Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4ljiqxsqZlNFXhUrIbilTPNwNXI.roa
File: 4ljiqxsqZlNFXhUrIbilTPNwNXI.roa (raw, json)
Hash identifier: kEUPBfHKj54IompqpEBLbRJCEp6hx7Cmv5dJ0bjTzUc=
Subject key identifier: E2:58:E2:AB:1B:2A:66:53:45:5E:15:2B:21:B8:A5:4C:F3:70:35:72
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01968E18C6CB125F4014A0DBA55DFCDF320F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4ljiqxsqZlNFXhUrIbilTPNwNXI.roa
Signing time: Thu 01 May 2025 23:05:10 +0000
ROA not before: Thu 01 May 2025 23:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:8e17:de15/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 01 May 2025 23:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:18:c6:cb:12:5f:40:14:a0:db:a5:5d:fc:df:32:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 1 23:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e258e2ab1b2a6653455e152b21b8a54cf3703572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:5c:bd:5a:be:1c:b6:3a:c8:26:b7:b4:f3:
20:7c:b8:e7:24:96:09:98:19:62:b4:19:66:d6:29:
dd:a7:6b:30:6d:75:02:74:56:ef:81:de:0f:87:7e:
e1:a5:75:83:29:7b:0a:fb:ca:5e:73:31:b1:bd:13:
d4:69:d0:4c:47:e7:d1:b9:f0:bf:3b:9a:0e:b1:96:
58:ac:53:b1:82:f2:58:fc:d7:e1:af:7e:09:4d:66:
bc:02:d5:01:ff:37:13:40:c5:8e:36:04:65:33:49:
04:2c:9d:8c:91:dc:69:4b:e3:ba:9b:5d:47:25:82:
aa:85:ba:2c:02:17:57:bd:7e:c6:36:53:6d:e5:5f:
2f:84:d9:5c:ed:f0:28:6f:bf:3c:14:5f:f9:a4:41:
01:cb:28:90:4f:fa:38:50:9c:87:d9:d0:5f:a2:c6:
d1:0b:34:48:da:8a:04:85:74:be:1d:35:ff:64:05:
82:68:eb:ff:c7:31:4e:43:b7:f5:22:c3:80:17:4d:
7f:51:bf:d0:24:65:ae:99:98:9a:6b:ee:d9:e1:9e:
e0:e3:3f:0c:0e:e5:4a:93:02:43:b6:11:ba:30:16:
74:38:65:3f:24:2a:84:23:fc:a4:93:ee:80:ce:14:
9f:b7:4b:84:79:d4:86:24:76:0a:2f:ab:ad:d1:27:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:E2:AB:1B:2A:66:53:45:5E:15:2B:21:B8:A5:4C:F3:70:35:72
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4ljiqxsqZlNFXhUrIbilTPNwNXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:8e17:de15/128
Signature Algorithm: sha256WithRSAEncryption
b9:ec:b4:58:51:33:6e:4d:47:6f:81:64:8c:e5:32:6b:3e:6f:
24:3c:7d:f2:71:c3:f7:bd:02:2c:a7:d9:49:89:6d:86:6f:b3:
0f:9d:6f:11:59:6d:d3:da:4f:96:83:0d:44:0e:ec:ee:74:b8:
89:bb:03:ae:b9:96:a6:c6:ca:c8:2e:21:ea:dc:c8:38:40:2d:
54:ec:63:06:b5:11:64:d2:dd:eb:7f:ce:be:1c:b9:1b:fd:f6:
7b:e1:d6:03:d1:ea:86:75:ad:3c:b3:77:34:f2:3f:9e:d1:78:
00:75:e8:36:b1:44:32:d2:9b:47:70:d5:e6:94:29:ee:3b:c4:
32:7e:24:4e:53:1d:14:63:0e:e5:6a:a8:34:4e:42:87:55:cd:
92:81:7f:85:f1:f8:5f:f9:7c:68:45:e3:3a:c9:e8:cc:05:7a:
15:49:0d:51:9a:10:1d:ed:c7:fb:cb:b2:e9:49:12:d3:8a:64:
da:79:56:4c:d5:47:ca:90:42:c8:a5:d5:28:7a:a1:5b:e9:9c:
b4:89:8c:94:08:41:6b:7f:2e:71:78:18:f1:56:c8:78:af:c2:
56:5b:9f:43:94:45:f2:38:a7:c6:65:e4:b0:61:bb:80:2e:21:
f7:03:3b:96:c9:e9:2a:e5:7f:61:0b:6d:d5:f4:ef:20:73:f4:
44:94:53:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:42:25 2025 by rpki-client