Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/E_iRZI-cq9w8Omy8V6xsl2nbcDY.roa
File: E_iRZI-cq9w8Omy8V6xsl2nbcDY.roa (raw, json)
Hash identifier: CB+fNdywDgoWBBJ78/BeI1BbUg1AXyTC0M8jBRdHH8s=
Subject key identifier: 13:F8:91:64:8F:9C:AB:DC:3C:3A:6C:BC:57:AC:6C:97:69:DB:70:36
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F4E73390D3F42D396C1214C66A8F89F4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/E_iRZI-cq9w8Omy8V6xsl2nbcDY.roa
Signing time: Wed 21 May 2025 22:11:54 +0000
ROA not before: Wed 21 May 2025 22:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 23:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f4:e7:33:90:d3:f4:2d:39:6c:12:14:c6:6a:8f:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 22:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f891648f9cabdc3c3a6cbc57ac6c9769db7036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:5e:47:90:27:75:45:86:b0:7c:39:a3:1d:
84:d7:68:df:b3:f2:26:55:21:35:73:1c:d7:9d:12:
28:85:33:83:0a:fe:9e:2b:f6:1b:2a:43:15:d7:35:
03:96:16:93:16:99:38:c0:5a:7b:3f:e4:90:c4:12:
5b:e0:9b:12:93:d1:b3:56:d6:88:2c:a5:6f:d2:ca:
50:8a:db:52:7c:cb:13:a6:b6:c0:bf:b6:b9:31:71:
3a:e4:93:c5:df:58:1d:1d:7a:1c:ae:4f:fd:91:52:
3a:00:1f:2d:98:1a:0d:51:76:29:d7:9b:44:e4:e1:
c8:fb:9f:76:62:dd:fd:26:68:3a:0f:58:af:e4:ee:
8b:62:ac:3a:af:44:54:7e:bc:82:96:d5:a6:fb:cc:
ef:b2:95:ea:41:48:98:b2:eb:f8:58:b8:26:07:3c:
a0:fd:4b:22:70:26:c8:68:ac:22:a5:91:df:42:9c:
f1:ee:e7:5c:84:1a:e1:b6:33:fd:f6:06:d7:cc:a0:
71:17:2b:8a:f2:57:45:46:1a:2d:95:3c:d6:99:d6:
06:45:68:4e:d8:6a:8f:1a:a8:34:c1:84:8a:08:fd:
7c:97:68:95:88:b2:06:37:d6:30:38:c2:e7:9a:14:
a3:8d:e7:ca:47:1a:e6:45:19:53:1e:c7:f5:f8:d4:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:91:64:8F:9C:AB:DC:3C:3A:6C:BC:57:AC:6C:97:69:DB:70:36
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/E_iRZI-cq9w8Omy8V6xsl2nbcDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
8f:c0:76:83:72:56:1b:77:e5:48:89:4a:8e:35:11:03:80:bb:
2b:0e:8b:23:b7:30:b8:24:91:21:f6:ae:96:0e:05:d9:74:45:
da:e0:db:d7:c7:01:46:f3:b4:c7:dc:42:7f:5e:d7:0d:e5:33:
99:a1:9a:a9:8e:17:fc:6a:c0:83:16:6c:8a:70:6a:0f:65:77:
25:65:13:11:9c:90:8e:06:bd:fb:7b:b6:fb:e3:b0:64:37:41:
c7:63:18:63:59:bb:0f:a2:15:20:04:87:d2:f6:f7:54:d2:fb:
de:ea:93:f7:67:58:71:15:00:15:c4:98:27:d6:21:3e:30:9f:
2b:16:ca:66:b6:e8:df:42:4b:3e:4b:f6:f1:b4:cc:96:07:02:
64:e3:b1:82:a3:64:3e:f8:ac:fa:a2:be:18:ab:ca:b2:86:56:
f2:b2:04:4b:00:7f:1c:2c:95:17:ec:4a:76:b7:0c:68:7a:8c:
68:79:11:2d:d3:18:78:3c:5b:87:62:a1:ab:69:0b:85:33:f2:
2c:c5:ff:98:ba:3c:fe:40:a4:75:4d:c5:bc:61:0e:0e:07:e4:
59:08:a9:dc:57:3d:79:60:34:7f:4b:6e:95:03:f1:2c:f4:44:
99:ed:35:db:96:77:a0:ad:bd:95:ec:d1:ce:44:db:78:c9:6f:
d7:78:4e:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:34:48 2025 by rpki-client