Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Jevqgfd65RT2RfSobfbOuVlaXvw.roa
File: Jevqgfd65RT2RfSobfbOuVlaXvw.roa (raw, json)
Hash identifier: zAMhKeC8a8p+9Ik213kUJg3H4FrK4YP9Vdrjf68T3Tc=
Subject key identifier: 25:EB:EA:81:F7:7A:E5:14:F6:45:F4:A8:6D:F6:CE:B9:59:5A:5E:FC
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970D2A649A0A43D992F550CA7D7A4C5355
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Jevqgfd65RT2RfSobfbOuVlaXvw.roa
Signing time: Mon 26 May 2025 15:16:11 +0000
ROA not before: Mon 26 May 2025 15:16:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 16:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:2a:64:9a:0a:43:d9:92:f5:50:ca:7d:7a:4c:53:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 15:16:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25ebea81f77ae514f645f4a86df6ceb9595a5efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:68:a0:b2:b3:70:d7:5d:01:37:a2:27:88:
18:48:ee:c3:f1:24:ce:a6:16:c5:67:8a:f0:37:b6:
27:ce:f4:fc:c1:78:45:b7:93:82:02:44:c8:e5:6a:
f3:f2:50:04:0e:2a:6f:9c:2c:1f:04:dc:9d:da:13:
7b:f6:88:30:b3:b9:21:b9:fc:2e:33:93:b8:1e:7b:
44:ab:5d:e4:5e:e8:c3:ad:1a:61:bf:f2:b9:02:1f:
57:b2:c3:08:90:6a:8f:05:00:8a:6f:01:43:25:aa:
aa:88:69:98:99:80:25:37:20:9c:1c:b4:0b:59:fe:
9e:b4:ba:ee:45:8d:7f:87:88:06:a5:26:cc:03:58:
b6:b4:4d:00:3d:37:b2:6e:59:e2:e1:e1:76:e2:9e:
d9:2b:f9:ee:88:11:c6:6a:ee:be:d0:e1:64:b0:54:
3d:17:0f:7f:28:c0:d8:7a:bd:31:8e:a4:eb:7c:dd:
1e:25:2d:35:03:2d:1f:3c:7e:a7:bd:c9:03:91:dd:
2f:75:f7:5d:fa:86:48:4c:e4:aa:e4:5c:8c:48:da:
4e:7f:a0:59:b6:60:f6:08:d9:e1:8b:8b:1c:09:ec:
86:f3:4b:a4:72:86:dc:71:ac:9f:34:f6:3e:10:09:
f6:9f:cf:81:dc:53:85:b5:94:ed:7f:1f:65:1e:e8:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:EA:81:F7:7A:E5:14:F6:45:F4:A8:6D:F6:CE:B9:59:5A:5E:FC
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Jevqgfd65RT2RfSobfbOuVlaXvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
87:cf:65:29:00:c0:d6:d5:91:68:bb:39:ff:58:79:02:6d:85:
4b:67:ad:c2:99:2c:eb:a9:23:b1:be:7b:ca:00:7f:cb:8b:10:
57:79:f1:f4:27:64:3e:4b:13:fc:2b:4d:19:24:d4:06:e8:f5:
78:66:83:8e:e9:eb:0a:1d:d3:4a:a3:d3:b0:53:88:3e:5c:be:
ca:47:8b:38:cb:ff:81:a2:0d:1f:73:b3:2a:14:3c:11:8a:b2:
81:e9:03:17:e4:eb:7d:b1:af:be:31:45:d8:f8:10:93:96:58:
9c:eb:c4:23:01:99:95:09:05:24:4a:37:a9:68:3f:9a:e6:36:
4f:3e:6e:c3:93:d9:24:4c:21:a4:63:a0:25:e9:ec:96:c8:17:
06:b0:97:4a:45:f0:b1:b6:5b:dc:4c:97:c0:3f:a2:66:fe:91:
2e:f6:31:14:ca:76:84:4c:07:82:bf:25:c3:4e:c3:cd:85:c6:
d8:dd:f4:26:80:ff:93:50:79:f9:44:97:46:a9:5b:7b:2d:b5:
b0:54:f3:7d:50:52:2c:c5:2e:c2:42:f3:58:f7:c6:31:86:43:
cd:f3:50:91:75:b4:51:53:49:64:45:b9:4e:23:7c:6d:3b:d4:
b9:e5:c8:0c:2b:8f:c7:2d:60:0a:b4:d1:86:27:c5:a8:42:ce:
f1:c3:ce:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:38 2025 by rpki-client