Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/KJ7ZT2I-eGMPfbaXx1ePMkmwEpU.roa
File: KJ7ZT2I-eGMPfbaXx1ePMkmwEpU.roa (raw, json)
Hash identifier: veq9Xf2wTGJdv3MjvZBHRup50gCfz1xGSHJMg4jlYQk=
Subject key identifier: 28:9E:D9:4F:62:3E:78:63:0F:7D:B6:97:C7:57:8F:32:49:B0:12:95
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197459982A701B330D4663D9F4B75E38349
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/KJ7ZT2I-eGMPfbaXx1ePMkmwEpU.roa
Signing time: Fri 06 Jun 2025 14:16:17 +0000
ROA not before: Fri 06 Jun 2025 14:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 15:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:99:82:a7:01:b3:30:d4:66:3d:9f:4b:75:e3:83:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 14:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=289ed94f623e78630f7db697c7578f3249b01295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:c1:56:e4:03:f6:8d:f8:6c:7e:63:b1:72:
bf:0e:2e:18:4a:17:08:ad:5c:ff:7e:c6:b8:a3:85:
7e:b7:dc:33:3d:a9:b1:6d:86:3c:ed:98:4f:82:e3:
17:17:58:c0:b7:d3:dd:26:d2:81:85:e5:fb:10:f6:
ed:f8:50:e4:84:fd:db:ca:af:a5:35:0e:91:37:53:
49:2d:14:5a:dc:f0:de:2b:57:e7:24:09:d1:4f:af:
48:de:74:61:27:39:2c:05:c9:ee:5c:75:ba:7e:ce:
b5:75:f4:58:a3:0e:8b:a5:e1:da:b1:5e:20:a7:ad:
52:48:fa:db:21:6e:d8:12:d4:f3:2f:43:19:dc:23:
28:bb:ed:8a:47:8b:b1:a3:16:af:16:b8:db:40:83:
c2:9a:ad:f2:30:8c:1e:51:30:f6:50:20:fd:b4:70:
c0:96:db:6e:23:b1:cd:d7:9c:3f:8d:8f:a8:6b:3d:
5e:a6:af:6d:6c:8e:96:51:d9:71:c3:f3:61:bc:2e:
e3:4c:9d:eb:97:e3:94:44:9e:67:71:a6:61:a4:b7:
ba:aa:3c:da:5d:5e:76:51:d2:e4:2e:09:ec:5e:28:
28:6d:b9:28:77:09:42:6a:77:1f:36:56:4d:fd:0b:
ec:31:20:6a:37:a3:db:57:1b:99:dd:f3:01:6b:2f:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9E:D9:4F:62:3E:78:63:0F:7D:B6:97:C7:57:8F:32:49:B0:12:95
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/KJ7ZT2I-eGMPfbaXx1ePMkmwEpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
1d:8e:32:19:6a:9d:a3:3e:3c:fd:cd:16:4a:19:56:25:96:41:
74:67:f6:79:f1:ac:1c:b0:67:05:5d:7b:57:c2:00:9a:68:c8:
18:d4:31:fd:b1:18:0a:ce:a5:a2:ce:d4:bb:60:bf:7f:a9:c0:
1b:fd:95:d2:76:e8:1d:0f:a8:41:1f:2a:cc:9d:fd:b8:dc:6f:
b4:84:6a:76:ff:98:7f:40:a4:a9:7f:da:1a:40:5a:8d:b7:53:
02:5f:ca:d0:5f:b5:1f:fd:a3:34:d4:e9:08:e1:e7:c2:24:70:
e8:c5:9c:a5:76:4a:23:d6:b9:6c:f4:df:cb:9c:f1:9e:0e:71:
e3:7b:bc:4d:a6:6c:ac:fa:e5:04:c3:3d:00:d3:8d:d3:36:b2:
63:e2:e0:6a:3a:97:7d:86:55:99:30:62:59:d3:79:7e:b3:9a:
fd:ea:69:d9:cd:7c:74:43:78:4d:ae:19:47:97:98:fb:41:05:
dd:dd:af:fb:9d:9a:16:53:c7:14:99:65:2e:65:99:63:c0:96:
99:50:d4:b3:0c:cd:b3:2b:53:a2:3c:61:64:94:02:72:1e:e4:
0c:9c:ab:64:c2:95:b5:1a:b5:0f:8c:f6:e7:e7:db:78:83:35:
8d:06:4a:89:e9:a1:5c:b6:a5:df:7c:d5:78:49:5f:7d:42:ca:
bc:85:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:45 2025 by rpki-client