Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JsFqUKpUIEFjvmvOupxFBaeQmnk.roa
File: JsFqUKpUIEFjvmvOupxFBaeQmnk.roa (raw, json)
Hash identifier: kjt9fvXqqzHO4rPNR+OWF/Ot7/74/9+/sdMQMcERCmc=
Subject key identifier: 26:C1:6A:50:AA:54:20:41:63:BE:6B:CE:BA:9C:45:05:A7:90:9A:79
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197061390237366969E9B4064D2BBEF8B81
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JsFqUKpUIEFjvmvOupxFBaeQmnk.roa
Signing time: Sun 25 May 2025 06:13:54 +0000
ROA not before: Sun 25 May 2025 06:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 07:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:13:90:23:73:66:96:9e:9b:40:64:d2:bb:ef:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 06:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26c16a50aa54204163be6bceba9c4505a7909a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:eb:62:b9:5b:52:eb:8b:4e:7f:64:91:22:
29:ac:9b:8c:02:db:74:43:4c:64:53:fa:a7:a1:0a:
77:58:66:3b:ea:f2:32:46:be:28:7a:5b:22:49:00:
0e:76:5f:98:30:9b:29:39:e2:f9:37:6d:b0:22:b7:
04:83:ee:35:f6:4b:54:26:88:dc:6c:c1:35:c5:65:
03:cf:a7:55:9c:95:71:8c:f7:2c:c3:62:89:c0:ee:
bc:ee:aa:64:98:10:09:e2:12:df:de:43:00:c7:fb:
da:39:9f:e7:fe:25:a1:ac:3c:44:3f:93:dc:1b:cd:
5c:4c:4e:14:56:ee:4a:69:12:3d:b4:af:e6:9c:34:
d6:95:e8:bd:d0:68:32:a7:0e:f3:e6:03:03:8a:58:
8e:8f:f7:2d:09:75:ab:dc:90:f7:ca:bc:4c:e5:a1:
85:b6:22:89:f6:53:6a:84:e9:19:7a:f5:40:d2:12:
45:14:02:90:4d:78:72:2e:c2:5e:e1:21:76:7c:23:
a9:3c:72:ab:11:65:e5:78:54:73:eb:e1:38:d3:86:
42:7c:81:1e:f4:d7:32:97:bf:a8:b8:4a:64:53:c0:
0b:cb:4f:e6:f5:5f:43:59:06:5e:7d:96:41:94:47:
1a:d4:53:9a:6f:d5:af:e7:c2:6a:4a:18:30:e5:bc:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C1:6A:50:AA:54:20:41:63:BE:6B:CE:BA:9C:45:05:A7:90:9A:79
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/JsFqUKpUIEFjvmvOupxFBaeQmnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
26:d6:d6:d8:1f:79:91:d7:86:e5:24:ae:9a:c5:d0:e8:1c:6e:
fc:b8:46:5b:8a:b0:a8:49:35:39:12:fa:d9:c4:fa:c8:77:dc:
f4:c1:72:a0:3a:4f:d2:8a:cf:d7:a6:44:55:e8:48:e0:a7:99:
c8:40:e1:33:ef:0f:22:cf:c0:6b:dd:d0:4f:8d:88:30:e7:2e:
30:95:c7:e0:b4:c4:7e:62:e5:dc:8c:a9:7d:68:b9:d5:03:6f:
ad:63:cd:2c:3a:e2:03:29:36:0c:d6:52:10:7c:e5:ae:a5:63:
e5:19:d3:61:36:97:1b:49:43:9f:83:d4:6f:68:f3:1d:6a:78:
2f:6d:f6:74:6f:70:c8:ce:2d:73:1a:83:7a:9d:3c:31:47:9d:
80:83:f9:52:89:b3:df:76:b4:39:af:57:7d:41:31:31:6a:5f:
9a:74:90:98:33:c8:ad:65:4d:33:19:dc:0d:c7:3a:bb:ac:1b:
7e:a9:c9:61:cd:71:e0:bf:27:f8:57:da:a6:31:e9:8b:e2:fc:
04:55:61:59:83:06:66:01:1f:b0:39:7d:d5:26:17:67:2d:4c:
01:bd:0f:b8:f5:67:96:93:17:1e:eb:a0:bc:c7:b2:49:1b:53:
b5:fe:d1:f7:36:65:0f:54:c8:f4:e0:b6:67:0a:c2:0e:73:95:
e7:a1:02:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:53 2025 by rpki-client