Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/HbyAO96MJ7uBK0GoABlf1WCkP64.roa
File: HbyAO96MJ7uBK0GoABlf1WCkP64.roa (raw, json)
Hash identifier: 5eSHr+3er1UJeFcEwpnZhLC4rZs2tWTCEGKW3TkN8Ro=
Subject key identifier: 1D:BC:80:3B:DE:8C:27:BB:81:2B:41:A8:00:19:5F:D5:60:A4:3F:AE
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01962D1B82A51D5F86A9AC41B63FCFC90B93
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/HbyAO96MJ7uBK0GoABlf1WCkP64.roa
Signing time: Sun 13 Apr 2025 03:04:59 +0000
ROA not before: Sun 13 Apr 2025 03:04:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:2d1b:64dd/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 13 Apr 2025 03:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:1b:82:a5:1d:5f:86:a9:ac:41:b6:3f:cf:c9:0b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 13 03:04:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dbc803bde8c27bb812b41a800195fd560a43fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:57:3e:0b:70:db:f3:ae:b0:41:f8:ba:1e:
54:ad:82:8a:a1:12:58:15:4f:22:63:2e:f5:a0:51:
cd:ab:b9:6a:3d:77:b7:51:b6:6d:7c:bd:38:d3:d3:
2b:c3:df:6f:8e:63:e5:87:61:f4:aa:a2:0e:0b:b0:
83:b6:45:52:d7:80:fc:12:8a:8a:64:8f:c5:ff:7e:
b2:1b:73:ec:dd:a1:ab:ac:c6:8a:31:d0:ae:56:b1:
fe:b4:cf:22:06:cb:34:ff:04:df:8a:fd:53:a6:16:
c9:e3:c9:5c:97:21:d3:8d:01:1a:fc:4a:35:aa:ed:
c3:b4:1d:58:66:12:0c:d7:1e:4c:9e:9f:4b:9d:cf:
6b:9e:34:9c:14:6e:c8:2b:4f:19:46:12:04:1d:38:
77:e4:1d:f3:98:c1:a2:26:cc:65:e5:de:58:f6:f9:
fa:c1:bf:4b:86:25:7a:68:8e:11:bc:7a:d2:56:9c:
9f:ae:dc:2a:76:4e:80:a6:9e:44:4f:d7:35:94:e3:
04:2d:6f:23:e2:35:5d:6b:06:db:a4:0f:19:e1:f8:
74:c2:7a:75:af:70:cb:2b:2f:f7:aa:de:fb:a3:8e:
a2:c8:26:d6:08:55:69:40:6c:3a:33:8e:5f:ac:43:
ca:e6:58:af:e9:b7:a7:ee:35:b5:40:a8:65:17:7f:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:80:3B:DE:8C:27:BB:81:2B:41:A8:00:19:5F:D5:60:A4:3F:AE
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/HbyAO96MJ7uBK0GoABlf1WCkP64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:2d1b:64dd/128
Signature Algorithm: sha256WithRSAEncryption
b9:5d:b2:2e:4f:ac:a0:ef:52:98:ed:66:5e:65:60:31:46:43:
1f:80:01:ea:df:04:39:b7:4b:c3:26:e8:d1:07:bb:df:c7:27:
5f:17:08:5c:c5:c1:96:46:5e:2e:52:98:3b:04:0a:0c:40:fc:
fd:a6:bc:c4:12:d5:10:de:4c:a2:f8:d3:72:e5:4d:8c:d0:60:
34:98:0f:8b:af:57:00:23:4f:51:24:d1:ae:07:b5:62:65:90:
9c:47:07:a9:5a:8a:2a:4f:a8:19:83:f1:ae:c5:d6:ac:23:a2:
86:48:61:39:41:12:c4:ea:88:5f:e1:3b:5b:15:85:75:d0:34:
51:d2:bf:96:38:63:6d:8b:69:76:a0:9d:b3:a1:24:f3:2b:91:
15:87:36:a0:51:92:8b:5f:ad:2b:1e:9e:48:06:d9:38:a0:3b:
3f:9a:94:a3:9d:07:39:88:40:38:8b:84:95:a0:f0:95:91:a6:
dc:ea:e9:60:e2:74:ff:b3:26:b3:f7:78:b7:1e:b5:45:6a:e1:
28:46:a4:f2:34:ce:e4:b4:dd:9e:34:0f:a9:bd:b7:e9:b3:3f:
a2:7a:84:84:02:3a:d9:43:30:af:0b:ef:6b:ce:19:96:34:3a:
23:83:cc:52:50:f5:11:0a:b4:c4:f2:23:a4:2b:ac:b4:cc:a9:
2b:0d:85:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:18 2025 by rpki-client