Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1Gv1pw8Sy9u7uOKuvfcwojSixig.roa
File: 1Gv1pw8Sy9u7uOKuvfcwojSixig.roa (raw, json)
Hash identifier: BPMmQhvpAVpGESHQLQ3Nq4my+c5/ItkRRIH3l09WQzA=
Subject key identifier: D4:6B:F5:A7:0F:12:CB:DB:BB:B8:E2:AE:BD:F7:30:A2:34:A2:C6:28
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196DA0DA9260A93AEFCCA81ABCC0982819B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1Gv1pw8Sy9u7uOKuvfcwojSixig.roa
Signing time: Fri 16 May 2025 17:04:10 +0000
ROA not before: Fri 16 May 2025 17:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:da0d:a3bb/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 16 May 2025 17:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:0d:a9:26:0a:93:ae:fc:ca:81:ab:cc:09:82:81:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 16 17:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d46bf5a70f12cbdbbbb8e2aebdf730a234a2c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:d0:53:10:7a:ec:d8:5b:86:38:d6:9f:33:
7c:92:0e:cf:48:6d:a0:08:4d:67:69:6d:03:3e:02:
50:0a:15:bd:2c:fe:9a:9f:66:a6:0e:41:41:ef:bf:
17:d4:9d:a8:08:7f:aa:bd:4d:7f:66:7d:96:e6:41:
e6:09:bf:49:14:09:3c:42:d2:5d:51:f2:a6:8d:2c:
50:dd:cf:aa:d8:a3:d8:01:97:13:03:58:bd:d7:03:
a1:72:f1:39:c6:91:7e:1e:33:52:0c:82:ad:25:7a:
47:6b:44:36:4d:ef:e8:b8:fd:08:d5:a0:1c:cf:08:
24:3d:02:07:11:d3:31:31:86:5f:7b:4d:01:9b:81:
bb:09:3c:89:d4:b5:bb:a9:df:df:1c:08:fb:b0:98:
d9:97:5d:49:fa:f3:f1:62:8e:ac:10:63:fa:fb:8e:
da:a0:7e:e1:72:3e:46:ec:26:6a:8b:79:e4:fb:e2:
5c:4c:60:bb:30:42:1d:2f:48:eb:68:fc:04:fc:31:
d4:0d:aa:5d:b5:82:0f:b8:70:79:92:52:01:32:80:
44:48:43:45:b2:e0:af:bb:e6:d0:53:2a:77:77:8d:
5e:af:3c:60:c9:5a:9c:0e:51:1f:05:52:f6:df:33:
4e:d0:74:f5:7e:a8:41:44:ce:c4:29:c5:65:29:06:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6B:F5:A7:0F:12:CB:DB:BB:B8:E2:AE:BD:F7:30:A2:34:A2:C6:28
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1Gv1pw8Sy9u7uOKuvfcwojSixig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:da0d:a3bb/128
Signature Algorithm: sha256WithRSAEncryption
27:58:7e:ef:12:78:e2:1f:b4:af:2e:2b:4c:67:90:13:9b:f2:
89:70:77:41:c8:7a:25:82:7c:28:4f:0b:dd:fd:bb:11:5c:38:
b1:55:f0:fa:71:fc:6e:29:8d:a7:3c:19:02:2c:ae:43:c8:57:
6a:10:73:cc:8b:7a:02:95:d5:d6:73:87:cc:8c:8c:18:5d:e1:
98:2f:b4:a1:cb:8e:1a:fe:ef:e8:17:2d:99:6c:e2:54:ff:da:
8a:66:f9:49:ae:0f:78:3d:48:02:48:26:d9:20:27:b7:2b:66:
10:7e:b5:6b:45:b8:a4:aa:80:1c:0f:24:ce:ab:e9:8a:5f:c8:
f2:b0:54:0a:3e:1f:f4:3e:9a:1f:5e:6b:01:f3:d8:5c:05:00:
60:d7:55:60:59:53:35:21:6b:21:f7:9a:14:a4:f4:eb:8f:68:
b8:e5:c1:d6:00:79:d6:73:e4:b7:84:84:40:f0:92:6b:96:7f:
da:f8:f8:a7:5f:46:99:c8:5f:e0:22:dd:27:ba:ed:e5:97:be:
4a:97:1c:3e:c9:6d:31:27:1f:8d:c2:f3:5e:36:35:5a:93:04:
0c:f5:9a:24:29:5a:88:2d:78:35:17:9d:60:7f:04:08:5c:bf:
91:5d:aa:6d:24:ce:99:7f:2c:cb:44:d5:74:94:9f:d6:e5:a9:
06:1c:43:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:25 2025 by rpki-client