Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IYMCVV0dd74FimnHcDkBIu8Q_eM.roa
File: IYMCVV0dd74FimnHcDkBIu8Q_eM.roa (raw, json)
Hash identifier: /66pvxh86sGkF3cAW0CP4+V7ZiUEkhqatwACzywwjKI=
Subject key identifier: 21:83:02:55:5D:1D:77:BE:05:8A:69:C7:70:39:01:22:EF:10:FD:E3
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019706B771CE0B676D9903FC51265153527F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IYMCVV0dd74FimnHcDkBIu8Q_eM.roa
Signing time: Sun 25 May 2025 09:12:54 +0000
ROA not before: Sun 25 May 2025 09:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 10:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:b7:71:ce:0b:67:6d:99:03:fc:51:26:51:53:52:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 09:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=218302555d1d77be058a69c770390122ef10fde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:a2:94:96:eb:ad:68:a9:0c:90:ec:04:36:
78:99:a5:f2:ff:2b:ea:ff:d5:d9:a5:9b:5e:8b:4d:
54:dc:f4:48:02:6e:f3:ab:4c:17:bd:63:8c:97:cf:
31:db:5d:66:de:cd:94:07:49:09:06:5b:cc:dc:6d:
ea:2e:ae:2c:61:a4:bf:91:67:1e:38:19:d1:1b:4d:
86:1a:92:e4:7f:5a:d7:a1:40:76:0c:05:5d:28:cb:
f8:cf:81:54:6e:d6:16:fe:79:85:19:15:a1:cf:37:
8a:93:cd:48:f9:c5:f6:83:2e:2f:b9:3d:b2:c6:d4:
3c:19:97:41:e9:db:59:22:d8:7c:4c:7e:74:7b:3d:
9a:1b:80:28:28:c3:5f:8d:85:0a:ad:b7:9f:69:53:
61:56:a9:07:a2:32:30:91:2d:d4:ba:6f:f8:8d:1d:
0c:e6:dd:49:9e:29:ea:d3:f1:b3:39:a3:84:d2:53:
06:42:52:d9:98:d7:a8:03:84:ad:65:e4:e7:22:74:
4c:56:a9:74:f8:44:cb:d3:98:f0:ed:72:89:f4:50:
42:bb:a1:7f:cc:5a:d4:c4:5f:5a:1d:01:3f:da:01:
f6:fe:c3:ae:3d:c7:28:96:07:d8:ab:07:45:e3:15:
e2:6e:eb:f8:50:0a:cf:c1:19:1e:8c:ce:c0:3f:21:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:83:02:55:5D:1D:77:BE:05:8A:69:C7:70:39:01:22:EF:10:FD:E3
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IYMCVV0dd74FimnHcDkBIu8Q_eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
9f:73:ea:f2:bd:44:71:eb:f6:8f:60:31:1a:57:a1:64:cf:a4:
80:62:cd:c5:50:2d:9d:51:2e:f6:62:81:bf:7f:79:d2:62:b1:
08:e5:73:8e:19:36:2e:0d:60:5a:24:60:a7:68:c1:3a:10:d2:
e0:71:1d:3c:df:e0:43:07:27:5a:6d:61:9d:7f:a9:e3:23:ac:
64:9d:67:73:48:07:e7:ae:c5:65:9d:87:05:43:86:f8:5a:9a:
bf:8e:e2:57:08:7e:87:a7:c5:58:0c:90:07:d2:5d:e5:33:b7:
1d:0e:c2:a3:60:81:db:78:9d:a1:36:6f:dc:e6:61:39:ee:e9:
52:0a:94:0d:e1:5b:c0:1d:63:d9:8f:f9:3e:53:4c:e0:f2:94:
b2:a9:d0:61:1c:de:43:df:ae:23:70:e4:8c:1d:24:87:99:c5:
44:15:c6:23:9a:f1:d4:fe:9b:53:c1:28:45:e9:8a:7c:b1:2d:
c1:17:84:ce:83:80:15:dc:45:ba:0d:1f:e3:c3:cb:a9:7f:94:
4f:d0:61:db:00:42:b3:a1:55:28:08:4c:ca:66:9b:bf:48:e6:
55:5f:e4:7d:a1:70:0f:7b:d4:7a:b4:cb:33:42:00:f1:91:97:
6c:c0:cf:90:6d:b8:9c:5b:10:c5:68:f2:bb:4a:96:75:fe:a1:
a7:ef:f4:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:23 2025 by rpki-client