Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/0mcuoB1FkA0sqFWVIq4Y0EhB3fQ.roa
File: 0mcuoB1FkA0sqFWVIq4Y0EhB3fQ.roa (raw, json)
Hash identifier: zdGXi5g4hUpJDK535KEob64I/aKLU6UpAvZNh2XljH8=
Subject key identifier: D2:67:2E:A0:1D:45:90:0D:2C:A8:55:95:22:AE:18:D0:48:41:DD:F4
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197455797D0653BF34CFD049FD3BA8E1E25
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/0mcuoB1FkA0sqFWVIq4Y0EhB3fQ.roa
Signing time: Fri 06 Jun 2025 13:04:17 +0000
ROA not before: Fri 06 Jun 2025 13:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:4557:659c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 13:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:57:97:d0:65:3b:f3:4c:fd:04:9f:d3:ba:8e:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 13:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2672ea01d45900d2ca8559522ae18d04841ddf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:c2:c0:f0:6e:09:01:7f:ed:2f:f3:c6:ba:
90:ee:df:0e:e2:21:b4:81:f5:29:41:6b:a8:d6:1f:
76:32:39:c7:4a:c3:3c:8b:76:3c:b0:fd:a2:02:86:
df:9c:ea:8c:1b:d7:8b:3f:c0:54:4a:9d:da:7f:12:
65:0e:72:2f:3d:7b:58:f7:c3:f8:1a:cb:4f:7b:a1:
5d:fa:38:f4:82:59:ea:37:a3:86:92:81:b3:55:a6:
8e:1b:87:df:1c:ff:2b:41:05:83:c0:8a:55:b3:d1:
8c:bd:0a:55:89:ea:fb:47:bf:87:7c:e8:d2:b8:26:
6a:5d:61:a0:d8:e2:50:93:b6:58:44:73:19:56:93:
d0:4e:28:4d:46:86:d2:89:53:b4:ec:63:b3:d5:07:
3c:c7:9b:4b:8a:6a:79:13:0f:cf:af:93:2c:f4:28:
ef:b1:3f:a0:46:7d:65:65:55:42:31:8e:7c:4e:2a:
65:02:26:30:68:05:10:8d:fb:6f:7b:94:f7:2e:3d:
04:69:4a:11:7c:d4:86:aa:eb:5e:4d:53:ba:c8:d7:
6a:5b:e1:28:0c:26:3f:32:49:fe:ce:42:ed:f0:e4:
52:84:98:8b:90:6f:6b:bd:6e:52:d1:82:35:ba:66:
6d:eb:74:f8:5c:b9:25:26:dc:bd:be:58:68:16:60:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:2E:A0:1D:45:90:0D:2C:A8:55:95:22:AE:18:D0:48:41:DD:F4
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/0mcuoB1FkA0sqFWVIq4Y0EhB3fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:4557:659c/128
Signature Algorithm: sha256WithRSAEncryption
94:c1:61:51:d4:f4:ec:5f:5e:85:28:83:30:ba:23:37:ec:39:
74:b8:ec:a5:a1:3f:33:c4:07:62:43:81:be:d1:80:6c:7e:2d:
ae:89:58:f1:88:2b:e7:21:90:1e:3a:5d:9c:f6:26:8b:e7:42:
3a:c3:eb:dd:44:73:03:d8:6c:b4:ca:9a:5e:d2:cd:17:c0:9c:
a5:0d:0c:8f:62:5b:3e:e9:7b:bc:5c:ab:f3:d7:de:2d:c5:15:
44:63:1c:7b:15:71:c9:3c:36:39:39:48:93:e2:05:34:ba:5d:
41:69:d4:2f:74:61:6c:27:5b:0e:19:2d:18:e6:00:32:bd:20:
f8:36:4f:f9:18:a5:8c:91:d3:b9:66:8d:2b:3d:9e:a9:7f:c4:
29:5d:04:cf:71:31:fa:e4:68:df:49:df:67:ce:3a:48:7b:f4:
ba:e9:9e:9e:f2:d5:2d:b5:eb:20:6e:0d:d7:1f:26:45:31:63:
1c:42:6b:3a:e1:51:2e:45:f5:f1:7b:13:3f:3c:3a:db:3b:ce:
b7:7c:09:86:a9:0d:38:c6:94:bc:69:38:58:a0:14:cb:f4:90:
db:dd:e4:c1:87:a0:12:e4:4d:c4:e4:9b:52:42:5f:c6:6b:7d:
b6:06:15:dd:27:c7:e7:d3:b1:25:6e:52:00:7e:30:af:09:3c:
ba:da:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:39:26 2025 by rpki-client