Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/H6j--z5Z1jotgsKZbV42qD0lvEI.roa
File: H6j--z5Z1jotgsKZbV42qD0lvEI.roa (raw, json)
Hash identifier: gaJKBD0OOjODnqxvv5rprDBWO3c/wDwnHG721DqE5OQ=
Subject key identifier: 1F:A8:FE:FB:3E:59:D6:3A:2D:82:C2:99:6D:5E:36:A8:3D:25:BC:42
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019741B9145D4EC7661260BD0CDC2C20C127
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/H6j--z5Z1jotgsKZbV42qD0lvEI.roa
Signing time: Thu 05 Jun 2025 20:12:17 +0000
ROA not before: Thu 05 Jun 2025 20:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Jun 2025 21:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:b9:14:5d:4e:c7:66:12:60:bd:0c:dc:2c:20:c1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 20:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa8fefb3e59d63a2d82c2996d5e36a83d25bc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:32:a7:e6:a7:10:e3:77:95:70:30:05:01:
ba:31:07:4f:1d:cb:9e:ea:68:1e:ed:ec:3f:ee:01:
6c:ab:6b:74:d1:9d:d1:a1:09:37:30:1c:21:27:87:
e0:b8:f4:ff:de:50:33:eb:42:c5:a6:4b:01:83:45:
be:ea:35:5e:df:6d:4e:8a:63:c3:49:7a:28:89:f0:
66:39:ad:d7:e9:c3:79:21:e3:db:60:34:2c:0e:80:
8d:11:d8:e0:d4:ea:4f:d1:a3:38:e4:1a:be:4d:b3:
ec:a8:54:c9:6b:38:03:31:4a:79:3a:b2:1f:e7:f7:
fa:bc:51:11:d8:69:1a:e2:b7:37:eb:05:90:a6:04:
26:e0:30:ae:46:e7:80:cc:c2:ff:75:f0:8d:8c:3f:
84:5a:f8:bd:53:8e:bf:90:28:01:75:7a:88:c2:5e:
72:97:d0:47:d8:7a:de:5f:4f:1c:3f:cb:c5:4e:bf:
c6:69:a4:2b:3b:4b:d0:fd:9e:af:b3:4f:ff:77:b6:
24:3f:4d:77:6a:d7:91:2c:51:d6:89:fc:7d:fc:06:
c9:17:5b:8a:18:10:4c:36:7d:fe:1f:2f:13:e9:24:
0b:35:17:3a:5f:67:08:1d:1a:80:b2:6b:6d:82:5c:
d4:76:57:74:dc:9b:43:de:d4:e4:7d:05:10:cc:08:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:FE:FB:3E:59:D6:3A:2D:82:C2:99:6D:5E:36:A8:3D:25:BC:42
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/H6j--z5Z1jotgsKZbV42qD0lvEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
6f:1e:c8:eb:b0:9f:96:df:e8:4c:0b:a4:a8:55:2a:b6:29:55:
f1:d6:5e:bf:be:81:de:62:7b:62:6c:3b:eb:ba:c6:4c:f1:3a:
80:8e:c3:81:47:18:1d:a6:da:bd:fe:79:1d:6b:83:dd:a8:6a:
16:d3:89:c0:5b:1e:32:ad:55:aa:aa:24:1c:34:99:fd:53:ea:
20:52:2b:64:b9:c5:38:f3:76:51:22:f5:f3:cd:70:de:29:19:
b9:a0:d0:1d:b2:21:37:fa:05:a9:77:f6:2f:13:0f:e9:ef:44:
f6:99:1a:9f:57:a5:f1:83:f0:2c:0f:f8:5c:a8:73:d1:f2:bf:
ac:b8:83:b1:b6:52:88:1f:dd:90:a8:68:01:58:38:ee:36:5c:
e0:45:7d:82:26:be:51:be:67:25:db:f4:48:fc:00:a5:a7:2b:
5d:38:f6:0a:2b:11:3c:6a:21:62:b7:fe:54:d4:54:a8:9a:d0:
41:2d:93:52:a3:f6:3f:2c:a0:a5:a8:c3:25:72:85:04:49:39:
43:42:ff:84:44:99:0a:1c:59:a2:99:12:62:77:38:09:16:b1:
a2:9c:42:0c:ae:ce:2b:4f:46:f0:91:bc:bd:bc:2f:a3:ad:e7:
41:a3:6f:ed:49:a4:b7:f8:36:4e:04:a3:84:e5:c8:5e:e6:db:
70:01:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:45:03 2025 by rpki-client