Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J4xiFGSI_JxXFUXeeKHUzOoVNgw.roa
File: J4xiFGSI_JxXFUXeeKHUzOoVNgw.roa (raw, json)
Hash identifier: PzbPePlMp3vxQWTaRX6SuIOHINb0crMidGEPlo1ZHF8=
Subject key identifier: 27:8C:62:14:64:88:FC:9C:57:15:45:DE:78:A1:D4:CC:EA:15:36:0C
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F0696DE57D330636371BC31595C6E0D1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J4xiFGSI_JxXFUXeeKHUzOoVNgw.roa
Signing time: Wed 21 May 2025 01:16:03 +0000
ROA not before: Wed 21 May 2025 01:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 02:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f0:69:6d:e5:7d:33:06:36:37:1b:c3:15:95:c6:e0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 01:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=278c62146488fc9c571545de78a1d4ccea15360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:32:7b:a6:66:09:49:93:ca:e7:81:34:08:
1a:22:d3:bd:a5:7f:5a:4a:3b:7a:9a:cc:1f:da:5b:
d7:82:1d:7a:1b:a4:cc:ca:10:90:6b:71:31:e9:c2:
b7:18:66:89:e7:2d:5b:50:a6:93:b1:8b:4a:c8:c6:
2c:4c:0c:1e:a7:94:29:9d:33:57:9a:c4:06:79:69:
77:79:70:0f:32:8e:e4:52:5e:c0:39:56:b1:46:d8:
18:0c:f6:a1:50:ca:2b:9f:a8:be:b7:e0:42:da:df:
ef:70:f6:a1:7b:ed:ff:40:c0:c9:44:fd:0d:b1:1c:
a6:6d:90:77:f6:bd:b3:83:8d:52:de:be:c9:f4:83:
46:e9:1b:b9:1e:4c:97:ea:20:2c:9e:99:cc:5f:35:
18:ce:fc:f7:be:43:4f:be:65:07:5d:a1:f2:19:97:
38:37:ef:c5:db:cd:72:d9:82:a5:8f:05:95:04:88:
8c:64:51:fc:9c:48:1c:af:12:3c:cd:a7:d0:a9:da:
b4:ab:0b:a5:f6:36:8b:7f:e0:1a:ca:c5:b8:1f:55:
d3:19:54:79:1a:5b:8e:48:a9:0e:45:d9:e4:72:1c:
33:72:64:0c:b8:c0:be:61:ee:39:f0:82:96:12:8e:
4d:68:eb:44:b9:36:12:93:84:55:e5:e8:eb:b8:68:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:62:14:64:88:FC:9C:57:15:45:DE:78:A1:D4:CC:EA:15:36:0C
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J4xiFGSI_JxXFUXeeKHUzOoVNgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
81:68:15:21:ee:11:24:86:b7:08:52:9c:c5:eb:94:80:1f:e5:
fe:08:a7:ff:ec:bd:88:09:33:42:40:b1:00:27:80:3d:32:b3:
78:2b:f6:10:5c:6b:62:aa:53:88:32:5f:6e:d6:94:62:c7:5b:
d3:27:14:5e:b3:d6:72:95:39:ad:a1:ac:4d:94:fa:dd:3a:b4:
4d:2f:a7:5c:2d:fc:29:e6:d1:53:92:7e:ac:e8:2b:68:65:f1:
df:dd:af:90:de:e9:fd:a0:25:76:95:dc:e1:29:42:0b:cf:eb:
39:f3:22:b6:23:27:e4:73:8f:ee:69:60:59:10:9d:f9:7b:54:
3d:7d:77:03:25:a3:6b:ea:b4:72:5e:46:67:82:91:d1:32:f9:
ed:59:00:40:3c:de:10:13:13:5e:61:f8:3c:24:cc:ba:34:b9:
38:50:c6:93:1b:1d:bf:e2:dc:71:fc:3a:c2:c2:51:f8:9b:ba:
4e:17:bd:0a:7c:27:87:3d:6e:fb:08:7f:4d:15:e2:17:b5:0d:
3c:fc:9d:c3:0d:a1:e6:3e:cb:57:f2:4c:1f:db:3e:b4:22:91:
53:17:81:f1:80:6f:11:3b:b3:51:22:78:22:57:21:32:09:69:
3e:5b:ac:4a:64:d0:05:54:77:5a:24:e7:57:52:d5:77:b7:60:
8f:6c:f6:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:46:57 2025 by rpki-client