Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2rO9VeYvK4Gw2Yrk7Gr9hFS725o.roa
File: 2rO9VeYvK4Gw2Yrk7Gr9hFS725o.roa (raw, json)
Hash identifier: BFsE/vMXMWZVTNbtjYUpuURT8A5iXYhmARWp/e+/2gk=
Subject key identifier: DA:B3:BD:55:E6:2F:2B:81:B0:D9:8A:E4:EC:6A:FD:84:54:BB:DB:9A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01968101F1566BEB2B38BC09084DD2AE303C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2rO9VeYvK4Gw2Yrk7Gr9hFS725o.roa
Signing time: Tue 29 Apr 2025 10:05:10 +0000
ROA not before: Tue 29 Apr 2025 10:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:8101:839e/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 29 Apr 2025 10:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:01:f1:56:6b:eb:2b:38:bc:09:08:4d:d2:ae:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 29 10:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dab3bd55e62f2b81b0d98ae4ec6afd8454bbdb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:00:58:c1:16:d3:e9:a7:99:62:b1:80:2d:
7f:d8:ab:b0:ef:bf:71:ad:80:cd:73:81:14:ba:17:
4a:dd:a9:40:93:ef:c5:84:bc:d2:89:10:45:41:9e:
80:61:73:15:c8:d8:f8:b9:7c:9f:21:82:04:a5:2f:
26:f7:07:6b:34:13:7f:37:6f:a8:1c:83:41:58:b6:
db:ca:e2:e2:38:d9:09:94:4e:05:8f:18:11:9d:15:
d8:8e:82:4c:7b:1b:68:ea:06:4c:36:cb:70:08:94:
0f:d4:69:01:4d:44:d6:ad:e2:c6:da:6a:19:5f:fc:
9c:b0:a0:2f:21:da:34:f7:19:d2:f6:cb:fb:9f:03:
82:9e:02:76:99:90:53:bf:b1:ed:8d:49:fc:e0:14:
ca:eb:6a:09:86:9c:af:16:50:d9:90:59:8e:0d:a6:
86:b5:ec:f0:93:8c:19:ae:ea:2e:0a:46:4d:c1:40:
9d:0e:50:be:d6:81:69:c1:ea:86:83:a5:05:5d:78:
b7:85:52:da:55:2a:46:83:23:d2:a7:e0:55:45:72:
c9:0f:eb:1e:71:1d:2c:f6:42:f8:39:55:d2:11:ae:
0b:58:ab:d7:5c:2a:ac:93:ba:3e:7a:72:1b:e0:4a:
e7:0e:45:75:ae:6e:81:dc:ea:26:c9:0f:78:4c:45:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:BD:55:E6:2F:2B:81:B0:D9:8A:E4:EC:6A:FD:84:54:BB:DB:9A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/2rO9VeYvK4Gw2Yrk7Gr9hFS725o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:8101:839e/128
Signature Algorithm: sha256WithRSAEncryption
a6:8e:49:67:fe:a6:53:78:92:a5:7f:11:38:de:a0:b2:a1:d9:
b1:bf:76:1d:00:47:87:a5:f6:c3:ed:cc:fb:80:67:9e:d3:3c:
2a:5c:02:e0:47:40:89:87:9b:15:98:1f:33:fc:3b:0e:0e:67:
f7:7a:06:8b:50:33:42:e8:51:cd:c1:a0:48:a5:d3:39:d8:51:
92:a3:94:bc:9c:e8:86:c8:01:1a:a7:90:77:3e:41:50:51:ea:
06:dc:7d:22:9f:b1:d7:f2:1c:fa:11:cf:49:f5:cf:9c:fd:7e:
a7:13:68:5d:5f:f8:4a:b1:d8:5e:f0:fe:83:1f:52:1d:04:b9:
49:7b:dd:37:e4:12:41:20:a3:cc:d5:80:8d:e3:90:da:2b:c8:
a3:fc:d2:bd:48:45:04:55:c9:e0:36:36:c3:f5:20:e5:b5:01:
86:7f:ed:7e:53:09:8e:cd:79:46:50:77:97:1c:70:df:d4:c8:
64:3e:cd:c8:09:97:b3:87:bb:86:7e:cc:b9:8e:09:e9:1b:fe:
5e:0a:48:6d:ac:62:06:df:1f:24:1c:92:46:9a:e0:24:aa:b3:
e4:3e:c3:0d:b6:93:02:c4:77:77:84:98:27:7a:67:c5:81:10:
36:6f:e8:cf:16:b0:db:72:11:db:de:57:82:4f:37:4c:a0:0a:
78:a9:31:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:31 2025 by rpki-client