Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/08-t4o9pW_RnzCQYKuNRubX-8WA.roa
File: 08-t4o9pW_RnzCQYKuNRubX-8WA.roa (raw, json)
Hash identifier: SrlZGBU9ffZAGDfevSPUhfnMIfV5Gki5RGDmaBXxYzg=
Subject key identifier: D3:CF:AD:E2:8F:69:5B:F4:67:CC:24:18:2A:E3:51:B9:B5:FE:F1:60
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01968AA9DF9912450922110D506BE3A2777D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/08-t4o9pW_RnzCQYKuNRubX-8WA.roa
Signing time: Thu 01 May 2025 07:05:10 +0000
ROA not before: Thu 01 May 2025 07:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:8aa9:db6/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 01 May 2025 07:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a9:df:99:12:45:09:22:11:0d:50:6b:e3:a2:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 1 07:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3cfade28f695bf467cc24182ae351b9b5fef160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:fb:c8:50:e3:d9:94:c2:5e:7b:9c:25:50:
d0:66:72:d7:c1:4d:e0:e0:75:29:a6:44:02:1a:76:
c1:18:85:a2:90:41:19:5e:e4:76:31:a7:dc:52:48:
c7:f7:cc:05:3d:e3:10:65:fe:e1:da:97:d0:53:9a:
13:01:bf:5f:13:51:04:ec:0a:62:e2:35:cc:48:1e:
db:47:d7:24:76:19:cf:aa:61:c4:41:2e:d7:73:30:
25:7d:cc:92:b6:c6:90:8c:d3:85:db:90:ae:80:46:
21:f5:33:c0:a1:2c:a9:7c:11:0a:26:03:51:51:94:
b8:32:d1:bb:3e:e2:cd:a8:df:cd:c8:45:e5:54:01:
79:35:3a:0a:a2:eb:26:85:e3:3f:be:01:0a:5c:34:
fd:ed:15:b4:1a:32:4b:4d:d1:f7:12:23:ec:20:46:
fd:ad:8d:bb:99:1c:54:a6:2f:cf:7f:14:7c:f8:1b:
11:4e:d6:32:36:99:45:60:57:f4:91:9b:e5:32:7e:
74:20:ad:41:a9:13:f3:67:e1:6e:42:80:6a:b7:0a:
3c:e3:4e:a2:30:e1:1e:d9:65:54:21:c1:0a:da:c0:
38:da:f6:df:26:01:29:b4:bc:11:ea:72:c4:b5:dd:
88:7d:5f:d0:f1:cf:b3:99:26:4a:8e:a0:89:9e:ae:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:AD:E2:8F:69:5B:F4:67:CC:24:18:2A:E3:51:B9:B5:FE:F1:60
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/08-t4o9pW_RnzCQYKuNRubX-8WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:8aa9:db6/128
Signature Algorithm: sha256WithRSAEncryption
56:e3:e8:61:d9:ce:a8:d0:b6:e8:7e:7d:0f:be:67:f2:9e:cc:
c3:27:04:86:88:7c:59:20:b7:4a:df:db:96:34:6c:69:f3:73:
86:85:d8:e6:a7:80:29:51:9c:45:5e:c4:ee:37:16:3d:0b:ab:
4d:5a:ee:61:91:8b:cb:f0:25:e3:eb:f9:42:8d:a5:51:5b:2a:
05:9c:3e:ec:d0:47:9a:22:28:f1:fc:e6:bf:aa:fe:39:43:4e:
49:ae:00:2a:7f:f7:fd:f1:49:90:3a:e9:d9:8f:4b:f9:d4:89:
55:38:29:e3:63:0e:1a:01:8a:3f:d3:ca:e1:b1:b8:b7:72:cc:
de:b7:74:e5:c8:92:a8:10:49:20:01:68:7d:b7:34:74:e4:95:
e0:59:42:0b:18:c5:e7:da:06:5c:e9:51:be:cb:f9:9b:3d:9f:
b7:2a:80:f3:cc:2b:4b:0f:8d:84:14:b6:07:25:84:c6:69:1f:
c6:6d:e4:a2:69:e9:9f:99:36:0d:3a:33:23:06:12:ba:82:86:
9c:2d:73:42:05:c9:c2:85:d5:fb:9f:63:2c:7f:86:92:4b:12:
2f:16:12:b0:b5:0f:db:20:a0:48:bb:12:8a:5f:57:00:d5:56:
8f:f3:ae:1c:19:e4:ba:05:90:ba:55:61:a7:6b:04:15:82:bb:
dd:2b:f7:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:13:38 2025 by rpki-client