Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BuL41r8NmurtWBUpwq2kV2YeDw8.roa
File: BuL41r8NmurtWBUpwq2kV2YeDw8.roa (raw, json)
Hash identifier: w6lYDiSLLuPYFUTUcbh+2sumuoHfFBw0K3Y29pMtqy8=
Subject key identifier: 06:E2:F8:D6:BF:0D:9A:EA:ED:58:15:29:C2:AD:A4:57:66:1E:0F:0F
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01966B8CC87A7672F593910A8A1D71410064
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BuL41r8NmurtWBUpwq2kV2YeDw8.roa
Signing time: Fri 25 Apr 2025 06:05:10 +0000
ROA not before: Fri 25 Apr 2025 06:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:6b8c:92/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 25 Apr 2025 06:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:8c:c8:7a:76:72:f5:93:91:0a:8a:1d:71:41:00:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 25 06:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06e2f8d6bf0d9aeaed581529c2ada457661e0f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:a4:36:66:e3:27:88:6d:f1:99:56:64:27:
f7:ba:50:b1:83:5e:29:bc:ce:cb:78:e7:86:ca:18:
32:d6:55:88:c1:f8:49:94:36:68:75:ea:04:dc:b8:
87:ac:a1:6e:f4:07:0b:51:17:74:8a:53:d9:9b:e7:
1f:77:cd:1e:70:26:0a:20:96:14:0f:b5:3d:f1:a3:
65:fd:fa:6e:ac:dc:27:1d:82:4b:9a:7b:72:d0:a9:
f4:7a:b0:53:61:f2:26:43:34:f6:04:8c:18:2d:f4:
dc:c5:d0:a9:58:3c:6f:44:a6:44:b4:e2:7e:33:0f:
04:a6:3f:85:f5:9d:e8:85:31:53:52:fc:6a:ac:da:
0b:13:fe:67:65:44:61:e6:15:ba:40:d2:8c:db:7b:
24:9f:0b:16:bd:19:a8:cd:7a:b3:f4:57:cc:e0:7b:
61:15:ec:d0:e7:9a:33:94:07:7e:3b:e0:8b:c8:fc:
06:00:19:e6:68:ee:78:b7:aa:5e:a9:3a:6f:66:d9:
89:e3:3a:ea:de:c1:ab:08:66:7c:58:93:63:1e:63:
b9:21:2f:3f:bc:f0:ff:01:f6:f8:45:f0:de:a6:d8:
22:20:c2:24:89:62:8b:2b:1a:cb:e5:d4:00:2f:7d:
51:c3:71:e8:aa:8f:33:cd:f4:4c:be:cd:bd:0c:3f:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E2:F8:D6:BF:0D:9A:EA:ED:58:15:29:C2:AD:A4:57:66:1E:0F:0F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/BuL41r8NmurtWBUpwq2kV2YeDw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:6b8c:92/128
Signature Algorithm: sha256WithRSAEncryption
ba:5c:34:cf:a3:3d:da:6f:3b:f6:03:22:d3:b6:78:a9:1d:1a:
61:a0:cf:47:6c:33:2b:6a:fb:0a:61:60:5d:cd:03:23:ec:9f:
cd:a0:ab:4e:62:ca:49:9d:d4:71:f1:91:07:80:e3:d8:f9:d3:
3e:31:5c:10:b1:9f:9b:bc:d5:c5:04:98:87:22:b4:0d:df:25:
56:87:e5:5a:b7:b1:26:f9:bd:70:cb:7e:2d:74:ea:4e:9a:f3:
e1:74:e4:72:93:ae:ec:de:09:fc:a8:67:e1:e5:1f:2c:5d:81:
c0:f1:96:8f:b5:04:1f:89:7d:64:1c:cc:6e:d0:15:07:5c:03:
5d:0f:57:d8:d1:f3:a9:93:0e:8b:97:31:5b:c9:cf:5b:66:30:
b9:8f:8d:22:ef:85:d1:31:8c:2d:50:59:63:1b:bb:af:75:b0:
6b:ab:07:43:82:9a:18:86:97:9d:3a:6d:33:b3:e3:72:34:f5:
dd:72:32:22:0b:60:7e:d7:34:b2:88:de:9f:d4:f1:a0:f9:b6:
36:ce:8c:d5:9b:d9:20:0c:17:0b:8b:e6:07:83:9d:8d:2c:00:
75:c1:94:1b:62:2e:67:a4:a6:00:c0:f5:06:f3:c8:bc:96:de:
8a:3c:de:51:95:7b:50:00:3c:d4:1c:30:30:04:cf:1b:00:77:
bb:55:8d:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:59 2025 by rpki-client