Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4ZGCDItJshOmUojYGixCLOHrxRU.roa
File: 4ZGCDItJshOmUojYGixCLOHrxRU.roa (raw, json)
Hash identifier: WBztcYCJ6EE/DAF7pOYZfos2eIlkJOxgcYugVveilvA=
Subject key identifier: E1:91:82:0C:8B:49:B2:13:A6:52:88:D8:1A:2C:42:2C:E1:EB:C5:15
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970E3BE1C887976421F291D5EF9DA1939E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4ZGCDItJshOmUojYGixCLOHrxRU.roa
Signing time: Mon 26 May 2025 20:14:54 +0000
ROA not before: Mon 26 May 2025 20:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 21:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:3b:e1:c8:87:97:64:21:f2:91:d5:ef:9d:a1:93:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 20:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e191820c8b49b213a65288d81a2c422ce1ebc515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:72:32:be:dc:16:82:2e:fe:b1:41:81:a8:
24:09:a0:b7:fb:16:20:72:0c:e4:1a:cf:77:56:cf:
45:15:2f:e2:61:08:93:3f:55:ed:8c:11:1e:2d:62:
c9:46:d3:20:a7:01:76:0c:44:9b:e7:5f:fa:db:e6:
14:22:17:a1:83:7e:79:48:be:f8:9f:19:3f:5e:20:
83:1f:70:91:82:b7:0c:b4:4a:f5:0e:af:7b:7a:f1:
6b:95:76:24:a6:67:06:68:f1:c0:30:76:6c:b4:88:
07:29:13:4a:85:a7:70:c1:98:40:d1:88:9f:4c:5f:
b6:ae:59:20:41:f5:49:7b:c4:e1:d5:76:86:63:48:
ad:e1:51:8b:62:b1:5b:80:1c:06:14:2c:e0:dc:0e:
67:61:f1:53:51:f9:3f:4b:58:c8:0c:9b:e5:ef:57:
67:19:f4:86:c8:91:0c:51:cc:8e:70:44:a9:a1:2f:
22:35:b0:36:27:1f:2a:c8:14:7d:53:57:11:68:1c:
03:fb:4f:28:e8:e2:4e:96:f1:97:90:e7:63:8e:7a:
a7:e0:d0:81:ec:76:1d:a3:91:5e:db:0d:08:48:13:
92:19:57:a6:05:b8:48:d5:4f:cc:eb:81:4f:6d:d8:
e2:25:32:6f:96:d4:98:78:39:88:ff:80:29:be:e3:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:91:82:0C:8B:49:B2:13:A6:52:88:D8:1A:2C:42:2C:E1:EB:C5:15
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4ZGCDItJshOmUojYGixCLOHrxRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
7f:0b:b1:61:f3:6f:1f:18:d5:79:c6:bb:c7:02:67:a2:eb:cf:
1d:62:cf:e7:17:22:2f:2f:08:ec:e2:20:38:f4:cd:db:58:ac:
3a:97:0e:28:fe:22:ec:1b:f5:e6:01:df:5e:39:89:e1:dc:ff:
02:a0:2f:9d:25:35:74:b7:51:b4:41:5d:e8:b2:ce:1a:18:4a:
69:52:c2:d6:2c:c5:a2:33:f5:b6:5f:2c:6e:0f:38:45:af:3c:
cd:6c:ab:d4:4d:7f:f9:2e:c7:15:3b:da:c5:17:b7:46:01:68:
5f:de:ed:fc:0a:89:87:1c:d4:c0:81:a4:20:6b:b5:3c:02:97:
8b:e8:9b:1a:cb:c4:47:3f:14:88:c1:31:b7:d2:81:43:0d:72:
9d:76:39:8f:20:30:0f:0f:9f:ca:de:80:79:9c:69:af:8f:cc:
f0:e1:c0:42:0e:da:48:b8:8f:98:05:ac:6e:8e:f8:88:ce:a9:
db:1a:d5:f2:62:17:a8:a9:40:64:02:1c:66:3f:d4:e3:20:bf:
a5:fc:0e:15:6e:b9:47:b3:e6:6d:21:ec:fe:b8:eb:3f:57:2b:
51:22:b9:df:ce:02:2e:02:b7:3e:81:fb:ff:4d:02:e9:41:03:
39:80:10:96:cb:64:4e:ba:04:a4:77:e3:27:2b:37:ee:b8:ee:
75:42:3a:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:54 2025 by rpki-client