Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5Wc-XMiENDzDfNBq982hIEWQGYY.roa
File: 5Wc-XMiENDzDfNBq982hIEWQGYY.roa (raw, json)
Hash identifier: rvZSuP2jjRG0nEDuTxoU9S2T8oVckQyKPwvaoUiVqKc=
Subject key identifier: E5:67:3E:5C:C8:84:34:3C:C3:7C:D0:6A:F7:CD:A1:20:45:90:19:86
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019705A5B31A8A6E3D48072F4DA5500B12EC
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5Wc-XMiENDzDfNBq982hIEWQGYY.roa
Signing time: Sun 25 May 2025 04:13:54 +0000
ROA not before: Sun 25 May 2025 04:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 05:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:05:a5:b3:1a:8a:6e:3d:48:07:2f:4d:a5:50:0b:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 04:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5673e5cc884343cc37cd06af7cda12045901986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:21:11:c3:98:77:da:d9:42:a8:23:8d:da:
b1:37:30:2b:8d:52:3f:6f:75:a6:86:d0:bf:1b:21:
bf:e1:b6:df:77:1d:c1:5f:b2:51:6a:5f:c0:96:f9:
e1:10:d5:b2:e5:8b:92:c9:fb:0a:6f:a4:50:e4:17:
b8:73:69:17:81:8c:d0:a8:9c:9b:fb:29:b0:6c:b0:
07:f7:07:ee:01:6b:4b:53:3e:10:4d:38:6a:80:e0:
28:34:8f:3c:84:ba:10:aa:3d:48:9e:31:a5:0c:57:
ea:73:66:c6:f8:a9:0e:e5:55:ea:c0:f7:68:1c:da:
76:c9:70:5b:a8:d8:36:2b:93:d6:86:e6:90:f6:86:
83:7b:dd:32:01:00:4d:a2:fe:d8:f9:9a:f6:b7:39:
dc:1e:57:bd:a7:c7:c3:f8:1c:18:28:af:c6:5f:19:
f2:a9:ec:98:43:db:c0:9d:80:35:4b:87:c1:68:53:
0b:65:80:a3:9f:44:e2:87:cc:d5:32:20:d9:76:7e:
3b:c1:d2:91:2f:68:cf:ca:60:a9:78:ac:f6:55:d9:
42:0f:7f:25:b7:9f:7a:07:e5:92:85:76:f0:03:aa:
3a:96:4b:fe:dd:0d:cf:6a:89:e6:0d:c4:7a:16:64:
c8:d9:04:d0:5f:6a:52:85:f4:f1:d4:cd:17:b3:5d:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:3E:5C:C8:84:34:3C:C3:7C:D0:6A:F7:CD:A1:20:45:90:19:86
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/5Wc-XMiENDzDfNBq982hIEWQGYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
ad:66:8b:f1:7b:34:47:c0:14:eb:87:4f:b4:11:d5:32:f1:b7:
1f:ee:d2:b8:8d:8c:b3:60:c5:01:42:5d:8b:e2:28:be:97:70:
62:45:71:1a:4d:88:3d:46:84:bb:28:22:81:47:2d:6d:38:51:
e0:44:21:d6:a5:5a:81:d8:91:5e:3f:ff:38:66:16:d3:0a:9d:
fa:d7:09:07:b8:bf:44:a1:dd:a8:1d:6b:a6:67:60:0b:6a:9e:
4f:82:7e:92:1d:a0:85:81:76:5c:c4:77:c0:ad:f1:76:c7:a4:
e1:3d:7b:34:5d:dd:a3:d1:16:ef:43:8d:3d:d9:b5:35:8a:8c:
9c:91:76:ff:cf:22:9e:a0:da:ea:16:29:88:23:04:9d:04:a5:
df:dc:93:ee:11:68:5b:fc:7b:91:da:94:31:3b:6a:c3:1b:da:
b7:0f:13:73:a0:68:9a:f8:2c:cc:48:2d:22:47:7f:e7:3a:50:
b2:25:f0:1c:1c:5c:c6:44:c7:34:b2:aa:e9:a3:c0:37:b3:13:
40:3c:38:7e:71:f2:a4:e3:69:32:96:77:28:b7:e7:f9:27:a0:
04:29:75:47:9b:86:ea:8b:e7:7d:86:4f:5e:f2:f7:03:59:79:
0a:46:49:ee:08:47:d0:3a:ad:87:0e:ac:47:4c:42:7b:13:60:
85:f9:f0:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:16 2025 by rpki-client