Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2cMSGErVq43me2EFH_FCVQyQq78.roa
File: 2cMSGErVq43me2EFH_FCVQyQq78.roa (raw, json)
Hash identifier: PhM1pQV/e3Mnib+jRS+JFZUNVNFlhQWBliBBwTD3sZE=
Subject key identifier: D9:C3:12:18:4A:D5:AB:8D:E6:7B:61:05:1F:F1:42:55:0C:90:AB:BF
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197196454A42D3A7BABCCC637B547B9FE37
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2cMSGErVq43me2EFH_FCVQyQq78.roa
Signing time: Thu 29 May 2025 00:14:55 +0000
ROA not before: Thu 29 May 2025 00:14:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 May 2025 01:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:19:64:54:a4:2d:3a:7b:ab:cc:c6:37:b5:47:b9:fe:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 29 00:14:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9c312184ad5ab8de67b61051ff142550c90abbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:95:96:f3:62:39:59:f9:a8:17:0b:5e:f0:
ee:86:65:f0:fe:e0:9e:79:44:e4:35:bd:d2:fa:40:
0c:f9:ce:41:ef:4b:cc:fd:3a:1e:94:60:45:af:79:
1f:72:5a:bb:53:e3:ea:9a:a5:6e:08:d6:7d:79:53:
81:0b:fd:3e:ad:30:cd:2d:66:e3:c0:2f:24:5d:7f:
78:93:4f:22:fc:80:20:eb:af:1d:9e:a5:3f:51:dc:
2b:9a:68:44:14:33:3c:8f:27:6a:5c:81:f6:06:33:
07:72:61:c6:6f:35:83:7e:bb:4f:7a:2e:1c:99:0e:
fc:56:96:46:9f:68:36:39:f3:f4:fd:17:59:c5:90:
85:75:0c:fb:e2:e5:59:85:b7:79:5e:c7:c2:ed:49:
33:2b:22:9a:86:aa:64:92:f8:8d:80:f2:1a:7f:db:
57:9e:d0:fd:a0:57:87:0e:68:73:8f:85:57:61:eb:
68:9c:21:64:c1:1c:6f:a6:2c:f6:4b:4a:0b:a0:bd:
e9:61:b3:65:92:65:6f:93:a0:38:57:33:10:e8:00:
c4:c1:13:eb:8b:32:af:7c:da:80:16:35:1f:cf:e4:
87:95:49:26:0b:c0:54:9f:7b:e0:30:0b:26:bd:3b:
9c:fa:5a:af:05:eb:92:93:e8:64:be:7d:9f:ea:a3:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:12:18:4A:D5:AB:8D:E6:7B:61:05:1F:F1:42:55:0C:90:AB:BF
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2cMSGErVq43me2EFH_FCVQyQq78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
68:73:2d:19:71:18:50:3f:3e:02:3f:2d:3d:61:65:75:e3:72:
fc:a6:d7:98:6f:b9:14:2a:15:ee:da:7e:b3:f4:54:35:7f:55:
ff:95:95:1c:66:2f:f4:fb:3d:ba:da:29:70:8a:8a:2c:1f:35:
34:de:b3:b6:08:72:8c:a8:d2:cb:4f:3d:7e:a9:af:8c:7e:04:
39:12:57:dc:89:be:e2:b2:c8:5d:ad:5b:44:79:b3:bc:78:6d:
9f:fe:53:7f:42:56:cd:43:d4:c1:41:1d:7b:b9:a8:01:a0:e1:
ff:50:08:61:91:06:86:db:2b:9a:70:e4:b9:f2:0d:6e:30:cd:
5d:56:fc:38:52:06:16:8d:8c:b5:7e:fe:8b:9e:5e:ed:e8:db:
72:37:3c:78:bc:21:df:03:57:67:ff:1c:3c:32:46:dd:01:e1:
16:5e:c6:26:b4:f3:43:d4:8c:03:40:1e:52:6a:de:52:cb:07:
59:39:ee:fb:71:64:5b:7f:22:0d:a5:50:b8:6d:b4:0f:c2:f0:
20:4e:c1:bf:7d:39:56:cb:8b:f5:59:5d:15:0e:72:e6:68:14:
ac:b2:87:d8:57:d9:50:30:2b:1c:19:e7:b0:31:a8:9e:77:84:
28:a6:ec:b3:6e:df:2c:c1:4e:21:af:b7:90:e2:3e:1f:13:dc:
d6:55:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:48 2025 by rpki-client