Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GJNP4CLW5AfsO2HGtLyAmxWpFmo.roa
File: GJNP4CLW5AfsO2HGtLyAmxWpFmo.roa (raw, json)
Hash identifier: +zufuq3gaUEA3uSoLjRoJDnnYliy+tAfOSRzsfQVJuY=
Subject key identifier: 18:93:4F:E0:22:D6:E4:07:EC:3B:61:C6:B4:BC:80:9B:15:A9:16:6A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196504C75D1899994E92428D7E4BFCE7578
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GJNP4CLW5AfsO2HGtLyAmxWpFmo.roa
Signing time: Sat 19 Apr 2025 23:05:10 +0000
ROA not before: Sat 19 Apr 2025 23:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:504b:8f01/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 19 Apr 2025 23:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:4c:75:d1:89:99:94:e9:24:28:d7:e4:bf:ce:75:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 19 23:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18934fe022d6e407ec3b61c6b4bc809b15a9166a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:ca:38:85:d0:71:6c:52:27:17:98:fb:51:
59:0a:23:31:ac:b5:2e:ad:42:94:1e:34:a9:ef:3c:
89:c0:77:b7:4b:c2:5d:b4:53:a0:13:f1:5f:bc:54:
87:bd:a6:e2:3d:f1:a6:f0:ab:4f:e2:57:92:c6:d2:
c5:f8:1e:d4:f5:d0:54:bf:2e:9d:8e:f4:97:8a:48:
4e:79:e5:9f:7d:86:dc:0d:8f:44:1b:c7:16:df:2c:
c5:e6:e9:4b:49:6f:8a:ed:1b:3b:fb:c3:6b:60:f0:
63:b2:f8:6d:64:60:c6:fc:ec:55:f4:ae:54:79:86:
92:2b:8e:c9:ba:9b:eb:5f:5d:07:34:d3:9d:e9:b4:
3a:1b:4b:8b:fb:b0:6f:14:76:53:ea:71:b0:11:4a:
0b:a0:8a:52:74:d5:a3:66:ec:7f:d1:a5:1d:52:59:
77:84:34:b7:e2:92:e5:90:07:51:7b:ac:51:01:23:
c7:b8:75:ce:a8:1f:3e:e9:2c:6f:35:39:37:e4:ff:
f3:71:87:a9:26:95:7a:78:0c:75:26:c7:7c:72:3f:
29:95:e8:3c:cc:19:23:61:01:65:48:b1:a1:70:e1:
39:14:44:da:fb:de:41:f6:62:3b:fa:e7:d0:f8:19:
28:8c:61:44:3a:a2:d3:de:ff:a1:c1:72:0e:fc:2f:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:4F:E0:22:D6:E4:07:EC:3B:61:C6:B4:BC:80:9B:15:A9:16:6A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/GJNP4CLW5AfsO2HGtLyAmxWpFmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:504b:8f01/128
Signature Algorithm: sha256WithRSAEncryption
8f:3f:19:eb:50:42:2c:13:91:19:44:27:d1:11:20:c8:d5:b8:
e4:9b:25:ec:6c:b7:1c:73:61:a2:2d:88:f7:6c:fe:88:da:8a:
b0:b5:b2:89:6b:88:b8:08:21:80:2f:f5:bd:fc:99:b6:f3:06:
c0:1e:cb:37:c7:76:b2:47:2b:a1:03:3c:44:ec:1a:09:81:34:
15:ab:6e:61:05:8d:59:f1:db:b9:d4:62:b4:22:8a:34:84:a8:
a3:77:2c:0d:a0:9f:a1:ee:84:0d:18:bf:9b:db:eb:35:8c:ac:
0d:b1:3e:9c:6b:0a:68:35:e9:e4:b6:de:a9:84:e7:92:4c:10:
cc:66:ee:5b:87:10:15:69:1a:80:af:f5:16:5c:7b:6b:0a:50:
3d:3d:4c:83:39:d2:77:f3:6d:fb:0f:31:98:b6:e9:54:51:3b:
7f:c3:9b:a1:99:1f:47:99:cc:bb:55:6b:0c:59:3c:58:0f:57:
f4:71:b0:e4:94:33:4c:fc:30:6e:7e:e8:7b:97:b1:a7:d2:8f:
b3:59:45:64:d7:04:2e:a1:27:1d:dd:39:4e:ce:76:d5:0d:1c:
43:51:20:c4:bd:7d:dd:61:8f:ad:f8:03:86:98:90:c9:7b:9b:
36:21:b3:99:c2:54:72:c1:ce:79:c9:9a:92:b6:08:c9:f9:af:
bd:9e:9e:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:27:39 2025 by rpki-client