Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/L0e7PQ3v2n6Agp9ZEjQs7DYVGrA.roa
File: L0e7PQ3v2n6Agp9ZEjQs7DYVGrA.roa (raw, json)
Hash identifier: 9lP/vM3ztXM08lavk8v+dIDExUqJZFKVDXaeYhWFGeM=
Subject key identifier: 2F:47:BB:3D:0D:EF:DA:7E:80:82:9F:59:12:34:2C:EC:36:15:1A:B0
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019726E7317E9F91D9558B67FDB035FDB7FA
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/L0e7PQ3v2n6Agp9ZEjQs7DYVGrA.roa
Signing time: Sat 31 May 2025 15:12:54 +0000
ROA not before: Sat 31 May 2025 15:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 31 May 2025 16:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:e7:31:7e:9f:91:d9:55:8b:67:fd:b0:35:fd:b7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 31 15:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f47bb3d0defda7e80829f5912342cec36151ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:95:bb:9e:61:a1:fb:7a:73:d8:6e:32:f4:41:
96:f2:fb:b3:41:61:42:ba:dd:b6:67:55:de:9a:b2:
22:d7:6d:ca:b4:62:eb:b5:41:8b:3f:cd:59:e4:6c:
5f:e3:f1:cb:ea:ac:1d:0e:47:37:07:dc:44:fa:7d:
1a:bf:97:4f:26:56:05:ac:5f:0f:1b:1d:54:9c:b2:
b8:f3:9a:92:5f:1c:8b:49:12:18:c3:9b:b8:f3:67:
b0:5c:65:a3:ba:46:15:b9:48:9e:ab:c9:b7:6e:4b:
23:3c:b5:50:ef:c5:33:f4:39:b7:1c:a9:27:04:66:
0f:ea:d1:66:02:08:08:29:0a:62:fc:10:f7:ec:32:
68:53:4c:b1:fd:e9:5c:32:ac:ff:69:64:00:e1:ad:
2c:99:95:88:91:1a:1b:d6:29:c0:38:cc:6b:48:26:
2d:c7:dd:30:fd:8c:a7:cf:05:b5:ab:a8:2c:1a:ca:
95:a9:07:61:1c:7c:9f:03:54:4e:d3:0b:a4:0e:d5:
37:6b:77:07:98:65:7d:f1:05:6a:ca:86:e8:f0:1f:
51:cb:ff:a5:7f:89:6c:93:bd:a7:0b:e9:ab:77:8e:
07:e7:e6:d0:06:df:13:c1:5a:e6:ee:48:f0:f2:cc:
d7:ab:6f:5b:a6:66:df:8c:4f:22:00:ca:dd:60:02:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:47:BB:3D:0D:EF:DA:7E:80:82:9F:59:12:34:2C:EC:36:15:1A:B0
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/L0e7PQ3v2n6Agp9ZEjQs7DYVGrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
38:94:08:08:0b:83:78:73:62:65:a9:9c:b3:4f:3d:c0:27:67:
75:1c:bf:87:c2:c7:7a:04:7e:71:99:71:f0:82:ec:0a:da:78:
4d:19:c6:76:64:93:20:be:cb:2a:f5:46:31:b4:7c:2f:59:3e:
7e:ec:7d:49:d9:5e:9f:42:ff:d5:fc:95:af:be:ce:7f:92:92:
20:f8:3c:08:64:79:e5:4d:49:c1:0f:31:db:69:d3:af:6d:c6:
f0:9b:90:18:2a:5b:ec:b8:a3:6c:ea:5d:1c:eb:60:12:d7:00:
bc:9d:a9:a0:e6:89:78:39:37:03:5b:54:ee:90:fd:7b:5e:3c:
86:64:80:a1:55:9d:7e:8b:25:0b:cd:33:6d:81:9c:73:76:78:
1a:4a:76:0f:7d:79:01:6d:7e:16:8a:99:52:5d:e2:ae:02:11:
99:05:be:a9:0a:4f:cc:8f:10:63:15:37:24:d9:c5:d3:27:9e:
7a:fd:6b:54:94:38:c2:8b:e1:5f:bf:58:a5:bd:b5:a5:fc:c7:
7c:2a:b4:ce:96:1a:ec:7e:82:9b:8b:d5:f0:de:31:6c:40:f7:
ff:63:5d:d1:72:39:16:57:13:16:23:ff:de:7b:f7:e3:da:5d:
09:2d:2a:fc:2e:db:3d:0d:cf:b1:9a:69:32:44:f4:14:ae:fd:
83:27:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:36:25 2025 by rpki-client