Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1LVerfOGGvICY25_I7EQycHOmfY.roa
File: 1LVerfOGGvICY25_I7EQycHOmfY.roa (raw, json)
Hash identifier: 5G+Ow6mYbHrq1SkeTbyFhV/B8PTChUklmCsm0a3SSHQ=
Subject key identifier: D4:B5:5E:AD:F3:86:1A:F2:02:63:6E:7F:23:B1:10:C9:C1:CE:99:F6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01963E7C384EE36DD1706BA296E802D828EF
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1LVerfOGGvICY25_I7EQycHOmfY.roa
Signing time: Wed 16 Apr 2025 12:04:10 +0000
ROA not before: Wed 16 Apr 2025 12:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:3e7c:13d7/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 16 Apr 2025 12:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:7c:38:4e:e3:6d:d1:70:6b:a2:96:e8:02:d8:28:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 16 12:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b55eadf3861af202636e7f23b110c9c1ce99f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:e7:49:ef:f2:8f:02:b8:92:63:90:98:4b:
9b:4a:2f:b1:36:6d:c7:cd:f4:77:11:fe:b8:9b:0b:
49:78:77:9f:ea:09:22:b5:ab:d7:fb:e0:1b:7e:ac:
ff:91:01:7b:96:df:9b:52:b8:5c:e2:52:96:c1:1f:
e2:5e:23:44:38:48:e4:2b:85:c1:a0:82:f8:6e:b5:
e3:3a:cb:de:0d:df:34:84:8a:04:a5:a6:f4:c5:4f:
88:89:1f:14:f4:98:e2:20:cd:45:38:4d:4f:ad:93:
3f:03:bc:80:3e:89:e4:cc:16:24:a6:54:70:04:e5:
da:b4:68:0a:13:da:05:c0:d1:88:2c:31:34:9c:fc:
68:eb:5d:c7:c6:ed:8c:60:f7:e3:29:7a:9f:c3:a3:
27:fb:10:2d:89:5f:54:ce:df:64:45:0d:b2:fe:e1:
cc:8b:9b:3e:de:e9:83:72:16:57:7a:f8:b1:74:fb:
85:f8:01:c8:fe:26:31:73:e3:06:07:c1:0d:60:46:
d4:a8:ab:a9:e7:00:67:f7:64:6a:80:b7:65:15:de:
ab:62:37:cc:d1:04:6f:8d:7f:b8:71:69:6b:ad:9b:
32:cc:b0:de:79:00:7f:43:a0:2b:93:5c:c3:8e:f8:
b5:a0:dc:12:ab:c0:90:72:27:4b:28:1f:77:8d:15:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:5E:AD:F3:86:1A:F2:02:63:6E:7F:23:B1:10:C9:C1:CE:99:F6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1LVerfOGGvICY25_I7EQycHOmfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:3e7c:13d7/128
Signature Algorithm: sha256WithRSAEncryption
44:ab:98:59:09:d5:7c:bb:a4:1f:af:1a:00:0c:63:0d:71:3b:
3b:c0:94:5e:27:21:c3:b6:53:37:82:cd:f6:71:a1:d1:d6:c5:
90:33:f8:bf:b2:95:bc:c4:74:89:53:41:69:82:f0:41:f8:e1:
5e:43:3c:bb:3f:29:03:02:53:4e:77:0e:f2:77:ed:81:66:dd:
c7:b2:d2:97:d3:a5:5e:5e:46:09:fb:eb:6d:03:e0:8b:8c:de:
c6:86:72:f2:e7:49:dc:bb:14:da:91:69:d6:f4:fc:18:89:de:
1e:f5:c6:05:c7:50:df:cb:ca:55:53:80:90:27:cb:99:5b:0c:
b2:56:a2:ef:54:77:c5:76:41:20:35:4d:a1:f0:59:72:98:f6:
24:4f:d0:9e:d2:0a:40:77:82:b7:2c:a5:df:24:df:ee:b8:9b:
3b:5f:d8:9f:2b:fe:30:31:59:f7:d3:f2:a3:53:5e:38:0a:30:
ac:14:be:62:d9:46:a1:de:cc:07:61:df:cb:45:ef:c7:63:78:
d9:6e:e9:07:be:6e:fd:01:05:e9:df:f6:9e:43:f9:0f:c6:0b:
58:dc:e4:ed:65:8b:59:dc:50:a9:e4:64:3d:ac:0d:36:3f:42:
7f:d3:cf:87:63:4e:d0:c7:51:95:04:3f:d0:4d:f8:13:a1:ac:
6e:30:a1:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:43:45 2025 by rpki-client