Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1PPvVoroY6soZ86_CnHa2nHp2K0.roa
File: 1PPvVoroY6soZ86_CnHa2nHp2K0.roa (raw, json)
Hash identifier: GdSqs3B2eM4xZ2LEIf8qW4rVw+PzajlMBY1lE31Qtxs=
Subject key identifier: D4:F3:EF:56:8A:E8:63:AB:28:67:CE:BF:0A:71:DA:DA:71:E9:D8:AD
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197106047FB97CB5D84838DF55B368EBA81
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1PPvVoroY6soZ86_CnHa2nHp2K0.roa
Signing time: Tue 27 May 2025 06:13:54 +0000
ROA not before: Tue 27 May 2025 06:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 07:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:60:47:fb:97:cb:5d:84:83:8d:f5:5b:36:8e:ba:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 06:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4f3ef568ae863ab2867cebf0a71dada71e9d8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:a3:de:84:11:8f:4a:f8:6b:5e:ef:f3:bb:
81:c7:01:fb:df:c1:39:34:53:55:7f:8f:c4:5a:5e:
d5:52:50:64:8a:96:9f:88:3b:8c:4b:ad:32:79:53:
95:9a:cf:32:13:ae:8c:2f:c7:60:a1:99:ce:c5:e7:
84:21:3f:42:d7:02:4d:29:f0:fc:f4:ac:75:b3:64:
d6:22:c7:f7:86:57:58:f7:94:2c:4d:de:b8:ed:5a:
36:b9:02:f2:0a:96:ae:4e:3a:b6:80:76:44:51:eb:
32:63:f6:e0:dc:8e:e7:e5:cf:f3:91:b2:cd:04:da:
a5:57:ab:19:68:ce:b1:2c:d6:c6:0b:41:d9:be:af:
25:06:31:66:96:be:67:e9:33:3b:70:2c:80:f3:55:
83:49:8b:0b:69:41:8c:37:6c:7e:d6:9d:e6:2f:5c:
a3:39:8a:33:eb:17:af:07:be:03:cb:b2:67:14:28:
d6:a4:bf:7d:d0:ea:69:d9:4f:90:de:92:96:83:a9:
4d:54:28:bc:7c:96:24:c1:9d:bd:63:9f:5a:4e:ca:
09:d0:d4:a2:80:3e:4f:9f:47:10:d6:ce:d1:e0:7a:
9d:28:12:ec:54:9c:59:f2:25:2e:65:05:a2:e3:83:
bb:b7:82:f2:c4:52:12:5b:b8:3c:32:6a:75:7c:36:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F3:EF:56:8A:E8:63:AB:28:67:CE:BF:0A:71:DA:DA:71:E9:D8:AD
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/1PPvVoroY6soZ86_CnHa2nHp2K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
90:4d:db:fb:5d:bd:0f:6f:3f:e5:61:13:50:1b:f5:ef:93:d9:
bf:7f:f5:c7:b1:3e:85:5f:5d:2a:14:06:80:92:15:97:da:52:
03:2c:9e:29:67:86:e2:4a:db:85:b3:9c:e5:b8:5e:1a:9a:59:
b7:32:3c:49:24:2e:dd:3d:37:01:0c:55:78:78:25:93:c8:b1:
70:b0:49:06:03:a5:12:85:36:ec:91:4b:8b:6f:3d:2f:ac:36:
f4:cf:0c:05:62:b8:55:a7:1e:74:c2:59:6e:0a:2e:9d:a6:0d:
fe:dd:cf:c9:7c:50:06:6e:ba:f7:5b:5a:1d:d4:23:ca:fb:49:
d1:e4:4c:26:00:74:f8:94:4a:35:b8:72:dc:dd:84:36:24:f4:
a7:4d:fe:2c:75:ef:40:93:8c:6b:24:54:ce:26:6a:86:88:8e:
5d:8a:86:a3:49:37:e5:a2:40:fa:6e:a3:80:b1:f8:41:52:bc:
15:0f:4b:59:b4:17:79:00:d7:77:48:6c:d5:14:a3:71:20:56:
42:3d:f9:4e:6b:30:b8:54:34:d6:8d:6f:14:79:ab:df:b0:17:
7a:87:67:46:71:e3:ce:45:dd:0a:81:e9:c4:6e:70:d0:ca:87:
a7:e2:1b:30:f6:b7:75:a4:73:f8:40:35:6d:f2:50:31:7a:9f:
35:05:2f:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:43 2025 by rpki-client