Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/6OqVIT4GbmDtoSxTiP5uUB3N_i0.roa
File: 6OqVIT4GbmDtoSxTiP5uUB3N_i0.roa (raw, json)
Hash identifier: szmyFphsgTEchYtumqM9mAMjR4yYnlyYZXknsFO52Fs=
Subject key identifier: E8:EA:95:21:3E:06:6E:60:ED:A1:2C:53:88:FE:6E:50:1D:CD:FE:2D
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019662C094FA8077064799F3FA5E4AFB3B2A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/6OqVIT4GbmDtoSxTiP5uUB3N_i0.roa
Signing time: Wed 23 Apr 2025 13:05:10 +0000
ROA not before: Wed 23 Apr 2025 13:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:62bf:b5e4/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 23 Apr 2025 13:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:c0:94:fa:80:77:06:47:99:f3:fa:5e:4a:fb:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 23 13:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ea95213e066e60eda12c5388fe6e501dcdfe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:0a:68:c9:c9:f1:83:78:f6:28:b2:52:e8:
1a:af:4b:64:02:0d:1f:b1:39:a3:e7:ff:90:61:40:
63:1d:e7:d0:a1:32:ef:55:56:dd:06:b0:be:4f:bd:
54:79:9e:71:3d:60:66:63:af:b8:53:28:06:ff:d7:
f6:25:14:a2:c8:26:36:ea:51:58:5f:01:ca:b0:74:
53:75:81:96:33:a0:59:be:18:6c:91:51:e4:25:b7:
37:e9:21:3d:70:39:63:0c:88:63:fa:eb:cb:f1:46:
25:96:3f:5d:dc:70:c5:00:5a:67:e6:18:b5:08:36:
57:d2:36:7f:53:be:ab:b9:5a:f7:fd:51:1a:b1:8f:
5e:11:d4:40:79:ff:93:25:cf:66:f4:b0:c5:f3:80:
d6:db:6f:f4:3d:6e:17:ef:19:37:4a:38:12:e9:78:
ce:e6:59:ea:fd:10:d0:6d:75:51:b1:45:be:a8:51:
c6:56:22:e7:2e:9d:76:17:81:d1:26:d4:4b:e3:e1:
3d:f4:cb:81:a9:10:63:be:52:b8:a7:7a:ad:69:59:
92:3a:e6:b8:22:9b:52:c0:ca:b4:7a:ac:a4:3b:e6:
78:e2:18:ce:08:bc:99:99:cc:46:50:bf:ff:f8:74:
ad:06:32:ea:02:75:72:5d:38:75:ab:ad:c9:94:34:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:95:21:3E:06:6E:60:ED:A1:2C:53:88:FE:6E:50:1D:CD:FE:2D
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/6OqVIT4GbmDtoSxTiP5uUB3N_i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:62bf:b5e4/128
Signature Algorithm: sha256WithRSAEncryption
3c:41:a0:1a:39:d1:25:46:8c:7b:fb:db:79:8a:f5:7b:d9:79:
12:f8:8c:e2:9a:e8:41:6b:35:36:98:d2:94:1f:8e:5a:3d:2d:
d4:f8:09:ef:f9:fb:1e:3e:39:16:54:e8:e6:ff:df:f9:53:63:
2f:e1:1d:bd:f1:a3:ad:3b:50:08:86:ab:d9:c6:96:dc:52:4a:
ce:95:66:d4:dc:44:23:aa:6b:d8:13:fe:76:07:a9:af:e8:a6:
09:df:ba:9c:6e:c3:46:0b:31:31:e3:a1:a5:15:52:e9:8d:48:
b8:e5:48:73:f1:9d:c9:d7:06:c0:8d:9c:1f:b0:d9:e9:60:b2:
4b:57:1a:3e:f6:b1:18:b4:8b:ee:3c:ec:d1:99:15:b7:eb:e1:
61:7b:6d:b5:5e:6f:81:da:2d:bc:f7:ff:34:e0:6b:37:eb:91:
de:84:32:87:34:a6:9e:9c:79:78:82:e2:79:26:62:3a:38:89:
c7:22:cc:d9:a8:e5:33:11:a2:98:a6:71:04:e4:63:94:51:64:
df:ec:5a:79:0f:b9:16:7e:84:4b:e2:41:2c:93:4a:41:43:6a:
20:b8:68:5c:09:0f:10:b6:bd:45:83:67:b8:cf:a9:36:4c:17:
3d:f8:27:cd:a2:45:75:42:27:4d:2d:72:c8:91:64:92:ad:c5:
8c:68:91:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:58 2025 by rpki-client