Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GGEOkMAFKcilEyVLrJoKOFMnGhc.roa
File: GGEOkMAFKcilEyVLrJoKOFMnGhc.roa (raw, json)
Hash identifier: oDvUxys83/kCVgA1FLvcZUnBZONuogFuF5HDuDkTI3w=
Subject key identifier: 18:61:0E:90:C0:05:29:C8:A5:13:25:4B:AC:9A:0A:38:53:27:1A:17
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F77B4BEC3D5ED632841E0826276D7ADC
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GGEOkMAFKcilEyVLrJoKOFMnGhc.roa
Signing time: Thu 22 May 2025 10:12:54 +0000
ROA not before: Thu 22 May 2025 10:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 11:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:7b:4b:ec:3d:5e:d6:32:84:1e:08:26:27:6d:7a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 10:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18610e90c00529c8a513254bac9a0a3853271a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:29:6e:96:ec:38:9e:78:96:b0:eb:46:2e:
18:0d:ae:83:d4:5e:0d:3f:24:ae:c0:31:a6:56:5f:
a5:0c:37:5b:44:12:ea:fd:06:2e:e7:e0:f8:49:87:
d2:a7:a4:68:0a:93:3b:27:1c:cb:6e:38:05:d1:62:
09:ad:9c:11:29:b6:f3:4b:cc:0d:be:5c:1f:f4:f6:
4e:ce:b1:06:a3:3e:f1:55:a1:52:f6:5f:7f:f2:4f:
6e:f0:59:6d:f4:01:cf:36:a0:a5:7a:42:82:fb:eb:
01:52:86:8f:c8:8e:79:f0:7b:ab:03:04:c6:14:93:
4a:fa:3c:2b:02:0b:ca:24:00:7c:e6:fb:ec:6a:9a:
22:05:2e:45:c2:c5:7a:ed:75:c1:2d:b7:e8:9f:50:
68:6d:72:7d:2b:72:04:94:6f:da:3d:6e:d8:ac:d7:
7c:b1:5b:00:87:10:77:68:b1:05:e1:f7:ad:6f:63:
f6:03:40:8c:59:21:43:fd:27:88:a1:6e:ac:57:a2:
c9:d7:05:59:c6:0c:81:4a:16:0c:7e:60:fb:82:e6:
29:80:ba:16:a2:fb:36:e4:32:71:5b:e2:0b:63:ad:
40:47:05:58:1c:32:d6:51:1c:24:f9:75:fa:c8:4e:
4a:e0:5b:31:ab:de:a5:76:e2:79:ae:6a:ba:92:64:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:0E:90:C0:05:29:C8:A5:13:25:4B:AC:9A:0A:38:53:27:1A:17
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GGEOkMAFKcilEyVLrJoKOFMnGhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
92:20:33:e1:89:03:66:32:fb:03:de:b7:8f:28:f5:ee:07:6a:
e6:88:a8:50:f8:68:24:7f:e3:61:1a:ec:bc:94:77:ad:15:41:
cc:0e:25:af:56:98:6f:41:0c:4f:d9:5c:4c:41:4e:85:78:62:
cd:7a:bd:f7:ee:ad:6f:03:ae:c9:f5:d4:70:96:db:1c:b5:80:
79:dd:e1:3e:09:4f:92:fb:56:91:8f:28:3d:de:b4:da:62:07:
02:26:71:30:2d:cf:5a:b6:ba:f2:6b:2c:bf:bc:d3:2c:54:67:
10:59:94:13:97:4b:03:3f:0e:14:ba:d0:f3:ad:dc:a2:bc:80:
fd:1b:a4:cb:5e:43:c4:e4:46:d4:17:9c:fb:cd:dc:95:03:10:
a1:75:f5:81:d0:ca:3e:72:f6:03:81:f1:c2:18:ad:5e:e4:22:
28:cb:eb:6a:dc:1e:a5:f4:20:24:d0:8c:9e:61:f7:65:20:e0:
41:e4:fc:28:20:de:9e:23:cd:6f:8e:65:ef:dd:90:8a:e1:ae:
2d:80:20:7b:b0:c0:04:12:cf:5d:c6:da:db:dd:2a:2e:58:75:
94:48:9f:e6:af:95:75:78:a9:dd:a8:c2:9b:5d:7b:d2:35:df:
b2:f5:9d:c0:38:b6:c5:e2:eb:97:bf:18:bf:52:a2:d9:fb:c7:
e2:af:e6:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:36 2025 by rpki-client