Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J5pOEKZCYssihJgjZbDjXWslJQc.roa
File: J5pOEKZCYssihJgjZbDjXWslJQc.roa (raw, json)
Hash identifier: Gyjo0SOkUQOYA2kdMCracfZTUJ9CD0hKcVHNoX2KEyo=
Subject key identifier: 27:9A:4E:10:A6:42:62:CB:22:84:98:23:65:B0:E3:5D:6B:25:25:07
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019688FBD0D5F80339A73E0F7BFA06AFA115
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J5pOEKZCYssihJgjZbDjXWslJQc.roa
Signing time: Wed 30 Apr 2025 23:15:26 +0000
ROA not before: Wed 30 Apr 2025 23:15:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:88f9:bd96/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 30 Apr 2025 23:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:fb:d0:d5:f8:03:39:a7:3e:0f:7b:fa:06:af:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 30 23:15:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279a4e10a64262cb2284982365b0e35d6b252507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8e:a1:6a:ee:c6:b5:14:4c:e8:5c:e0:b6:92:
71:04:69:ca:59:27:e3:5e:29:9b:a6:29:ef:2b:4c:
6c:fd:88:a3:8b:b8:7b:6d:38:9a:3e:19:ce:7c:2c:
b9:0b:37:2a:85:50:5e:53:13:2d:e4:13:fd:50:02:
a8:08:bb:70:be:a1:a4:e1:8b:9e:5d:49:da:e8:af:
b9:c8:7f:65:db:71:bb:71:bd:15:fd:81:59:c9:89:
51:13:c0:26:36:f2:5f:46:ee:cd:15:40:4f:15:8d:
30:60:fe:a5:f0:4e:fc:63:bc:c6:45:71:27:66:6b:
76:5b:c5:92:e7:02:24:2b:b0:4b:b8:4e:a0:aa:21:
ac:98:cf:d7:75:a5:d8:82:0c:c1:f7:b8:0d:ae:38:
a1:40:81:36:c6:c9:73:eb:7c:ae:ec:52:95:3d:ba:
03:05:79:45:a5:97:57:11:cd:26:2d:58:2a:7f:be:
f0:2c:34:46:8b:8f:34:65:19:18:5d:3e:3c:d7:ea:
8f:fb:a2:81:b2:14:f7:62:7f:42:ba:dc:3a:ae:c5:
1d:6a:a4:d0:dc:04:40:b2:c7:7c:08:cd:37:a7:12:
5f:30:34:ea:a9:10:e9:e3:8a:40:5d:df:d5:a4:73:
71:fb:57:21:42:8b:89:cb:3a:67:a7:28:d1:aa:0f:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:4E:10:A6:42:62:CB:22:84:98:23:65:B0:E3:5D:6B:25:25:07
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/J5pOEKZCYssihJgjZbDjXWslJQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:88f9:bd96/128
Signature Algorithm: sha256WithRSAEncryption
69:ca:51:4c:bd:8b:72:c9:c8:6a:01:9a:ea:0f:4e:4e:c5:dd:
eb:89:91:83:9c:43:9d:10:05:34:ea:41:c7:b8:e7:df:06:bd:
c6:e0:92:35:c9:3c:55:f2:07:01:27:67:61:d0:2b:8e:31:88:
78:fe:b8:85:19:29:0c:99:48:dd:61:50:a3:99:75:ad:4f:97:
16:80:e7:04:ab:07:04:07:2e:63:f0:28:ce:21:0c:7f:12:f7:
d3:d5:f6:83:7f:ed:95:d3:36:75:7c:13:16:a9:66:85:7e:79:
cb:c6:8d:92:51:6c:22:76:b7:e9:c3:a0:f2:d2:b4:c4:18:26:
a0:5d:c8:c4:30:6b:8d:0a:ba:3b:fe:b7:71:61:cf:41:a0:c5:
33:40:f8:95:4d:c4:e3:59:94:2e:73:f9:aa:95:ba:80:0e:79:
c2:9e:f6:8f:0d:32:4b:69:0c:70:db:a2:fa:ee:fe:69:d4:23:
e5:01:5b:ff:32:70:07:0a:ac:03:55:87:a5:02:4f:8a:a7:60:
4a:68:f5:cb:6c:c1:c5:ff:b7:df:f5:c8:e8:52:92:75:7a:14:
51:f1:cd:c6:a1:df:fb:4f:5e:aa:6e:79:c6:62:c5:21:ed:8b:
5c:fb:be:9d:df:a9:33:af:6d:30:23:5c:18:15:a4:2e:08:fc:
b0:9a:cf:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:53 2025 by rpki-client