Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J2qlRdC9WXWAch_9DmXC37rLS40.roa
File: J2qlRdC9WXWAch_9DmXC37rLS40.roa (raw, json)
Hash identifier: ps352Bc6Yw65aLAFFoDD3BS+WSYdnHxqdnUhYJmwfMM=
Subject key identifier: 27:6A:A5:45:D0:BD:59:75:80:72:1F:FD:0E:65:C2:DF:BA:CB:4B:8D
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197042444509CB16FA55CF5128253DE6D6F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J2qlRdC9WXWAch_9DmXC37rLS40.roa
Signing time: Sat 24 May 2025 21:12:54 +0000
ROA not before: Sat 24 May 2025 21:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 24 May 2025 22:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:04:24:44:50:9c:b1:6f:a5:5c:f5:12:82:53:de:6d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 21:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=276aa545d0bd597580721ffd0e65c2dfbacb4b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:d6:5a:9b:2f:5e:54:88:95:2e:f6:b3:28:
0e:03:10:26:e7:28:5c:c9:6c:04:ee:d6:f4:14:8e:
a0:0c:85:fa:3d:41:ed:e6:e1:d2:12:99:d2:10:0d:
7f:2e:75:9b:be:9d:e3:2e:79:0c:30:ac:aa:68:66:
aa:af:75:c2:42:e7:01:f2:ee:31:4c:01:eb:48:9d:
6c:3d:1f:94:46:53:9e:cd:e1:09:dc:36:10:c3:e9:
a8:a0:1b:4c:9e:3d:88:98:b0:49:2e:8a:8b:0e:f3:
ca:8e:48:4b:ea:58:7b:01:8d:0c:73:f3:99:11:71:
61:ea:c2:44:59:b1:9f:4e:84:d3:eb:b5:d5:c6:60:
9c:c6:ac:4a:71:10:f3:f0:2a:29:24:65:05:19:42:
a1:ec:83:ed:69:42:e0:89:0f:6a:a2:07:7c:9f:08:
b0:c7:90:ea:0d:fd:54:7e:ed:ad:5e:82:af:cb:c0:
08:8b:2c:f6:15:b9:be:b7:ad:e6:52:f9:c1:af:51:
b2:d5:e1:28:99:c1:fc:fe:45:51:6c:90:79:c8:50:
ea:3f:30:51:24:65:ec:64:15:c2:9c:e7:e2:02:f3:
f8:62:57:84:57:31:3f:0c:8b:ae:09:20:29:04:0d:
e4:0a:19:8f:eb:3e:7e:84:56:90:ba:1b:76:8f:f7:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:A5:45:D0:BD:59:75:80:72:1F:FD:0E:65:C2:DF:BA:CB:4B:8D
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J2qlRdC9WXWAch_9DmXC37rLS40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
0f:09:fe:41:bb:d1:a3:c2:fb:50:69:44:8e:a1:5f:a6:9f:4c:
bd:4f:36:4d:c4:b7:bf:0d:84:31:47:0a:7d:cc:da:fc:2d:43:
da:b6:61:fe:b3:9e:79:d9:94:17:12:3f:f0:77:5d:c7:88:b1:
80:e8:ff:ca:1e:6f:91:e4:dc:72:bb:95:ed:49:0d:0f:0e:ad:
42:98:65:c6:a0:1b:e7:a6:93:17:6b:bc:14:b3:e3:13:02:dc:
12:46:16:2d:fc:bf:02:c2:d8:51:d6:4f:f1:a2:1a:0f:78:9f:
64:5e:e2:6f:46:0d:48:1c:a8:74:d3:b3:6e:0d:2c:88:f9:5d:
79:51:13:b9:a8:3d:eb:ab:78:f2:0e:78:0e:07:85:d0:c9:8a:
aa:f7:b9:4e:1d:7b:b9:d9:ce:7f:5a:cb:a3:11:29:f1:30:9c:
37:2c:2f:d5:c0:41:6c:bc:39:53:78:40:7d:21:6c:89:81:1d:
46:e0:d6:c5:c2:86:eb:10:9b:0d:97:77:1f:90:09:ae:5c:4b:
fe:04:09:b9:08:9d:a0:f0:a3:96:7f:5b:20:52:e7:e1:0e:70:
ca:44:16:a9:18:f2:19:f3:38:ea:56:21:85:54:08:b3:c1:f4:
ea:52:3e:ac:70:b5:0e:a3:b2:c0:cf:ac:a8:c5:3f:b0:70:2e:
d0:12:60:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:17 2025 by rpki-client