Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DylKyCszcQ5uSrCVo2Ru6Og4Bew.roa
File: DylKyCszcQ5uSrCVo2Ru6Og4Bew.roa (raw, json)
Hash identifier: gyuve/OmwnE/9bo0TLcFBlb3Xt4vWM4NIPIw5+7OKOA=
Subject key identifier: 0F:29:4A:C8:2B:33:71:0E:6E:4A:B0:95:A3:64:6E:E8:E8:38:05:EC
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FCD7ACC4AF1E4FC804641C09A175D1C9
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DylKyCszcQ5uSrCVo2Ru6Og4Bew.roa
Signing time: Fri 23 May 2025 11:11:55 +0000
ROA not before: Fri 23 May 2025 11:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 23 May 2025 12:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:d7:ac:c4:af:1e:4f:c8:04:64:1c:09:a1:75:d1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 11:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f294ac82b33710e6e4ab095a3646ee8e83805ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:71:d5:75:b7:7c:ff:69:4a:db:3d:bc:6d:
e1:17:9f:9e:40:ab:c6:ea:d9:ab:08:09:d7:87:7e:
4b:d3:b7:f1:cf:d4:48:f6:d4:dc:5d:1b:6e:fe:f8:
b8:8f:31:87:e2:89:bf:79:5a:df:9a:b8:ac:1b:16:
1f:58:d8:34:0a:b7:f0:28:b2:7d:c8:09:a3:ee:67:
bc:d1:fd:07:64:b0:02:e9:3f:d3:b5:df:7b:20:b5:
dc:2a:c7:4c:c7:03:e5:7b:1c:88:c9:34:f9:49:f8:
84:95:ad:21:d0:76:29:3c:85:47:05:12:b2:f4:a3:
64:d4:51:45:3e:33:11:30:61:9f:b2:05:94:e1:f8:
1c:2d:9a:97:6b:04:a4:80:95:9c:32:cd:03:d4:c1:
1c:74:98:a5:cd:f3:a6:05:8d:24:0b:48:4b:5d:17:
a7:b1:06:60:0d:03:f4:ff:a3:6a:3b:0d:85:e3:06:
e9:43:7c:60:73:da:e3:16:9c:4d:04:a5:5d:8c:e7:
74:eb:73:48:13:fb:6e:d9:3d:18:47:6a:60:69:10:
13:25:95:c1:02:24:ee:0c:84:73:e3:39:5d:f0:4a:
54:6e:e6:46:be:d1:6b:06:78:6e:d3:39:1a:ef:e1:
26:58:65:39:d6:fe:49:6a:8a:da:f7:fc:f5:c4:ed:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:29:4A:C8:2B:33:71:0E:6E:4A:B0:95:A3:64:6E:E8:E8:38:05:EC
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/DylKyCszcQ5uSrCVo2Ru6Og4Bew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
64:b2:ec:c6:db:46:34:d0:6a:14:2b:16:8e:58:4f:72:64:ea:
be:b8:00:cf:47:b4:e0:e9:b3:d2:dc:87:c6:ba:d4:a3:b1:42:
86:51:08:e3:a4:5e:88:df:e5:b5:f8:b3:98:d7:83:bb:8d:0b:
44:72:be:36:c1:83:8e:58:c1:b1:69:50:f2:e8:ff:9d:58:06:
9b:0a:85:17:a4:b1:6e:7d:22:c3:d2:02:ea:46:2d:3f:7e:22:
b4:68:a7:2f:35:b5:84:66:28:19:89:6c:ce:80:b7:73:e5:04:
b9:77:f5:73:e1:d3:c0:f3:d2:6f:0e:ae:50:83:11:8b:5c:9c:
3c:a8:3c:cb:fd:c7:67:60:32:7d:1d:c9:3b:73:4d:1b:8d:64:
fb:90:db:13:05:dd:70:a7:1c:7a:02:31:00:5b:1e:1e:ad:6a:
03:55:e5:dd:86:95:12:3c:c0:01:e1:98:a9:b8:55:f9:30:34:
da:ad:be:11:c9:ad:40:b5:05:94:b8:8c:05:f3:3d:88:28:5e:
6d:78:b8:32:f0:d1:8a:c2:d8:d3:04:76:55:74:a4:0b:7b:de:
b3:40:fa:14:b7:53:94:5a:78:f8:31:9e:4f:25:e2:fe:7d:15:
c9:9d:43:ce:97:89:17:02:09:7b:24:73:9e:35:45:48:39:be:
06:6c:90:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:13 2025 by rpki-client