Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F2HW7Iv6krirCBlLMnZmRFht-8I.roa
File: F2HW7Iv6krirCBlLMnZmRFht-8I.roa (raw, json)
Hash identifier: /zN4/KZkEw7vPU792W4neOLPUWm/3hQ3xrALLjSHMEo=
Subject key identifier: 17:61:D6:EC:8B:FA:92:B8:AB:08:19:4B:32:76:66:44:58:6D:FB:C2
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019709E818292DD457280F12EB659C41E4DD
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F2HW7Iv6krirCBlLMnZmRFht-8I.roa
Signing time: Mon 26 May 2025 00:04:54 +0000
ROA not before: Mon 26 May 2025 00:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:9e7:5d92/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 00:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:e8:18:29:2d:d4:57:28:0f:12:eb:65:9c:41:e4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 00:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1761d6ec8bfa92b8ab08194b32766644586dfbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:5c:fb:26:d7:4c:03:e1:f2:97:f4:b0:ca:
c9:25:79:d0:a0:bd:bc:95:95:94:45:d6:c9:94:fe:
8d:af:d7:3d:f3:ce:5e:d6:12:5d:85:ba:e8:93:04:
c6:a6:c2:c6:01:d9:bf:e6:1e:03:b0:f3:79:e3:52:
bc:a1:f5:9e:ab:c5:7d:00:5e:0c:d2:9c:68:a2:80:
c4:e6:68:bd:4c:39:c5:dc:95:16:fc:cf:9c:25:5d:
f3:2f:e9:32:d5:ca:e1:d6:38:4d:07:b1:30:8f:de:
8a:88:ef:9f:f3:09:31:c0:e6:ae:da:5b:35:d5:a9:
c7:02:ad:ca:36:3a:4e:27:d6:74:f0:31:15:ab:2a:
8f:84:cc:72:e5:15:37:ad:92:b4:47:1b:13:f9:05:
b7:77:9a:65:0a:d1:eb:f6:75:fd:b4:f7:5a:25:6e:
2b:88:ad:7f:1b:9b:9f:62:5a:a5:f0:41:ab:09:64:
e1:f9:ab:af:2a:f4:e8:c9:4c:e0:b6:b5:d0:00:74:
15:10:ec:7e:be:15:be:e2:1b:58:23:93:da:29:c5:
65:ea:08:66:83:14:78:3a:eb:43:fd:36:43:f6:7f:
85:58:d4:3f:5c:16:de:96:c4:14:d9:26:0b:12:db:
a2:37:4e:63:36:87:c7:26:a4:3b:5c:5c:98:6b:ef:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:61:D6:EC:8B:FA:92:B8:AB:08:19:4B:32:76:66:44:58:6D:FB:C2
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F2HW7Iv6krirCBlLMnZmRFht-8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:9e7:5d92/128
Signature Algorithm: sha256WithRSAEncryption
2b:da:8b:64:b2:81:cd:5d:d2:8b:11:70:1b:66:6d:4e:07:f6:
8a:af:c2:f2:6f:82:90:78:0b:d9:c0:94:5e:7b:ab:18:e8:2d:
0a:b7:75:e7:4e:e2:ed:45:2a:09:ac:f8:90:93:81:0e:49:31:
9f:80:e4:13:9a:6e:64:7b:47:be:ad:a7:c7:8b:e0:a3:a3:19:
91:d3:40:b6:1a:84:fc:64:cf:30:e8:59:54:a6:87:81:cb:7b:
ae:2a:b9:c4:bb:04:4c:1f:10:5d:5c:29:0d:48:9b:83:c7:d1:
a9:c6:e2:51:75:08:f1:78:cb:d0:3c:3b:bb:38:a0:17:ab:c7:
89:65:14:5c:22:db:94:80:d5:33:dc:b9:a7:ac:05:39:5b:d9:
49:d0:0f:9a:07:fd:e5:e6:9a:32:6f:57:69:8d:6f:a9:85:38:
2e:b9:d6:62:e3:8b:38:f7:7c:ed:d6:db:92:4c:eb:36:17:8b:
69:e6:6b:54:d6:db:70:ea:4f:1f:f4:92:f9:cc:1d:c3:7f:94:
18:79:3a:73:4e:9d:9d:90:e3:1b:a2:2a:46:77:e9:7e:fe:7a:
13:91:da:a9:b5:29:28:23:d6:e2:ec:4f:f0:85:64:0a:5e:4e:
5e:c3:16:5c:5f:58:42:fb:0e:96:67:10:9d:24:ee:97:b0:95:
91:59:1b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:27:40 2025 by rpki-client