Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/G42W3yojSsJnkpX_bvqp0N91Z5E.roa
File: G42W3yojSsJnkpX_bvqp0N91Z5E.roa (raw, json)
Hash identifier: yxgQ8Q7ahXLDf+1hwdN9iP7DequBz131/xXj18s/L2Q=
Subject key identifier: 1B:8D:96:DF:2A:23:4A:C2:67:92:95:FF:6E:FA:A9:D0:DF:75:67:91
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F58FA875208F6ED814BFD8357CAC74B4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/G42W3yojSsJnkpX_bvqp0N91Z5E.roa
Signing time: Thu 22 May 2025 01:15:54 +0000
ROA not before: Thu 22 May 2025 01:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 02:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f5:8f:a8:75:20:8f:6e:d8:14:bf:d8:35:7c:ac:74:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 01:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b8d96df2a234ac2679295ff6efaa9d0df756791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:ae:9f:04:b5:50:64:4b:0b:ce:9f:33:44:
a3:26:a7:23:9e:32:c1:67:93:a7:fd:30:69:54:9d:
f7:6d:a4:db:d9:6e:c1:5c:d5:52:ac:de:28:3b:12:
3f:be:1c:5c:30:11:4e:99:2b:50:ec:3c:b8:5f:f1:
e8:4a:69:07:9b:91:23:bb:91:f4:b9:80:28:20:e9:
bf:d8:cd:15:6f:01:e6:a0:ca:eb:f0:c3:62:26:83:
8c:3c:4c:e5:2c:b4:6d:44:1d:cb:af:d1:b6:ad:be:
9c:df:e2:71:84:c9:68:0e:6f:56:8d:2f:2f:18:c6:
07:b4:22:02:b6:c2:85:3f:71:c5:02:31:cb:ae:65:
77:9d:fd:3e:48:1b:22:13:3a:6e:42:21:e7:96:e9:
bc:3e:4a:75:c8:54:14:26:98:10:60:8d:31:9d:f0:
e7:4f:5e:9c:af:52:04:a6:16:27:d2:07:6f:f4:bc:
1b:bd:51:bb:cd:35:92:f0:71:aa:c3:8e:47:a2:e9:
3b:37:72:06:10:01:12:ef:1c:3c:24:f6:35:00:c3:
74:da:98:03:27:f9:43:68:fa:f3:2c:01:34:19:f5:
74:eb:a0:9d:51:c1:63:e3:78:0e:43:cc:a3:29:38:
6b:fc:4b:65:16:51:e5:dc:17:5e:06:93:cc:55:3b:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8D:96:DF:2A:23:4A:C2:67:92:95:FF:6E:FA:A9:D0:DF:75:67:91
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/G42W3yojSsJnkpX_bvqp0N91Z5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
3a:42:5f:e9:c9:36:48:45:ba:f2:bb:cb:a8:fd:38:53:27:c5:
96:d3:17:7c:bf:17:d1:9b:b4:7a:c3:23:f0:2b:ac:75:52:9e:
0f:fd:a3:4b:52:1e:1a:db:e4:ef:86:d2:af:26:a4:75:24:4b:
b1:84:a5:ae:5b:c0:86:9b:31:20:ff:76:a1:ce:73:9b:48:99:
c4:3e:9c:c3:68:4b:53:9e:8b:b8:b3:38:db:52:fe:44:a2:b9:
ca:23:67:c0:90:47:05:f3:ba:fd:6d:21:f4:04:b2:41:cb:b1:
5f:cc:9b:24:1a:ac:c3:22:1c:0f:6b:2e:01:bf:c1:0e:80:52:
2c:8d:08:da:b2:7d:9f:56:69:b1:b2:e8:76:36:6c:c8:3e:4e:
bc:7d:66:ca:77:9d:a5:25:23:84:9e:c6:19:06:76:c9:4a:6a:
99:45:48:de:c2:93:9a:70:bb:87:9c:2a:1b:3a:12:11:67:20:
f2:12:fa:8a:ee:85:ae:48:41:bd:5e:8f:85:94:1f:b9:31:84:
23:75:ff:15:33:d4:30:dc:30:b2:31:6a:af:c5:18:e6:11:84:
76:9a:28:d6:56:07:d1:6e:ae:d3:c7:34:21:48:8c:24:9b:37:
69:df:aa:0d:5b:cb:70:3d:4a:c7:b9:97:17:1a:e9:de:37:d8:
d9:98:9d:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:27:48 2025 by rpki-client