Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CZmR6ZCcN06T6pMYDW0WOJaEYbQ.roa
File: CZmR6ZCcN06T6pMYDW0WOJaEYbQ.roa (raw, json)
Hash identifier: jUQ2DyFAOds+U/c9ImEhtpGnI9nPINz+cKezn+Dk9D4=
Subject key identifier: 09:99:91:E9:90:9C:37:4E:93:EA:93:18:0D:6D:16:38:96:84:61:B4
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019646A48A078CA167642247E21E9D6F4913
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CZmR6ZCcN06T6pMYDW0WOJaEYbQ.roa
Signing time: Fri 18 Apr 2025 02:05:10 +0000
ROA not before: Fri 18 Apr 2025 02:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:46a3:a68a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 18 Apr 2025 02:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a4:8a:07:8c:a1:67:64:22:47:e2:1e:9d:6f:49:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 18 02:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=099991e9909c374e93ea93180d6d1638968461b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:e9:97:ba:57:b4:72:24:39:8d:8f:3c:f9:
cf:4f:2c:60:86:f1:3b:35:de:f6:20:a8:85:8f:ea:
a4:3a:f4:20:60:31:1f:fa:83:a5:7c:72:c3:ab:b4:
c6:29:c2:a4:1b:1c:ac:5a:b8:86:52:58:9e:59:8d:
71:9d:9c:70:69:7b:4e:e1:c8:f7:d4:55:e1:b8:7e:
65:d2:13:cf:80:89:cc:8a:86:aa:c6:5d:63:6a:0e:
4b:7f:1d:61:1c:67:88:ba:87:de:f5:b0:19:e0:39:
db:bd:94:c8:f2:7f:89:22:67:e9:6f:e0:d5:a9:6f:
20:a9:32:66:58:09:90:d5:bc:9b:a9:dd:2f:fd:43:
e9:54:30:3d:65:32:2b:6d:34:6f:d0:05:79:33:7d:
3e:58:67:ce:7c:27:0f:30:f1:0b:2a:b6:a3:89:92:
f2:85:79:c2:e6:df:2e:49:3d:c0:81:66:f4:ac:bd:
db:e0:fc:7e:50:d8:da:4f:6e:fa:02:03:95:25:bd:
77:2f:3f:b1:34:49:ba:62:df:e0:84:03:e6:04:ab:
21:00:38:ac:db:59:68:d5:ca:1b:89:64:09:79:9e:
87:e6:2a:c7:cf:73:47:3e:05:ca:ac:dc:75:4f:6d:
02:3f:77:0d:87:b9:30:21:29:ba:df:50:0d:f4:ea:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:91:E9:90:9C:37:4E:93:EA:93:18:0D:6D:16:38:96:84:61:B4
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CZmR6ZCcN06T6pMYDW0WOJaEYbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:46a3:a68a/128
Signature Algorithm: sha256WithRSAEncryption
b2:dc:5d:82:e6:71:c6:80:d4:1b:fd:be:8e:87:9f:91:38:79:
37:4c:4d:c7:91:10:c8:1e:a5:98:3c:29:d3:6c:d4:00:cb:d8:
09:e0:89:c9:27:28:f0:c8:c0:aa:32:47:03:58:e8:3e:60:9f:
b4:af:70:d8:17:5a:f5:90:93:8b:b2:84:a8:82:92:2c:32:88:
e9:ba:30:22:b6:e8:99:df:79:7b:cc:17:44:24:e4:20:ca:46:
f8:eb:83:f9:49:f4:19:fa:e8:84:fd:92:df:44:ec:45:20:d8:
67:d2:fc:99:5d:80:a1:ee:61:d6:ca:31:85:1e:23:09:72:6e:
4d:8b:dc:61:34:19:49:6e:b6:4f:b7:ed:0f:c1:49:1a:8c:9b:
25:ac:e2:c0:ae:9a:6a:a9:16:96:73:af:bb:71:2b:3d:36:4c:
7a:a6:ef:1e:ae:12:a6:c4:ac:10:67:67:95:6c:d1:48:30:14:
94:59:33:e7:a1:33:40:c4:a2:49:86:3b:6d:4b:58:38:90:4d:
65:14:59:1b:17:2a:06:41:bd:a3:04:93:73:a8:cf:d1:09:06:
09:50:54:be:2d:0e:c9:70:bc:2b:fb:5b:e7:f9:f5:fc:eb:c4:
49:83:03:39:dc:47:02:e2:c4:fd:c7:cf:01:d3:eb:74:35:be:
5e:d3:fa:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:11:57 2025 by rpki-client