Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EORg14FIMeogjb72XA_YPjw_HJU.roa
File: EORg14FIMeogjb72XA_YPjw_HJU.roa (raw, json)
Hash identifier: mJQQLLCQ5+Nd9JcJlnDXuWD/KclsYuoEllMBqRQEtDw=
Subject key identifier: 10:E4:60:D7:81:48:31:EA:20:8D:BE:F6:5C:0F:D8:3E:3C:3F:1C:95
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196D09D95890DAF0331114E3E0D5B4C6C1C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EORg14FIMeogjb72XA_YPjw_HJU.roa
Signing time: Wed 14 May 2025 21:05:10 +0000
ROA not before: Wed 14 May 2025 21:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:d09d:1da0/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 14 May 2025 21:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:9d:95:89:0d:af:03:31:11:4e:3e:0d:5b:4c:6c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 14 21:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e460d7814831ea208dbef65c0fd83e3c3f1c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:1d:0d:37:97:55:c7:e7:32:79:8b:52:d0:
40:5a:df:30:ee:e4:60:dd:1c:36:b6:3d:92:65:47:
97:d5:31:4b:05:b8:0d:b0:7a:69:fa:ed:ae:93:60:
63:2f:25:18:16:ce:a3:8c:1d:37:20:fe:95:21:36:
5f:8e:4d:b4:f6:0f:d5:98:17:86:d6:79:5e:b7:0e:
bd:36:91:3e:d4:63:10:59:e5:26:86:35:d5:8d:78:
c2:6e:f6:71:bf:22:ed:54:b0:a8:bd:13:75:15:89:
3d:6b:97:cb:2a:de:4a:78:b3:68:e7:9d:32:6d:a9:
55:9e:f3:df:8a:c4:c4:1d:5f:64:f3:f2:58:83:61:
76:8a:ac:70:e1:e4:e5:aa:55:93:fb:78:ed:0e:ed:
3d:b8:c9:6e:01:ed:89:88:bd:38:d3:b3:38:28:aa:
2d:14:5f:96:4f:66:c9:de:d2:9b:61:b4:16:04:68:
94:54:72:d8:77:c1:24:b0:45:33:7d:7b:b0:44:a3:
ed:c1:7a:ab:b8:9f:7f:18:c4:b6:03:11:8a:5a:f5:
7a:f1:c3:36:85:a5:75:05:e7:7d:1b:2b:dd:ed:f4:
59:fe:84:9f:d3:f7:ae:0c:a7:a0:4b:1e:06:69:72:
f4:ab:c6:58:da:aa:5f:f9:6b:af:dc:c5:a7:67:c8:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:60:D7:81:48:31:EA:20:8D:BE:F6:5C:0F:D8:3E:3C:3F:1C:95
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EORg14FIMeogjb72XA_YPjw_HJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:d09d:1da0/128
Signature Algorithm: sha256WithRSAEncryption
36:2b:40:12:e5:31:00:ed:a6:c0:e6:e9:4b:21:7c:c1:e4:52:
dc:2a:38:d7:03:5e:cc:0f:a4:79:a4:7f:d5:07:5b:e4:94:9a:
48:27:7d:67:15:8f:8c:42:60:19:2e:79:9f:d0:db:98:ff:ec:
ef:c1:ab:a0:2e:79:da:8e:40:33:7c:91:cb:26:d4:2a:7c:91:
c9:99:fe:d7:8f:25:91:d4:c4:46:b0:bd:9c:3e:07:ba:37:1e:
4b:13:19:3a:82:1c:8e:f4:7d:0d:b4:7c:5c:1b:a0:24:54:54:
6d:0f:e0:00:56:d1:a2:c3:79:e8:fc:c8:77:46:26:4a:5e:e1:
d2:ab:3c:23:1b:b6:e0:37:c3:1d:e4:a7:5e:1f:fc:9f:bf:a1:
57:52:58:cf:46:68:49:bf:e5:4c:e9:f6:b7:a5:e2:18:8d:eb:
a2:88:27:f6:a7:d3:50:31:13:8f:1f:78:62:96:5d:bd:aa:24:
57:19:5f:c9:74:e3:39:27:0d:b0:22:98:39:8f:ca:40:81:e6:
21:46:4a:10:14:cf:88:7e:f1:0e:5c:a6:6d:1e:62:4a:18:67:
35:1c:3e:7f:9f:94:94:c1:9b:0b:44:a0:96:9f:5e:5c:14:ee:
0c:a4:a1:2b:55:e8:31:88:ab:44:d0:8f:ca:bd:fe:5b:78:56:
c5:32:81:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:26 2025 by rpki-client