Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/5Y0MMG_9ICZ17ameqJfTpdSWiNY.roa
File: 5Y0MMG_9ICZ17ameqJfTpdSWiNY.roa (raw, json)
Hash identifier: PC+/K0KepvR+BLr2I3601eLk2CmtA9uMPA6OzWacQLY=
Subject key identifier: E5:8D:0C:30:6F:FD:20:26:75:ED:A9:9E:A8:97:D3:A5:D4:96:88:D6
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0196400067899CC2B6D91502E9DC3797FA2B
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/5Y0MMG_9ICZ17ameqJfTpdSWiNY.roa
Signing time: Wed 16 Apr 2025 19:08:10 +0000
ROA not before: Wed 16 Apr 2025 19:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a11:e7c3::/32 maxlen: 32
2a11:fec7::/32 maxlen: 32
2a12:4c04::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 28 Apr 2025 10:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:00:67:89:9c:c2:b6:d9:15:02:e9:dc:37:97:fa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Apr 16 19:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e58d0c306ffd202675eda99ea897d3a5d49688d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:2c:55:31:f6:b6:f6:71:ce:a4:2f:16:16:
d8:29:e1:9b:fa:4a:a4:07:6f:53:1b:84:2b:ff:d8:
ec:b8:84:ca:8a:4d:4d:1d:5f:90:42:f7:16:b6:45:
db:1f:79:49:5e:81:89:2b:9a:e8:42:d4:0b:eb:fb:
3d:3d:96:f4:69:8f:96:1c:be:7d:9e:3a:53:e9:4c:
7c:72:50:95:39:03:47:73:c7:48:0e:c2:22:de:93:
7a:85:c5:7f:a7:c4:0e:3d:68:f0:d3:fc:38:aa:0c:
45:33:f3:be:7b:48:ce:e3:1c:de:45:13:b4:56:5d:
bf:ca:da:50:29:ca:1f:5c:b9:56:9b:04:dd:0e:13:
3d:60:0e:af:f1:8d:6f:bc:a3:24:a2:e9:6b:1c:de:
3b:ef:b8:2c:61:47:28:6c:93:a3:44:c0:f4:e1:04:
4b:fc:12:41:44:48:12:13:fd:d1:40:51:38:5c:bc:
90:1f:54:a5:51:da:d5:94:08:52:e2:0b:0a:5d:a4:
a3:74:40:d1:ae:2d:47:8e:ef:16:e7:8d:b7:90:92:
2d:19:fd:42:23:59:fd:7c:4d:4c:9c:7b:12:96:68:
09:38:74:7b:68:9f:c1:ae:c4:d4:37:e5:18:83:0e:
7d:89:18:74:14:11:07:1d:66:15:50:a8:85:7c:51:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:0C:30:6F:FD:20:26:75:ED:A9:9E:A8:97:D3:A5:D4:96:88:D6
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/5Y0MMG_9ICZ17ameqJfTpdSWiNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e7c3::/32
2a11:fec7::/32
2a12:4c04::/32
Signature Algorithm: sha256WithRSAEncryption
7a:ac:e3:c5:f6:fa:c3:25:a0:cc:56:2a:e0:c1:ef:1a:a4:b0:
1a:84:85:72:20:9c:c2:9e:66:8a:35:c6:40:19:7d:05:48:f3:
8c:5e:4d:f0:42:61:25:f7:0e:f5:38:c4:ab:7f:4b:a4:a9:d1:
a2:7c:ac:28:c8:a0:21:bd:69:90:e2:ef:b8:48:24:c4:79:a0:
23:21:23:2f:56:8b:f8:19:bf:e7:46:d4:4b:74:40:8c:10:68:
35:85:57:e9:7d:1c:51:67:25:61:5b:9f:4c:67:49:03:d2:4a:
74:9f:d8:78:49:19:a8:d3:d8:7e:0e:1b:35:a6:5c:f3:f9:8a:
fd:9c:9e:a2:dc:7e:43:a1:88:2d:a5:f9:3c:1e:4c:44:b0:99:
18:3e:8a:de:40:43:0c:66:41:de:50:c2:cc:41:21:ee:f9:a2:
4d:67:5d:5b:42:29:ef:7b:14:ef:df:2d:38:ad:9e:07:f8:14:
c1:ac:f7:a0:13:60:e0:a5:aa:ac:34:27:88:47:89:2d:74:da:
2d:4f:94:4d:54:b4:00:02:3d:12:2e:66:94:88:9b:d2:d6:1e:
5f:70:b1:7f:05:d8:ea:17:0b:17:2d:2d:2e:09:61:e9:e8:00:
86:f9:f2:5d:87:4d:98:98:79:7f:1e:08:ad:19:5d:12:3b:e0:
55:3a:b2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:57:01 2025 by rpki-client