Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7RAN2Q6Q5Q9Ddy8uDhsfi_UyVBg.roa
File: 7RAN2Q6Q5Q9Ddy8uDhsfi_UyVBg.roa (raw, json)
Hash identifier: N2PS0FpMJAPx/v21xENwqB7hKAlT906hfTK3SU505y8=
Subject key identifier: ED:10:0D:D9:0E:90:E5:0F:43:77:2F:2E:0E:1B:1F:8B:F5:32:54:18
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019722668B7816A06618EECA46663C1CADEF
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7RAN2Q6Q5Q9Ddy8uDhsfi_UyVBg.roa
Signing time: Fri 30 May 2025 18:13:55 +0000
ROA not before: Fri 30 May 2025 18:13:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 30 May 2025 19:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:66:8b:78:16:a0:66:18:ee:ca:46:66:3c:1c:ad:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 30 18:13:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed100dd90e90e50f43772f2e0e1b1f8bf5325418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:06:2f:58:95:ea:e7:da:12:cc:03:61:cc:
87:df:1d:47:b0:ed:d9:02:c7:11:8c:b8:02:c3:99:
84:12:b6:dc:13:39:c9:ab:9a:a5:9e:64:73:f9:9c:
e5:69:0d:86:5c:aa:04:bf:8a:f9:2b:82:ea:f8:26:
56:b9:ac:42:fc:5e:06:56:6f:7d:4f:91:97:eb:cd:
77:94:22:1d:1b:b0:e0:e5:ed:b1:58:00:e3:d3:83:
71:f9:7e:dd:31:c6:78:70:8d:ca:1e:a3:b7:92:d1:
39:dc:5e:67:43:31:e9:43:6d:17:2d:a6:c6:71:92:
ae:3f:cc:db:9b:e3:3f:28:95:99:3b:43:a5:de:bc:
2d:34:af:ed:f5:80:0c:8d:b4:65:fd:1b:cb:20:79:
85:1d:86:f6:37:24:e9:e9:d7:e0:48:d4:5c:7c:a2:
08:f2:1e:e1:2d:d8:b6:81:67:1c:e2:87:0d:dc:70:
d7:80:13:ee:f2:3d:74:ff:15:71:da:4d:fd:c5:0e:
69:fc:75:49:ab:14:2f:88:0a:1b:ed:ce:a4:d9:3f:
14:85:81:f6:21:5b:ff:c9:02:3c:23:de:78:ac:ea:
d8:1d:89:b0:1f:de:bc:c7:8e:87:5f:32:e2:c2:ee:
1b:b6:9c:c9:b1:48:4d:fc:fa:5b:11:dd:e8:65:3b:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:10:0D:D9:0E:90:E5:0F:43:77:2F:2E:0E:1B:1F:8B:F5:32:54:18
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/7RAN2Q6Q5Q9Ddy8uDhsfi_UyVBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
7c:09:4b:db:f1:78:4c:7a:e6:19:27:18:08:a6:80:1d:a8:ab:
c1:11:3e:dd:e4:66:f9:2e:92:03:fd:d1:da:73:44:d9:8d:5b:
cb:a0:85:38:5e:71:16:9b:18:09:e8:b1:a0:f0:4f:35:55:5f:
d5:42:fd:e0:79:2a:b1:33:44:f5:fd:76:ad:05:7e:1e:9c:6b:
dd:e9:42:f2:64:af:7a:6f:ef:47:50:8a:9a:a1:50:d8:0a:1f:
e1:55:75:ba:12:a2:20:24:e9:00:f0:7d:12:31:d3:6a:ce:a8:
08:10:00:41:07:28:12:24:8a:60:d0:69:51:db:5f:90:9f:54:
da:07:98:01:f9:a5:ea:67:c8:dd:51:66:17:cb:e9:35:df:96:
0d:79:2c:d7:be:4b:39:86:b8:d9:55:f7:52:f8:aa:7c:b1:4a:
d6:78:38:03:ac:b2:0f:d0:f7:2e:62:77:31:a5:b9:ef:7f:c3:
e9:5a:37:14:5b:96:8a:77:eb:e1:ac:77:01:7e:55:7a:37:7b:
02:3d:63:c0:9d:7c:e3:ff:15:1b:49:7b:1d:28:ac:d1:e7:ea:
4c:dd:67:b6:23:be:77:4a:0a:07:e0:84:0f:4c:86:c1:a0:2b:
3f:f2:27:b0:0f:e6:ec:5a:18:80:c7:b8:d7:77:50:6d:e6:c3:
32:ae:35:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:24 2025 by rpki-client