Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/B0bOE2_sOGruLkN6FGmSbgEcYdc.roa
File: B0bOE2_sOGruLkN6FGmSbgEcYdc.roa (raw, json)
Hash identifier: agZqU2pBlYuu7h9nVZSkXLjHBj3eyfN2zmzeKgxBzQ4=
Subject key identifier: 07:46:CE:13:6F:EC:38:6A:EE:2E:43:7A:14:69:92:6E:01:1C:61:D7
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019744841BDDDFB917C07DFD84C5A302D239
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/B0bOE2_sOGruLkN6FGmSbgEcYdc.roa
Signing time: Fri 06 Jun 2025 09:13:17 +0000
ROA not before: Fri 06 Jun 2025 09:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 10:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:84:1b:dd:df:b9:17:c0:7d:fd:84:c5:a3:02:d2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 09:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0746ce136fec386aee2e437a1469926e011c61d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:9b:72:c8:f7:16:20:76:00:3d:fe:73:2e:
a2:3a:72:c7:97:6c:92:cc:53:f1:96:d4:03:70:52:
27:ed:dd:46:2c:60:92:75:00:16:40:cb:6a:21:ab:
8a:88:25:99:88:43:34:30:21:16:6a:f2:ab:fb:e8:
bf:6e:04:9a:e0:36:21:c1:70:96:5a:37:2a:42:73:
f0:e8:e4:07:1e:9d:d3:ca:c1:4b:64:65:d5:f2:41:
6f:e9:ce:53:c7:10:49:3c:41:26:da:fa:68:56:42:
62:d2:40:c1:06:c2:8c:ff:82:26:ae:08:56:70:cb:
a5:0c:2a:d4:7d:cf:76:47:ea:e4:0a:73:4e:cf:cf:
d5:00:13:9d:eb:5a:72:0f:ca:60:03:08:54:40:d1:
f6:02:c4:4e:db:96:b3:ec:6b:4d:49:63:66:56:0e:
e9:dc:41:5f:fd:03:b9:51:85:7c:50:34:29:c4:3e:
3a:05:76:c7:ac:80:22:55:34:6b:49:dd:8c:23:12:
d0:19:cf:27:f8:e2:98:6d:c0:16:8f:6b:27:41:8f:
2c:72:53:d3:81:99:41:d3:f2:51:02:ed:cd:21:f9:
b4:a2:42:9f:29:42:a2:bf:62:f8:0f:00:12:7a:25:
cc:6c:b1:66:26:78:8d:6a:c8:6d:b4:89:58:df:e2:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:46:CE:13:6F:EC:38:6A:EE:2E:43:7A:14:69:92:6E:01:1C:61:D7
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/B0bOE2_sOGruLkN6FGmSbgEcYdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
23:15:cc:ed:f3:13:44:15:2c:4f:d2:4c:b6:51:08:9a:90:6c:
db:8b:c6:a0:ff:97:46:44:97:e0:20:3a:20:ab:8d:67:39:70:
3c:38:ba:8a:25:de:d7:f2:d9:48:cc:4e:20:79:4b:45:91:0d:
52:96:0b:03:03:04:c3:85:18:ed:60:4e:b1:33:c0:0b:b3:b0:
a2:ab:14:6b:a4:c3:cc:14:0f:33:c1:7d:b1:82:5c:58:d5:a6:
d2:77:de:2d:b7:b6:77:b5:fc:1f:e8:ae:2b:b1:f7:24:ad:a6:
0a:dc:03:67:a6:4b:15:29:fb:2f:28:b2:6d:e0:59:96:c3:ef:
f7:e7:5d:20:ef:85:ce:19:e7:a9:f7:f0:12:73:f6:db:be:7b:
53:12:10:0f:38:c7:33:69:61:eb:da:76:40:88:0d:c8:8b:17:
91:bf:1d:15:c7:85:28:a9:eb:48:a0:4c:c1:73:d7:ab:50:a6:
ca:1f:20:77:25:6d:dd:d3:61:b5:fd:29:f8:72:0f:18:7a:3c:
09:33:e2:15:f8:ef:ad:74:1d:a8:75:90:3a:31:b4:55:56:cb:
b0:f3:37:63:2f:89:cf:cd:bc:38:89:a4:93:03:e7:c4:f4:c2:
6d:8c:f0:8d:a4:bb:bf:ee:d4:b7:c3:3c:7c:24:c4:d4:41:7f:
24:a8:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:51 2025 by rpki-client