Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CjXLXIFxN5frppbX-6lDCf-5f5Y.roa
File: CjXLXIFxN5frppbX-6lDCf-5f5Y.roa (raw, json)
Hash identifier: s7rPbrG6PYp0aOP2s6MMOvxIO+Tt+t4xgJ7ywLgmEpY=
Subject key identifier: 0A:35:CB:5C:81:71:37:97:EB:A6:96:D7:FB:A9:43:09:FF:B9:7F:96
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01972D20355A92CE627B1AFAC2B65A89ADF8
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CjXLXIFxN5frppbX-6lDCf-5f5Y.roa
Signing time: Sun 01 Jun 2025 20:12:54 +0000
ROA not before: Sun 01 Jun 2025 20:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Jun 2025 21:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2d:20:35:5a:92:ce:62:7b:1a:fa:c2:b6:5a:89:ad:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 20:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a35cb5c81713797eba696d7fba94309ffb97f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:48:57:79:0f:82:01:4f:a3:a2:d0:61:26:
08:43:a6:d4:2c:71:e0:7a:c8:9f:79:1d:52:5a:92:
f0:5f:04:86:01:f0:80:f9:05:04:01:73:e1:a1:5e:
8e:f2:4c:66:26:64:45:be:fe:ad:c6:f1:bf:7d:c4:
b3:3e:24:4b:c3:2f:68:cf:3f:cb:7b:d0:12:60:0e:
a2:b3:e9:68:a4:4d:12:d2:63:22:00:ef:3e:24:5c:
3f:80:ee:08:2c:4f:73:5a:fe:21:8c:cc:34:76:d2:
22:f1:26:da:ea:a5:41:a3:b4:cb:d1:72:09:a9:57:
e1:76:08:42:64:29:ac:bb:8d:50:3b:7f:f6:6a:b8:
cc:0d:c0:51:87:17:a1:fa:39:ac:8d:0a:bb:8e:60:
e0:12:9d:1f:55:b5:0d:a2:91:9d:a9:83:bd:7c:62:
ba:b9:3d:17:02:c5:2c:68:ca:4e:67:e3:2e:ea:43:
94:b1:a5:44:bb:61:32:bb:06:7a:01:11:cb:32:2e:
9f:57:9e:27:c9:f5:c1:2e:9d:df:8e:dc:8d:b0:38:
b8:de:1b:d3:ea:5f:be:d8:56:b1:7f:83:9f:78:c7:
ea:18:04:21:2f:1b:0d:94:4b:65:8b:94:6c:ea:61:
fc:22:6c:78:8e:91:c4:7a:4c:78:11:18:6e:d4:69:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:CB:5C:81:71:37:97:EB:A6:96:D7:FB:A9:43:09:FF:B9:7F:96
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/CjXLXIFxN5frppbX-6lDCf-5f5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
96:2d:e0:c8:af:5e:24:49:ca:db:72:f8:f4:24:7c:4a:62:4d:
44:df:d4:12:da:97:74:cd:89:8c:e0:60:cf:97:ed:ef:ac:6a:
48:22:1a:21:00:1d:3d:7b:e2:1f:47:ba:ca:14:dd:16:8b:df:
fa:85:f4:99:5f:69:f4:30:92:60:74:46:a3:f6:04:10:e1:55:
1f:43:7a:81:05:08:d9:c8:e8:56:97:90:24:02:11:9c:66:77:
4e:c2:8d:43:91:b1:cd:d1:82:fa:7b:ad:10:45:7d:a8:51:12:
3c:51:f2:15:66:41:f4:89:11:84:dc:21:41:c7:74:2d:42:79:
e6:66:a7:50:b0:c0:15:01:c8:1c:01:52:ce:6f:98:35:62:e2:
c8:f0:5c:d6:5b:ad:fd:b1:81:ed:b4:d9:a2:84:cf:82:e9:f6:
e5:d2:42:b2:ab:53:42:44:76:44:d4:27:a4:02:82:f9:69:17:
49:4b:26:3b:b3:57:82:f4:93:c8:2a:5c:3f:88:c1:c9:7e:e0:
18:2b:45:6f:f3:58:4c:3e:e4:52:a5:5e:fc:25:52:e9:59:26:
69:32:3d:ac:02:da:d3:b1:a8:6f:80:22:a9:e2:14:05:57:80:
6a:17:9f:14:44:b3:f5:02:f3:e3:26:b2:2e:f6:cd:71:ea:ba:
43:a2:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:10 2025 by rpki-client