Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CRLRmwoheTYUaFbTYJdj-25G8mE.roa
File: CRLRmwoheTYUaFbTYJdj-25G8mE.roa (raw, json)
Hash identifier: B9eTci/UdFE+TBDIS7bBwVewnT6T2vMKpknpjonq/HE=
Subject key identifier: 09:12:D1:9B:0A:21:79:36:14:68:56:D3:60:97:63:FB:6E:46:F2:61
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971A08356172FBB65E69D5806E2C92AB8E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CRLRmwoheTYUaFbTYJdj-25G8mE.roa
Signing time: Thu 29 May 2025 03:13:54 +0000
ROA not before: Thu 29 May 2025 03:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 May 2025 04:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:08:35:61:72:fb:b6:5e:69:d5:80:6e:2c:92:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 29 03:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0912d19b0a217936146856d3609763fb6e46f261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:06:c8:4f:f3:6a:5a:5a:df:3a:63:3c:95:
68:65:0d:30:f1:44:29:c2:6f:03:cb:2b:07:c5:48:
25:1f:1f:04:50:6b:82:f9:04:1f:f8:d2:a3:d2:7a:
52:f1:da:95:36:1e:68:75:39:87:2d:b5:6e:fc:ac:
b0:66:a1:24:56:06:b2:d2:27:8b:c0:a4:d9:a8:e0:
59:51:94:48:ef:20:10:2b:8f:70:9d:33:3e:e8:32:
bb:c0:20:f0:48:72:11:81:2a:69:8b:a9:cd:9b:df:
38:da:4e:fb:a7:40:77:30:08:d2:47:04:57:f6:7a:
20:ad:db:18:38:aa:92:bb:e3:98:d0:e0:73:f9:96:
b8:dd:5a:74:03:09:e3:de:8a:86:79:85:f2:8f:31:
5c:30:40:8a:7e:d3:fe:94:5b:eb:f1:16:95:c0:29:
69:d3:66:e6:fe:bf:16:b5:a2:eb:59:9a:ea:ee:2b:
cb:c1:48:0d:b4:a7:1f:30:bd:9d:9b:2f:6a:cb:ab:
37:0c:53:6c:e5:0a:44:6c:3f:90:70:55:22:ae:30:
eb:ca:9a:66:e7:71:87:41:42:e0:e8:c0:11:64:72:
35:7a:4a:c1:83:c3:8a:bf:42:44:d9:1b:d2:78:ee:
ed:c7:e0:ae:4d:06:00:28:eb:60:49:9e:83:fa:d2:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:12:D1:9B:0A:21:79:36:14:68:56:D3:60:97:63:FB:6E:46:F2:61
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CRLRmwoheTYUaFbTYJdj-25G8mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
b2:43:6f:4e:d6:43:fa:1c:eb:73:b7:7c:d3:f5:1c:f6:8e:a5:
06:60:2d:08:9e:02:6c:b7:0f:a3:5d:9d:a5:3f:41:28:d1:be:
1a:53:20:81:f1:4d:c6:59:9a:93:e0:39:f6:6d:67:65:ed:f1:
27:b7:3b:95:0f:32:ea:13:76:c2:40:ab:5b:fb:90:67:d2:6b:
d4:de:9f:b4:b7:c9:94:43:38:37:79:f9:c0:d2:29:e6:30:81:
41:af:e1:43:bd:0f:5f:cb:8f:65:37:a7:72:fc:46:db:7f:bc:
73:1a:0c:cc:f7:cf:9c:01:4f:1f:96:b0:32:80:75:8f:e2:ef:
a9:4e:6f:f4:11:97:fc:56:20:6d:69:35:53:19:d1:72:a0:93:
ac:ea:06:fd:d6:20:d3:36:10:4d:6d:38:3c:76:28:fb:aa:1f:
0c:b0:87:f9:48:88:20:6b:52:32:9d:0a:27:37:a6:0b:64:7a:
93:ab:41:06:27:05:f2:07:8b:83:f0:65:08:3e:ff:31:4f:0d:
ac:49:c2:65:73:38:af:d9:01:ea:5f:a8:ec:59:52:bf:f8:03:
af:f2:11:35:f8:8a:bb:6c:82:a4:37:ef:c5:6f:63:b2:b7:ae:
0a:0f:b7:7f:9f:12:45:34:9f:87:18:b7:90:ec:0d:4e:c1:75:
0a:75:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:47:57 2025 by rpki-client