Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7-gIg7X3CeLej-UwhA7E39W-hHA.roa
File: 7-gIg7X3CeLej-UwhA7E39W-hHA.roa (raw, json)
Hash identifier: wgFdAF4hO+K08oFkPCD4bStypVpOoFG19ZW29G90Zi8=
Subject key identifier: EF:E8:08:83:B5:F7:09:E2:DE:8F:E5:30:84:0E:C4:DF:D5:BE:84:70
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196621ADF72822018612F2C1ADB7B3D99CE
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7-gIg7X3CeLej-UwhA7E39W-hHA.roa
Signing time: Wed 23 Apr 2025 10:04:10 +0000
ROA not before: Wed 23 Apr 2025 10:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:621a:d7ef/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 23 Apr 2025 10:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:1a:df:72:82:20:18:61:2f:2c:1a:db:7b:3d:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 23 10:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe80883b5f709e2de8fe530840ec4dfd5be8470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ba:8a:de:7b:80:6c:04:91:a8:b6:28:ba:68:
bc:8e:20:8d:63:78:5b:64:60:2e:86:c5:00:22:cc:
75:3d:3a:84:fe:8e:8b:10:60:e4:52:c9:42:98:39:
81:29:e4:ff:8d:24:4c:6f:5f:c4:89:93:1b:74:cf:
68:11:4d:64:ca:d3:65:83:b5:ac:a4:d7:7f:a4:3c:
db:2c:0e:a4:75:44:85:46:0a:d5:a0:83:42:82:c0:
de:2d:83:30:f6:8d:a4:4e:22:5f:d5:e4:32:b5:11:
76:06:8f:fd:2d:8d:52:c2:40:b2:6d:53:ed:d2:70:
50:fc:91:51:ff:43:2f:70:23:41:a5:2a:4e:83:fd:
97:85:8f:50:be:55:ba:c1:69:47:3e:eb:14:15:db:
d9:a3:80:22:ca:a5:21:4a:a8:5b:60:e1:26:91:67:
4d:a3:43:45:56:a1:73:c7:90:c1:70:67:2e:70:84:
48:54:a7:87:17:0c:a5:53:f6:8f:59:06:2f:7f:b3:
6a:bc:ee:cc:d5:12:d3:a3:30:27:43:e4:ae:0a:78:
6f:aa:a2:2d:88:94:ea:57:cc:3c:2c:97:9d:eb:16:
bb:78:30:8c:51:3a:aa:e0:c4:77:63:3c:a3:34:2f:
e5:d2:30:9c:39:f0:e5:6a:86:d6:f6:88:63:f9:0f:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:08:83:B5:F7:09:E2:DE:8F:E5:30:84:0E:C4:DF:D5:BE:84:70
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7-gIg7X3CeLej-UwhA7E39W-hHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:621a:d7ef/128
Signature Algorithm: sha256WithRSAEncryption
6f:30:74:32:13:d8:63:17:db:08:2f:c0:19:b3:6b:30:ce:5c:
9a:75:40:b9:fc:2c:fa:c5:6b:fb:db:4c:92:99:27:f6:c9:3c:
ab:f2:8f:11:2a:fa:4c:f5:e0:84:11:4a:98:b2:1d:73:b6:7f:
10:02:61:e6:13:5f:93:9e:73:dd:3f:de:25:10:3f:4c:c1:30:
34:4b:d7:24:8a:aa:0a:23:88:d1:57:e5:88:a9:a2:35:cf:ac:
4a:04:15:b8:42:25:9c:8a:39:a6:e6:8e:ab:83:68:52:f4:10:
5c:e6:b6:fa:b3:09:16:0e:31:d6:b7:e6:ef:60:1a:c6:8e:cc:
1f:b1:0c:21:79:58:4f:b7:be:24:cf:16:39:4f:f4:5c:9a:4b:
c5:46:e7:89:bc:4c:75:3b:18:28:46:47:ed:ee:e9:ae:83:73:
56:26:5d:dd:04:02:fb:a2:de:4d:06:8f:a2:c2:fe:4f:2a:11:
7d:8e:99:69:37:84:3c:c9:a2:20:4d:f4:16:a0:8b:9c:20:3f:
b5:06:52:c8:09:e7:6e:9e:b9:ef:6e:a0:ad:60:38:39:77:89:
14:07:f9:84:a9:4d:dc:e4:be:50:f3:46:55:79:6a:8b:36:39:
e6:e7:a3:35:34:99:62:9a:d5:c3:90:5c:dc:f1:db:53:37:7b:
14:ff:a2:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:53 2025 by rpki-client