Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/0xz5XIaFXT7DH5yQgovHKH3rw24.roa
File: 0xz5XIaFXT7DH5yQgovHKH3rw24.roa (raw, json)
Hash identifier: 1cshN6q3ect3unni5ctpCswdWcoSHFQoSLvZ9E4zIKs=
Subject key identifier: D3:1C:F9:5C:86:85:5D:3E:C3:1F:9C:90:82:8B:C7:28:7D:EB:C3:6E
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01972CE85BAB9F67C5A35B2DBBED751F60FA
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/0xz5XIaFXT7DH5yQgovHKH3rw24.roa
Signing time: Sun 01 Jun 2025 19:11:54 +0000
ROA not before: Sun 01 Jun 2025 19:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Jun 2025 20:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:e8:5b:ab:9f:67:c5:a3:5b:2d:bb:ed:75:1f:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 19:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d31cf95c86855d3ec31f9c90828bc7287debc36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:2c:bc:c4:75:57:46:1a:11:e8:32:09:05:
15:e0:88:62:ba:7d:f8:a2:ca:90:41:ec:bb:98:89:
6d:16:0e:95:b6:24:57:1a:47:b8:95:85:b6:b3:47:
fa:0b:49:4f:55:0d:ee:d6:0b:08:6b:e7:25:e8:25:
d1:80:37:c9:9a:12:2d:5b:04:e9:f4:ef:25:b7:66:
06:90:a7:40:4f:5a:ff:4e:29:f4:74:87:bd:77:8f:
2d:88:5a:d6:c1:78:70:59:3f:ea:f4:26:f4:60:61:
db:67:b5:90:f7:5a:76:f8:ab:09:6b:40:23:3d:49:
7f:b7:f2:32:ff:9a:48:5b:b7:5f:87:f1:d4:0a:8f:
c2:6c:bf:02:76:9d:89:6b:69:5d:a8:4d:a4:b2:62:
0a:b4:c6:4a:23:c2:a4:83:15:6f:58:04:44:2e:31:
eb:4c:bf:7c:51:92:b4:28:47:bf:67:6d:6f:7a:23:
d9:1b:fd:1b:a1:b0:ac:56:df:05:73:31:1a:a0:f2:
98:7d:07:4b:db:19:47:e6:86:70:bb:72:b8:60:12:
42:e6:ef:4b:c1:ce:24:a5:07:cd:3e:74:e5:28:4d:
18:16:46:bb:e8:40:ba:8b:37:53:fc:19:69:5f:a5:
81:11:a9:63:ce:24:4c:e1:4c:22:d4:0c:e0:bc:20:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1C:F9:5C:86:85:5D:3E:C3:1F:9C:90:82:8B:C7:28:7D:EB:C3:6E
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/0xz5XIaFXT7DH5yQgovHKH3rw24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
32:a4:c4:89:a7:0b:6e:e8:9f:06:4b:84:4d:46:3b:02:41:e9:
76:f3:19:76:96:f5:e6:2d:01:74:5d:ce:10:af:7d:32:23:d9:
6f:36:05:38:9b:5c:d2:60:32:00:c4:a7:94:ce:59:9c:8b:bf:
ed:a7:2e:f1:0e:f9:bd:35:78:c0:5f:d6:ed:a6:19:0d:82:61:
e3:37:25:28:f5:b6:04:b5:df:ac:38:c0:20:c5:b7:f4:ab:0e:
f4:12:f3:c1:6e:c2:79:56:5f:ad:07:8c:fd:07:c7:cb:7c:2d:
33:3e:4c:55:65:63:65:59:71:7c:47:5a:95:2f:d7:85:73:e8:
81:ef:7f:12:10:8a:71:1f:57:d4:b0:57:e3:e9:c1:a4:6e:61:
ba:0d:3a:15:65:28:d5:57:ed:37:d0:76:6b:26:ea:8b:d5:7b:
5d:33:ca:02:ee:c6:49:8b:30:2d:28:c4:e2:ec:db:10:7f:a9:
fe:b0:2a:d8:8e:8b:1b:38:56:e0:f5:d0:61:3c:bb:ab:50:a0:
55:f9:49:60:29:95:66:65:fb:e0:ab:38:80:7d:a8:66:aa:ca:
81:a8:23:3a:16:bb:98:4d:ec:48:76:ef:ec:dd:57:31:35:49:
42:de:20:bc:c3:fd:07:3c:d5:55:2b:52:65:e8:99:de:49:7d:
bc:ec:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:13:36 2025 by rpki-client