Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F_jGBihed2OnckAuKJgFSaVGBYg.roa
File: F_jGBihed2OnckAuKJgFSaVGBYg.roa (raw, json)
Hash identifier: rAiKx6G6gvlvsclz8iorlc7SRNn9uCKSSxm0SJEncLc=
Subject key identifier: 17:F8:C6:06:28:5E:77:63:A7:72:40:2E:28:98:05:49:A5:46:05:88
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973BEFC1B412445890EF9F7EE3FA9E6FFC
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F_jGBihed2OnckAuKJgFSaVGBYg.roa
Signing time: Wed 04 Jun 2025 17:14:17 +0000
ROA not before: Wed 04 Jun 2025 17:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 04 Jun 2025 18:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:ef:c1:b4:12:44:58:90:ef:9f:7e:e3:fa:9e:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 4 17:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f8c606285e7763a772402e28980549a5460588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:3c:d7:d0:b0:40:3b:79:e0:e2:6f:97:da:
54:26:e4:68:ec:dd:3e:98:94:44:a5:74:01:07:fb:
61:f7:81:2b:e7:a8:13:67:a6:84:cb:32:1f:8f:f6:
75:1c:a2:65:c5:47:b2:1b:5b:bc:f1:71:41:ea:61:
97:68:8a:5f:ce:15:77:f8:a9:62:52:95:89:20:71:
bc:a1:13:39:b3:6b:57:d2:af:9a:19:6c:43:04:f7:
eb:6f:6e:da:75:13:93:38:18:09:bd:e6:6c:73:a2:
e0:47:56:12:6a:4a:fa:d5:1c:30:07:58:db:93:df:
9d:29:04:25:dd:6b:42:18:4b:1d:e0:c6:14:6b:a1:
b7:71:64:cd:40:42:b0:78:b1:5b:91:63:9e:ed:15:
c6:12:7b:ab:20:26:4b:20:68:41:d8:eb:ba:9a:81:
33:80:13:8b:3f:82:d8:ef:fa:11:17:ce:de:c4:19:
55:48:97:8b:68:f2:db:49:14:f7:d6:35:67:6a:b0:
1a:0f:da:82:e4:30:27:61:7e:e4:30:26:32:a5:4a:
99:1d:25:1e:9c:5e:36:79:b0:ab:d0:4d:8c:22:03:
d2:06:2e:bb:2a:ea:3f:f5:1e:ed:a0:89:22:a2:e6:
50:b1:2d:f6:63:69:0a:1d:36:23:fa:a4:b4:34:16:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:C6:06:28:5E:77:63:A7:72:40:2E:28:98:05:49:A5:46:05:88
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/F_jGBihed2OnckAuKJgFSaVGBYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
29:ce:3f:ff:f2:9c:15:16:10:6c:d8:1e:e1:2c:7f:56:5d:9c:
57:36:53:25:2f:87:b5:ae:8a:e0:21:55:a1:64:07:b3:ae:13:
0b:d0:16:87:be:66:6a:d7:dd:25:8b:a0:6b:85:1b:eb:eb:89:
80:aa:f0:15:5b:ac:6d:38:6d:17:50:03:f4:7c:96:3d:a9:2c:
04:6a:43:d0:55:3e:aa:95:3e:14:bb:e1:48:d4:1a:68:4f:c0:
c9:cf:75:ed:78:07:69:ea:8a:29:15:5b:0d:e2:58:c7:ad:86:
80:e0:f7:23:3e:6f:05:96:fc:e0:8d:69:0c:c8:d2:a5:ed:58:
dd:64:93:5c:b4:e1:80:89:00:85:76:7f:c5:f4:b7:d2:44:7c:
e8:77:68:74:a7:c3:b1:37:36:bc:d1:c3:f8:53:2b:08:19:5a:
3b:1a:b7:77:c7:c9:1c:77:43:41:9b:2f:23:bd:4d:69:1d:f3:
a4:84:33:aa:26:55:2e:66:ae:72:62:22:7a:b7:26:f6:5a:5f:
7b:13:fe:34:cf:62:f0:05:6d:ea:99:f3:e1:c1:30:92:db:a1:
87:ff:cb:90:5f:de:df:4b:eb:d1:40:c2:13:e6:bd:38:ec:49:
6e:4f:2d:1e:0f:14:a0:cd:be:a5:93:d1:aa:53:28:79:92:39:
33:a1:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:17:55 2025 by rpki-client