Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4fvL1N6LaODJ9YHIv6QQ4FhjNfU.roa
File: 4fvL1N6LaODJ9YHIv6QQ4FhjNfU.roa (raw, json)
Hash identifier: fxpljwGJS0K0VWO64GmG5/zMLOH+OJFEKbSVBNfatcc=
Subject key identifier: E1:FB:CB:D4:DE:8B:68:E0:C9:F5:81:C8:BF:A4:10:E0:58:63:35:F5
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973E4CEAF4AA65B433B76A0405BA0C5122
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4fvL1N6LaODJ9YHIv6QQ4FhjNfU.roa
Signing time: Thu 05 Jun 2025 04:15:17 +0000
ROA not before: Thu 05 Jun 2025 04:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Jun 2025 05:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:4c:ea:f4:aa:65:b4:33:b7:6a:04:05:ba:0c:51:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 04:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1fbcbd4de8b68e0c9f581c8bfa410e0586335f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:5e:4f:d1:b0:06:33:ba:c3:9c:5b:c3:38:
3d:56:8d:0c:12:13:a3:99:dd:47:08:91:b5:be:fa:
8d:fb:45:f6:f4:4e:d9:75:7f:a4:53:0e:0d:fc:ff:
bc:d7:e5:6e:a6:db:6e:63:15:3e:3f:78:c9:d4:76:
f0:b6:5c:21:62:32:5e:34:07:19:f4:f6:4e:79:e5:
a8:ff:d7:a3:89:bc:0d:7a:7a:9e:b0:54:a0:e9:1f:
f5:76:6d:35:60:34:6a:b7:03:25:42:17:63:9b:3d:
74:14:5d:43:36:f8:8a:e3:53:02:0b:f6:0a:8a:b7:
50:8a:bb:3b:ac:0e:be:b8:ef:47:f9:9c:4a:41:0d:
ed:22:6a:3b:11:38:e6:1a:cf:7d:fb:0d:46:57:47:
bc:e4:ad:63:7a:43:f0:77:87:5c:ee:84:25:15:df:
f7:95:e4:ea:bc:f5:81:2d:ab:81:93:20:3c:a7:87:
83:35:52:14:d2:fe:54:61:89:e4:95:d5:13:a8:23:
19:70:14:a4:64:3e:94:8c:9b:53:db:95:9c:0c:32:
1c:27:45:11:22:ed:8d:72:52:0d:92:44:1e:c1:cd:
6f:0a:a2:45:8c:be:c9:1a:b5:6a:a5:64:b2:60:de:
59:82:fc:26:e5:80:86:e4:cc:28:53:79:85:43:32:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FB:CB:D4:DE:8B:68:E0:C9:F5:81:C8:BF:A4:10:E0:58:63:35:F5
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4fvL1N6LaODJ9YHIv6QQ4FhjNfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
a0:9c:b8:e4:5a:2b:b0:d5:08:9b:7a:4e:22:bc:58:ae:c2:19:
4f:be:3f:d1:ac:a3:32:cd:38:1e:69:17:61:bb:64:a4:cb:f1:
0d:0c:2e:e5:2a:e0:3d:ec:0b:c7:41:52:28:44:20:d9:52:50:
0f:be:ce:ac:32:fe:28:b5:9a:b6:fb:65:a7:3a:4a:2a:6d:03:
42:31:7c:0c:30:80:7a:2f:30:12:ca:9d:28:22:7b:f1:1e:bb:
2e:2e:c9:87:6e:91:81:35:49:c7:1d:d5:74:3c:05:23:db:95:
d9:86:84:e6:1a:a6:82:ca:e4:b4:2e:a0:46:1c:20:7a:a0:c0:
67:a5:09:dd:65:6d:1d:c6:ce:f0:5c:d6:22:84:73:1b:84:f4:
ab:b4:85:4e:73:ef:e2:9a:f1:11:00:fb:86:19:25:a7:6f:6e:
c0:df:40:39:aa:af:b2:ec:51:ae:93:61:75:91:a2:09:66:09:
f1:c0:68:11:2d:2e:58:5b:37:28:0e:9e:e3:8c:b2:b2:1a:8b:
54:31:42:ed:7a:a4:df:c6:8b:70:7c:b8:3e:47:1f:80:0d:1f:
20:13:f9:7e:f8:fd:ab:97:d0:d9:c1:0d:bb:77:c3:74:02:67:
d4:87:2d:8a:1e:db:42:80:ae:4a:a5:17:9a:34:8d:2f:db:bd:
bc:6d:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:07 2025 by rpki-client