Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4v1CYKv3mAQXBqfwMWPPI1i9vcY.roa
File: 4v1CYKv3mAQXBqfwMWPPI1i9vcY.roa (raw, json)
Hash identifier: 4KnweIt3CbQbZ1bawMo2KKRJKw6Tu1fEygjp3W3hLig=
Subject key identifier: E2:FD:42:60:AB:F7:98:04:17:06:A7:F0:31:63:CF:23:58:BD:BD:C6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F21EE8048DBCBF291580AF29A7F0E39A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4v1CYKv3mAQXBqfwMWPPI1i9vcY.roa
Signing time: Wed 21 May 2025 09:13:53 +0000
ROA not before: Wed 21 May 2025 09:13:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 10:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:1e:e8:04:8d:bc:bf:29:15:80:af:29:a7:f0:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 09:13:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2fd4260abf798041706a7f03163cf2358bdbdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:97:63:17:a7:45:5a:6d:25:29:81:32:f8:
2e:00:4c:1b:ff:21:9f:f5:9a:f8:46:08:73:11:f6:
4a:38:3e:40:b2:ab:9e:97:7b:d4:0b:8f:40:74:67:
0b:67:45:f6:ea:28:e9:ea:b7:d4:1f:0c:df:47:85:
e8:d0:33:b2:92:b9:85:19:af:43:73:ac:0b:cc:df:
c2:f1:10:2a:7c:a3:c7:4e:25:25:18:83:3b:84:90:
26:0c:8c:6a:e2:80:cc:59:60:e8:48:38:54:5d:7f:
13:8f:81:57:d9:ec:e8:41:9b:8c:73:83:5c:af:5e:
fc:0a:ea:2d:e2:a9:86:3d:51:f2:88:47:27:a9:88:
21:5d:34:1b:a9:14:1f:52:10:82:2e:cb:80:23:b9:
12:3b:0e:b7:71:74:c8:99:48:5c:9d:1f:b2:af:04:
66:ab:06:cd:e7:2b:ab:6a:03:a1:36:fa:20:55:66:
52:d7:47:5f:81:49:ec:e2:d7:16:c9:86:07:de:6d:
3f:dd:14:b5:e1:d8:2a:11:5c:4c:74:ca:32:57:41:
61:99:75:5b:87:1a:cb:11:2b:3e:fc:ee:cf:94:91:
a4:e4:f7:ca:42:e4:cc:42:f1:5b:94:71:b6:1f:eb:
d7:4f:85:da:3a:f6:f3:37:2d:32:dc:19:2a:4a:ae:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:42:60:AB:F7:98:04:17:06:A7:F0:31:63:CF:23:58:BD:BD:C6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/4v1CYKv3mAQXBqfwMWPPI1i9vcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
1a:58:fc:ce:69:9f:ba:7f:a9:c3:d4:c8:a5:21:5a:b0:76:1c:
8b:e0:c8:2c:21:55:ff:14:0c:47:dd:f1:90:5f:0b:1b:a3:7c:
2b:14:cb:1f:f6:43:2e:df:ee:e6:13:7a:b9:e8:d1:63:f1:1e:
c4:e9:89:7e:fe:c2:64:47:08:42:3d:eb:77:0f:92:0b:f4:fc:
98:89:86:ac:a8:c0:8c:fd:21:8f:21:32:c9:5d:d3:6e:a6:9e:
d0:36:3b:ee:e1:04:09:4e:42:01:0d:70:c4:9a:a0:cb:91:7d:
22:80:31:40:65:0b:85:24:fa:ab:db:03:63:0b:f9:fb:a5:14:
bb:3f:e0:00:da:80:41:e4:c3:40:6a:02:e2:f1:e5:65:f0:51:
0e:7e:10:4e:7f:a4:5c:0c:50:6e:a6:47:be:fb:de:30:a8:54:
c8:db:8f:56:15:12:55:4b:fe:4b:bf:ff:7a:a4:6f:d9:7b:96:
6c:8d:56:aa:aa:24:19:57:73:f6:91:f2:f3:64:82:ab:e7:51:
9c:62:5c:c0:a0:04:fa:a9:b0:ee:57:ed:0a:a8:cd:27:7f:ea:
eb:3f:88:78:ce:0a:81:c7:45:bb:c9:08:77:13:9d:3e:14:a9:
38:a7:a6:cc:d7:69:ed:8d:38:a7:50:c3:55:76:3d:b7:28:df:
1e:71:c4:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:33 2025 by rpki-client