Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/A10KS6R-wdkBd_W0r6IgoS3BLZY.roa
File: A10KS6R-wdkBd_W0r6IgoS3BLZY.roa (raw, json)
Hash identifier: Wli+34vS7psFUjx4irHgU79/y4wIcusKjmwQhI5cgIs=
Subject key identifier: 03:5D:0A:4B:A4:7E:C1:D9:01:77:F5:B4:AF:A2:20:A1:2D:C1:2D:96
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970013501343DEAEAF776E05BB615049C6
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/A10KS6R-wdkBd_W0r6IgoS3BLZY.roa
Signing time: Sat 24 May 2025 02:15:54 +0000
ROA not before: Sat 24 May 2025 02:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 24 May 2025 03:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:00:13:50:13:43:de:ae:af:77:6e:05:bb:61:50:49:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 02:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=035d0a4ba47ec1d90177f5b4afa220a12dc12d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:19:2b:27:5a:5d:32:f5:91:91:8c:6f:4c:fe:
2b:bc:32:af:3a:86:c1:78:1c:2b:fc:6d:33:41:f7:
82:bd:e2:43:26:c7:4b:c2:47:96:1f:9b:08:94:e8:
46:a1:79:28:fe:ca:ec:02:a6:7e:63:1e:af:d7:d0:
c4:51:d9:55:5b:9b:78:6b:3b:ba:76:55:a9:b0:0c:
43:51:90:86:d6:fb:0e:e1:c7:09:76:23:f8:17:39:
dc:57:30:18:f6:73:d7:61:5a:18:d0:d9:8a:f0:fb:
40:f3:3c:10:ee:fd:73:be:2f:ee:0b:23:b2:71:b0:
37:6d:e6:9a:1e:20:fa:e4:d4:5f:28:d6:cb:80:9a:
ca:88:83:10:7b:d7:e0:87:3b:cf:8b:82:93:89:14:
13:32:43:39:ad:8d:4e:c0:32:dd:5d:90:a2:8e:da:
c1:83:e4:1e:72:81:93:ea:27:ca:f3:f6:18:ca:9c:
2e:6b:89:a3:ab:26:f5:98:02:95:a4:50:b4:0b:cc:
02:c8:90:ec:0b:98:18:44:37:7b:83:af:23:a6:9d:
d1:45:46:fd:6d:a4:4a:31:75:8a:59:8b:22:90:a4:
c9:8d:22:e6:06:2c:6c:5a:e6:f6:2f:31:01:5c:d4:
1f:aa:a2:69:f5:df:02:98:97:46:a3:ad:c4:cb:9a:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5D:0A:4B:A4:7E:C1:D9:01:77:F5:B4:AF:A2:20:A1:2D:C1:2D:96
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/A10KS6R-wdkBd_W0r6IgoS3BLZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
3e:39:8c:89:f9:67:4b:7c:65:e3:4b:fa:5c:72:8c:48:b0:de:
3e:b2:97:e7:22:22:88:ad:04:3a:e9:88:e1:ec:6e:7e:f0:53:
52:60:4d:a3:3b:f9:91:40:8a:78:f1:53:9f:40:87:6b:51:93:
d6:94:96:bf:6e:bc:c8:e0:37:a9:a7:b5:93:87:44:02:e5:d2:
e0:a7:25:a0:1e:cf:bd:d2:da:01:87:ef:b3:b6:3d:e6:5c:2e:
3c:32:3a:4b:92:23:4a:2f:99:5f:0d:85:5a:7a:c6:57:c1:46:
19:b7:4d:79:57:a7:8b:4b:7b:6e:65:98:90:5f:b6:7a:3b:3c:
9e:3d:ec:ae:d4:ed:bc:55:2e:79:31:3b:15:17:47:3e:f1:9f:
37:50:69:c0:6c:7b:fa:5a:86:33:67:98:bc:65:2e:2b:6d:95:
ca:58:67:70:54:19:e3:ef:4b:fb:17:c8:28:e2:4d:66:6b:a1:
3d:bd:0d:8e:53:74:cb:f5:6e:37:a7:78:f9:5f:04:85:5b:6e:
5d:f7:e5:ed:61:a2:18:69:94:58:70:42:2b:79:55:1f:5c:1f:
57:98:26:a0:ad:fb:ef:e6:b6:91:ea:3d:cf:2c:79:96:ac:38:
ad:f0:ea:67:43:c4:e4:14:bc:fe:7b:70:c2:93:59:1a:d8:20:
b1:71:8b:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:06 2025 by rpki-client