df:96:97:
94:17:76:07:a4:f4:2e:cd:18:74:f1:a0:af:cb:4a:df:a4:f4:
36:d7:4f:ae:01:02:f5:f1:0f:22:74:7f:22:29:23:81:86:bb:
ad:de:82:65:45:e6:41:75:04:b8:65:41:20:41:cd:bd:f1:3f:
ec:09:a5:92:e3:ce:be:73:4b:8c:d8:3f:87:ca:e3:23:2d:a9:
b5:45:85:9a:74:9f:46:bd:d5:6c:ae:c1:9d:c3:d0:9b:81:30:
04:15:a7:5e
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZau1YJqwR0MfD5vAqKv9ApnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjUwNTA4MDczOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDg2YzkxNTc1MWI3OTNhZGU2YjZkNGEzNmI1MTJkNWQ5YzNlMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf2KDs/zb8J1qM+JqmampELwbsOB
3uTOrUka4ZAmgcyazUj4s+fvaTci54dtzpkalsob27NhK5EBuZGi22V1xku+1nxA
LrkuGGum3WB9xK7uzoIMarswKH0WVPeIjZ1kAh6XRySE9ZeUrHM0dAJKz+exKzyl
EZXsqJoc89l6AKaTaTMxwb8UhiLviV6rtiZ28NA9ynwQ0x7l/g245sHkd2/QaFwY
CaasXBhPYvl+L5gG6lJLgP9Pr0bWy0Lvm0S28AamCa7h5TXk/3fKKDWJ/kaDvJrj
frIVdrRasUI5RdPgbUVtAdaQviqr3s4nqE2sFArO0w+0CzZxZzXIuZEGIwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFE2GyRV1G3k63mttSja1EtXZw+EAMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEvVFliSkZYVWJlVHJlYTIxS05yVVMxZG5ENFFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCT2NYAwQG
T62AAwQDU4/gAwQEw6eAAwQEw6ewMBQEAgACMA4DBQAqAFhAAwUAKgIIkDANBgkq
hkiG9w0BAQsFAAOCAQEAaKER5b+oDBX0v0ofJMAb7Hk7bAAeyELYYhcrexr6gsHT
2/Y3sraf62neBfIWRl5zkVC0AzpWT0fgnK9GeIvq9YkxtRue7PlQ5cJxPdRKgiSa
TRuQdxLIQAg7ja7EEVIuq4oipiNJenuxW+N9JQXor6LKbXqZgVu8ZX9DNxBvU9WI
4P7KXKOFAbcavEjM3+16AWDsts7qSxOzAL2Akq0k35aXlBd2B6T0Ls0YdPGgr8tK
36T0NtdPrgEC9fEPInR/IikjgYa7rd6CZUXmQXUEuGVBIEHNvfE/7AmlkuPOvnNL
jNg/h8rjIy2ptUWFmnSfRr3VbK7BncPQm4EwBBWnXg==
-----END CERTIFICATE-----
Generated at Mon May 12 05:20:32 2025 by rpki-client