Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7E9keBVJOpHnuY--7VigaYNRL00.roa
File: 7E9keBVJOpHnuY--7VigaYNRL00.roa (raw, json)
Hash identifier: EwFtU1JgdoALaztkj46acw+TqQCX+Lk6EkSEgOYdNEk=
Subject key identifier: EC:4F:64:78:15:49:3A:91:E7:B9:8F:BE:ED:58:A0:69:83:51:2F:4D
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019740397A36A4D905928BE4582DCA12E454
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7E9keBVJOpHnuY--7VigaYNRL00.roa
Signing time: Thu 05 Jun 2025 13:13:17 +0000
ROA not before: Thu 05 Jun 2025 13:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Jun 2025 14:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:39:7a:36:a4:d9:05:92:8b:e4:58:2d:ca:12:e4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 13:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec4f647815493a91e7b98fbeed58a06983512f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:b1:3e:09:61:ab:d3:18:15:f5:1d:ed:f6:
9a:39:9c:72:ad:53:fa:ec:8a:4c:3a:0d:dd:be:8b:
c3:3d:b7:ed:be:75:c3:31:a8:32:e0:68:1c:e7:47:
e0:20:77:1b:d4:b8:a1:da:9e:f2:86:1a:9b:13:23:
ee:9b:e5:f1:28:f3:6f:8f:23:15:5f:60:72:63:60:
97:a1:db:1f:58:09:1a:4a:3e:4a:bc:04:6b:fa:d4:
f8:46:bc:e8:07:08:c6:89:1d:13:fb:df:f2:90:64:
a4:96:fd:2f:9d:c0:79:51:00:17:00:9b:b5:32:e9:
02:d9:9e:0f:97:65:be:55:40:6e:cf:af:8e:5d:34:
a8:8b:5e:52:d1:31:c2:09:63:18:4c:8b:ee:d4:85:
d9:bc:63:90:dd:0e:6a:51:d7:30:ee:f0:bc:b5:61:
b9:b2:db:15:75:bf:4a:87:e5:44:b4:d7:e5:3b:b0:
cc:eb:32:03:d5:0a:67:ec:ba:e9:73:00:c7:18:ec:
a3:13:40:c3:ff:d8:b2:c3:82:af:e1:5f:c3:64:6c:
0d:62:f3:74:d5:94:15:8e:8a:92:2a:76:cc:25:f9:
5c:b0:01:3e:d1:5d:a3:2f:61:66:5a:b0:8f:3f:46:
e3:39:ca:1b:d2:4f:c7:88:d5:72:6d:17:8e:5f:9b:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:64:78:15:49:3A:91:E7:B9:8F:BE:ED:58:A0:69:83:51:2F:4D
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7E9keBVJOpHnuY--7VigaYNRL00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
b9:16:49:c7:5e:01:d7:63:2b:6d:c1:21:d1:f2:43:49:c0:cf:
29:73:bb:8a:b1:31:f3:2a:f8:77:bf:b0:09:de:1f:ae:7d:e6:
32:08:0b:43:8c:27:fc:17:ed:1e:f9:5d:fd:14:f7:75:6a:07:
c5:cb:59:f7:d9:0f:3d:0d:50:47:1d:a4:08:6c:a6:97:46:16:
0a:d6:3f:87:92:3f:11:7c:79:19:17:18:c4:23:f6:bb:bc:d2:
cf:b3:90:38:25:df:4b:02:39:6b:ed:29:32:48:30:b5:3c:af:
d5:50:74:52:3a:42:93:92:76:dd:d6:31:5d:e2:85:61:da:fb:
36:ff:0c:22:02:42:b5:16:d9:4e:ac:3e:91:5e:35:ef:50:92:
8d:f2:93:dd:8f:bd:ad:ba:71:1f:5a:bc:f3:47:d4:30:c9:92:
5d:32:6d:e4:e1:ee:f7:66:d3:63:ef:d4:d8:aa:f1:61:00:5d:
88:62:ec:f2:7f:02:41:d4:91:58:65:50:9b:0b:15:e8:0d:7b:
d6:99:e5:7b:ea:42:7d:a5:26:73:a0:d9:1b:2b:83:92:cf:ab:
cb:d8:0c:5c:d0:8c:3e:ea:90:7c:55:e1:e9:01:25:0f:58:af:
59:a0:18:36:6d:c6:51:1a:53:49:c7:64:71:66:ef:da:92:6c:
b0:02:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:43:41 2025 by rpki-client