Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DJmXpbIkedE-aGRY8MNGJ5UX0yo.roa
File: DJmXpbIkedE-aGRY8MNGJ5UX0yo.roa (raw, json)
Hash identifier: 8K93NMNk+1juyiOeR+8XzjwrozMeO8nMe6P3RN1tJ5U=
Subject key identifier: 0C:99:97:A5:B2:24:79:D1:3E:68:64:58:F0:C3:46:27:95:17:D3:2A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970CF076E9D95741315B6B5FC5924A0412
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DJmXpbIkedE-aGRY8MNGJ5UX0yo.roa
Signing time: Mon 26 May 2025 14:12:54 +0000
ROA not before: Mon 26 May 2025 14:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 15:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:f0:76:e9:d9:57:41:31:5b:6b:5f:c5:92:4a:04:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 14:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c9997a5b22479d13e686458f0c346279517d32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:27:55:ab:a7:5b:09:a3:1f:ae:4f:d2:c1:
00:e9:41:1b:38:1f:68:b8:bc:9c:8e:17:fc:3a:74:
d9:b1:47:77:a7:d8:7e:51:d1:70:1c:79:ec:01:a2:
9e:80:af:95:6b:c4:11:51:57:05:be:4b:4b:a5:c5:
7f:ad:24:0a:a8:87:98:f8:ef:db:52:87:ac:a3:7f:
91:8e:bb:ac:3d:87:df:2c:8a:0b:9b:bc:6e:3b:1e:
df:df:af:c7:c1:b5:41:f3:3f:7f:36:d6:6f:d7:37:
34:56:a3:6f:dc:c0:1a:60:05:da:be:5d:b7:5b:30:
13:2a:61:d1:0f:8b:76:77:6d:b0:6f:36:ba:f5:53:
39:ab:96:dc:80:43:38:0a:8c:32:c8:92:d0:f2:86:
80:7f:b4:c6:4c:3d:f5:ac:ec:9f:60:80:05:d9:18:
1e:e4:8d:fa:98:31:87:9c:e5:99:f5:2a:c2:a5:3e:
b3:7c:b3:03:3a:fe:b5:87:60:50:c7:fc:23:55:fd:
fd:70:3d:77:c7:fa:0a:0a:75:37:21:ec:2b:1c:13:
70:42:9c:11:b0:1f:d4:6c:07:61:89:40:74:9b:a0:
a8:d4:98:a5:d3:0b:06:ba:bc:23:88:a1:9f:6e:a9:
76:2a:b9:03:17:90:a5:25:c0:25:b0:5a:79:12:b7:
2f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:97:A5:B2:24:79:D1:3E:68:64:58:F0:C3:46:27:95:17:D3:2A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DJmXpbIkedE-aGRY8MNGJ5UX0yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
bc:80:6c:61:03:09:4a:01:2b:46:78:a6:80:00:ac:ba:f0:8a:
e7:69:6d:56:15:6e:bc:d6:25:37:a8:3f:02:2b:9c:5a:3c:a7:
27:4a:fe:29:e6:d2:4b:ce:d3:6f:21:2c:d5:f1:4b:c6:aa:19:
9b:db:20:ea:28:fc:10:f2:01:2e:e1:b3:6c:85:8d:89:cc:7d:
ef:72:2b:07:80:f3:d4:eb:a2:78:2d:12:d2:cf:aa:50:b2:cb:
be:f6:4c:b0:71:cd:b7:db:a6:90:c2:6a:18:11:c4:8c:4a:fc:
3d:f3:f6:d0:da:84:62:c9:6f:16:3f:81:76:58:61:3a:89:a3:
47:53:e1:a9:e5:2b:b4:3f:7a:23:53:92:13:74:fc:87:30:97:
1d:ad:dc:cb:aa:31:29:f5:ab:c7:8f:fb:36:7e:e1:30:7f:1a:
2f:6d:3c:e4:c1:5b:e3:39:8c:01:fb:dd:43:26:54:42:6c:e6:
00:8c:3d:d6:72:4b:9a:d7:7c:d0:6b:01:7e:58:84:35:ab:b0:
84:58:30:0d:a1:56:dc:aa:26:76:2c:b3:cc:38:f4:d5:ae:99:
48:5f:18:27:a3:da:1a:b1:dc:64:e0:80:07:0c:73:0b:4a:47:
34:d6:62:69:1b:70:18:4b:64:1c:f5:46:64:b4:13:e1:6a:9a:
00:48:43:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:46:25 2025 by rpki-client