Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/76PbFcfICq8ljEFnPIG41E0_TEI.roa
File: 76PbFcfICq8ljEFnPIG41E0_TEI.roa (raw, json)
Hash identifier: n/eVCgZAIeFnIpqxNxRG9rTBBVNn9jkDCyTlJv30d7Y=
Subject key identifier: EF:A3:DB:15:C7:C8:0A:AF:25:8C:41:67:3C:81:B8:D4:4D:3F:4C:42
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019737A26043CEAD899B2AEB52FFD4397D3C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/76PbFcfICq8ljEFnPIG41E0_TEI.roa
Signing time: Tue 03 Jun 2025 21:11:17 +0000
ROA not before: Tue 03 Jun 2025 21:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 03 Jun 2025 22:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:a2:60:43:ce:ad:89:9b:2a:eb:52:ff:d4:39:7d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 3 21:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa3db15c7c80aaf258c41673c81b8d44d3f4c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:e4:47:4a:b5:11:b9:31:96:c4:70:3c:66:
4c:3d:dd:e8:03:95:b7:6c:37:b2:42:74:41:0d:b2:
4e:44:34:d3:0c:6e:ff:bf:1b:e3:2d:67:a7:fc:f8:
4f:71:a8:d4:26:5a:9d:1b:9a:9b:50:2c:84:af:82:
63:cf:03:7a:ae:1c:c4:92:5d:cd:69:1c:0e:f5:43:
b3:c8:4f:c6:1f:d5:53:ef:c1:8f:15:81:83:fd:ce:
62:a9:75:6c:60:c2:87:9b:b4:68:7a:fe:de:32:0b:
24:ba:e8:4d:05:e8:f3:42:d5:0f:fb:c7:79:e7:ba:
4b:bf:96:86:ae:67:e4:f4:dd:d1:cb:28:bf:20:a0:
53:d9:4f:dd:77:e9:bd:dc:df:51:15:57:73:4f:d7:
4e:30:ad:53:6a:88:c2:25:81:35:d1:68:7e:6c:84:
07:38:f1:09:e1:00:10:48:ae:2f:75:05:f3:1f:c1:
c7:13:93:7c:0a:d5:9e:44:a3:66:70:43:36:8c:ae:
59:b4:08:bd:41:0f:f6:82:40:ff:cf:07:76:28:53:
73:29:16:4d:86:f4:a3:82:2f:fb:c5:df:09:91:0b:
7f:21:cc:35:7b:c3:56:95:3e:5c:42:ea:49:d9:98:
97:e9:cb:20:20:c1:e5:fd:60:f3:d1:df:bf:06:68:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:DB:15:C7:C8:0A:AF:25:8C:41:67:3C:81:B8:D4:4D:3F:4C:42
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/76PbFcfICq8ljEFnPIG41E0_TEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
26:c0:c8:d9:da:e9:0d:79:19:80:f9:91:33:89:85:ed:16:a2:
88:84:c2:3d:fe:99:43:85:4e:89:15:ec:d1:51:67:90:88:9b:
ef:f7:83:65:7f:75:62:dd:f2:9a:de:cc:de:53:da:62:1a:4c:
86:6d:55:1d:ab:fd:1e:e4:c3:19:7a:a4:85:73:59:d1:4f:fb:
4b:c9:eb:c5:a0:1f:39:5c:db:ac:21:19:99:49:d2:da:27:b0:
dc:ee:dd:f2:33:e9:8c:91:88:d2:d3:1d:43:e6:0e:df:09:90:
8a:eb:64:c0:74:14:28:f5:ee:16:b6:90:6d:32:93:44:4e:4c:
a2:df:4d:c3:b9:ef:53:af:ec:07:55:b9:80:22:99:4f:a5:b9:
70:8c:35:59:a7:f0:d6:a6:20:c9:70:fe:3d:0f:ea:fe:c4:8f:
f5:27:67:9f:64:9f:d8:44:4d:c5:50:22:41:8c:c3:9d:68:b2:
e4:9f:51:52:f2:25:9c:c1:14:97:a6:f8:dd:db:0e:6d:03:7a:
3a:db:52:3c:76:ba:7a:86:d2:d1:8f:82:70:3f:49:62:ff:86:
d4:20:4e:a0:f2:bb:fb:cc:8f:59:3d:bf:c3:6c:b6:83:31:22:
54:7b:89:84:27:48:bd:d4:34:9b:e3:8e:d1:16:16:c4:42:15:
b7:17:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:42:58 2025 by rpki-client