Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9Rbr9Cgshf0rx9rMO_kdiz7ou_w.roa
File: 9Rbr9Cgshf0rx9rMO_kdiz7ou_w.roa (raw, json)
Hash identifier: 7ptLBQ6eiAQ+iCjmdV9vdnrLSwN+zlSLT0J1A9vKAO8=
Subject key identifier: F5:16:EB:F4:28:2C:85:FD:2B:C7:DA:CC:3B:F9:1D:8B:3E:E8:BB:FC
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019707F9B643B6868545460D1CBA14FCBEDA
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9Rbr9Cgshf0rx9rMO_kdiz7ou_w.roa
Signing time: Sun 25 May 2025 15:04:54 +0000
ROA not before: Sun 25 May 2025 15:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:7f9:bb/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 15:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:07:f9:b6:43:b6:86:85:45:46:0d:1c:ba:14:fc:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 15:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f516ebf4282c85fd2bc7dacc3bf91d8b3ee8bbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:2e:2b:ef:7e:30:ad:fe:8c:dd:fa:60:65:
cb:76:88:66:ef:03:fe:14:30:6b:d3:7a:79:56:4a:
6d:a4:3e:8a:37:b2:31:bf:64:e3:d7:54:52:04:7e:
ac:df:d1:18:37:ba:9e:7d:88:98:07:fa:3e:75:2c:
ea:8e:ff:af:1a:0f:c3:8f:42:ce:a1:2c:77:e2:7a:
7c:60:8f:f8:33:51:d6:f8:a1:8e:94:e7:dd:15:f7:
29:e2:d2:33:83:d5:3f:7f:eb:ad:f7:6c:11:e4:93:
17:a0:1a:f6:a3:17:57:4c:22:bd:28:4b:f0:94:57:
83:54:a1:65:6d:b8:66:f4:1c:12:7f:17:95:63:e4:
35:19:e0:ee:36:3d:1e:cd:6a:58:e7:b0:55:1b:9b:
d2:5a:2b:0a:17:53:e1:87:83:65:59:dd:0f:fa:de:
88:e9:51:18:4f:af:f0:29:5f:35:17:56:73:b0:a8:
93:19:c1:c7:25:43:78:49:2e:e1:10:70:43:ce:24:
94:4f:fd:53:c5:c0:02:4e:92:9c:53:7e:c5:b8:2d:
8c:14:45:51:78:03:db:6e:aa:0e:94:9b:c7:db:e5:
37:80:f3:68:19:2f:57:66:21:86:11:c7:8b:e8:04:
d0:b6:74:84:35:39:31:1e:ff:be:e5:23:66:95:df:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:16:EB:F4:28:2C:85:FD:2B:C7:DA:CC:3B:F9:1D:8B:3E:E8:BB:FC
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/9Rbr9Cgshf0rx9rMO_kdiz7ou_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:7f9:bb/128
Signature Algorithm: sha256WithRSAEncryption
24:e5:4d:ed:44:0f:0c:9e:3d:79:b6:b2:ee:c0:a6:99:97:17:
3d:66:0e:6c:fc:65:00:20:b4:68:3e:df:a8:ce:64:a0:a9:1e:
51:cf:62:ec:fb:e5:10:df:46:7c:4e:10:af:f7:64:84:ed:b9:
e9:60:8d:8b:f4:88:fd:03:e2:5d:07:a0:2e:29:ce:d1:89:13:
01:89:68:d5:ce:60:2c:7e:57:40:86:28:9f:d3:1a:ee:03:5c:
fe:31:53:0d:4a:1d:4a:cb:c4:6a:b1:bc:2c:03:f8:a0:5f:c6:
cf:c6:32:6a:78:27:a9:11:46:f5:e5:47:ae:69:fa:2b:d0:8d:
84:a5:e1:8d:89:0c:c3:39:95:e8:05:a1:b5:d3:06:82:70:90:
9b:79:59:61:b4:76:17:4f:2f:94:16:87:ca:c4:f5:8d:86:7e:
70:cd:8a:c0:4b:0c:68:3f:50:ce:91:53:e5:f1:0d:c7:27:1a:
dc:4e:19:26:9b:52:ec:f3:6d:63:cc:54:e7:e4:e0:f2:8e:58:
f5:eb:d0:f3:05:ff:8b:2a:81:79:ff:65:a3:38:e1:9f:24:36:
fe:92:c0:6c:39:a9:eb:b7:a4:4e:09:05:4f:d7:60:4f:d4:09:
72:0f:fe:8d:2e:05:c9:bd:5a:17:20:e8:de:4a:cb:2c:c7:20:
c8:69:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:43:57 2025 by rpki-client