Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/8ONS-e_AggwVUVamDF4Y5cRMCSs.roa
File: 8ONS-e_AggwVUVamDF4Y5cRMCSs.roa (raw, json)
Hash identifier: Vv7M9qBzWi6s2g6nwuzhQs9oJyY856v5BHOZ3ZMNGgs=
Subject key identifier: F0:E3:52:F9:EF:C0:82:0C:15:51:56:A6:0C:5E:18:E5:C4:4C:09:2B
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019727F9D9210CF199ABD40DA3D05FEB9AC6
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/8ONS-e_AggwVUVamDF4Y5cRMCSs.roa
Signing time: Sat 31 May 2025 20:12:54 +0000
ROA not before: Sat 31 May 2025 20:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 31 May 2025 21:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:27:f9:d9:21:0c:f1:99:ab:d4:0d:a3:d0:5f:eb:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 31 20:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0e352f9efc0820c155156a60c5e18e5c44c092b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:f9:20:49:6a:4f:38:9a:7e:4c:f9:48:47:
7c:ed:3f:fd:40:59:d8:05:6c:c9:8d:19:36:ce:89:
ee:c1:43:96:4f:3b:5d:98:f6:39:17:61:fe:8b:2a:
cc:48:f1:9d:a3:0b:76:f1:60:73:f9:7d:1d:62:0a:
a0:40:c6:41:de:da:99:d1:75:33:76:fc:8f:e4:d0:
96:c4:9b:56:3f:a4:63:fa:5a:24:e9:37:69:b4:b7:
52:db:71:cf:e8:f1:45:9b:1d:32:91:72:42:e4:c4:
ed:46:31:6a:a7:1e:a5:e5:ba:ba:b4:9d:9d:f4:75:
44:9a:a4:1a:90:54:5c:16:a6:de:2a:20:aa:a7:87:
95:ad:95:46:8c:d5:e6:96:00:4e:08:78:aa:20:be:
8d:c6:05:42:1f:73:a5:ff:ea:0a:f2:26:b9:92:e8:
ec:71:68:7c:28:fe:a1:57:2c:2e:19:57:cb:c4:79:
c0:fc:a7:a8:e7:ad:e9:9a:cf:bb:da:f1:07:55:ba:
ff:08:97:6f:e8:85:a9:45:8c:3d:56:03:12:69:01:
2c:c9:38:89:a8:46:cc:93:d9:f6:3a:24:25:e1:a8:
aa:13:0b:0a:8e:ef:87:1a:8b:dd:14:e5:98:0d:06:
f4:54:f5:fe:ac:63:90:dd:6a:29:db:53:17:34:16:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E3:52:F9:EF:C0:82:0C:15:51:56:A6:0C:5E:18:E5:C4:4C:09:2B
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/8ONS-e_AggwVUVamDF4Y5cRMCSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
12:b0:cd:21:e5:aa:e3:33:55:e3:a7:71:45:ac:54:3a:91:56:
7d:ff:a1:a6:bf:01:6f:93:3b:aa:39:97:d3:ac:65:4c:c8:61:
36:ea:4d:8f:a3:dc:b2:53:12:d4:fb:b2:f6:c7:7b:5c:95:65:
03:71:b0:d9:89:93:50:e5:77:b1:a5:6f:2b:01:d0:96:fc:1c:
94:91:5a:ec:81:cb:bd:0b:0b:ad:15:0c:9b:ed:68:42:eb:7a:
c5:30:4e:d3:f9:90:f4:c7:e1:c3:53:d5:47:1d:d7:00:d4:b4:
a2:ae:ef:2a:ce:19:4e:8c:94:b7:0b:be:2f:a2:30:a1:45:b5:
ae:db:e6:19:05:f8:da:ad:d2:8f:76:82:69:55:5c:51:cd:15:
a0:e3:f0:ea:59:04:96:5d:c3:e9:d4:da:b5:74:73:60:75:09:
97:bd:1d:63:11:bd:d5:db:e7:34:e9:29:2a:d2:03:d6:e6:d9:
da:ed:5f:71:2c:47:61:83:0c:fa:e7:54:d7:b7:5e:51:cb:f8:
ba:78:71:b2:74:ea:29:b9:bf:87:16:04:0a:60:01:a6:64:7b:
8b:46:7d:bb:aa:8c:bc:07:be:e6:d1:b5:06:c3:b7:55:b0:57:
0f:06:78:d8:58:50:52:dd:de:4f:c7:64:18:cf:0a:5c:43:43:
51:28:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:00 2025 by rpki-client