Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/G6I-uZNLq_7IDQGH0cCRSRauDPg.roa
File: G6I-uZNLq_7IDQGH0cCRSRauDPg.roa (raw, json)
Hash identifier: fSNTsQ3v+J9jgbSMTMzrFW4jI4FO+Lg6/jeG8dDYIuo=
Subject key identifier: 1B:A2:3E:B9:93:4B:AB:FE:C8:0D:01:87:D1:C0:91:49:16:AE:0C:F8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019685B9866D872982064D381DD5463F9AEF
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/G6I-uZNLq_7IDQGH0cCRSRauDPg.roa
Signing time: Wed 30 Apr 2025 08:04:10 +0000
ROA not before: Wed 30 Apr 2025 08:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:85b9:7ffc/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 30 Apr 2025 08:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b9:86:6d:87:29:82:06:4d:38:1d:d5:46:3f:9a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 30 08:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba23eb9934babfec80d0187d1c0914916ae0cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:af:ec:94:98:54:c3:56:05:0c:17:2d:a5:
7d:e5:29:b1:39:ed:78:94:bf:54:1a:f3:66:1c:95:
44:b7:fe:db:16:06:e3:39:f3:0d:7d:31:a9:cb:3a:
d3:2a:81:33:7e:76:b1:75:f9:79:f7:86:d5:4b:60:
18:f6:ad:29:52:eb:22:5f:74:f0:b7:7e:c7:8c:92:
b2:93:ff:36:2b:96:e4:c4:7c:1b:9f:84:34:21:d1:
7f:e9:df:8d:37:8e:34:b1:d2:30:10:01:7b:65:b2:
4f:5f:e3:07:46:61:39:31:10:40:b4:e3:1a:38:94:
e0:91:8d:4e:ab:2c:70:81:c3:19:f2:4c:91:b8:c6:
89:d9:ef:61:a2:12:19:4e:6c:37:bc:21:e7:83:7b:
df:48:d7:a5:f0:fc:16:02:13:15:17:bc:5a:35:eb:
c9:fa:52:24:9b:a7:ff:7f:1d:34:8c:d6:a2:3c:19:
29:ac:85:67:b4:b9:b7:04:08:70:e2:c1:6f:38:ae:
2c:6c:e6:bf:e2:8e:00:86:f1:fa:6d:2a:91:e1:00:
f9:a4:3d:4b:a9:db:64:bc:99:32:7b:f4:87:27:92:
fa:75:14:6f:96:a4:1f:06:44:30:5f:b3:42:df:f2:
78:72:33:d8:df:39:41:09:8a:74:b2:95:4d:27:b6:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:3E:B9:93:4B:AB:FE:C8:0D:01:87:D1:C0:91:49:16:AE:0C:F8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/G6I-uZNLq_7IDQGH0cCRSRauDPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:85b9:7ffc/128
Signature Algorithm: sha256WithRSAEncryption
7d:3d:2a:ec:06:de:32:5a:2a:ed:81:56:6f:e4:f2:3f:73:39:
24:ab:ee:51:7c:7c:0a:b2:21:db:5f:d5:77:55:19:19:28:83:
f9:bc:9a:1c:c3:39:6f:26:f7:89:1a:3e:fe:8d:45:47:dd:7d:
b7:12:2d:79:80:91:0e:b7:31:f2:48:62:70:fc:c1:7a:5d:21:
cf:d6:b6:23:ff:8d:64:70:84:9a:49:86:e1:1d:d0:15:5c:db:
e1:21:6b:e9:ee:c1:43:f2:61:1a:c1:d2:ad:3d:9c:00:84:26:
42:05:49:61:3a:b8:f7:ec:af:69:d6:78:53:68:75:ce:66:b5:
c8:3a:bb:89:b4:ee:06:08:93:80:b6:8c:d0:15:eb:db:09:67:
03:7f:e6:51:f7:2a:93:91:d5:75:2b:84:06:4f:73:7d:62:ef:
9d:e0:c7:c0:99:4a:53:22:d4:f1:0d:e6:8c:c4:f0:7f:c5:2e:
d8:6b:d2:dc:d9:9c:a5:35:10:a1:3c:0b:e6:f6:db:5a:fb:60:
26:80:7e:18:0a:04:cf:99:05:a6:de:ae:81:ae:81:80:99:64:
f1:50:81:16:98:78:1d:ec:85:5b:0b:bc:6b:a4:8f:c6:6a:06:
fb:65:75:82:6c:34:ab:4c:4a:03:07:02:4f:86:59:dc:6d:20:
4c:56:81:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:53 2025 by rpki-client