Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/MsEcFFu5HdiAcsjAZUhpFuCZ_j0.roa
File: MsEcFFu5HdiAcsjAZUhpFuCZ_j0.roa (raw, json)
Hash identifier: 44M2ATkjCG8ySWhN3y9zZFk5FxyMBwSNWwBIdfMirR0=
Subject key identifier: 32:C1:1C:14:5B:B9:1D:D8:80:72:C8:C0:65:48:69:16:E0:99:FE:3D
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019714E0EF45604441A91D8D37059D0F31E4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/MsEcFFu5HdiAcsjAZUhpFuCZ_j0.roa
Signing time: Wed 28 May 2025 03:12:54 +0000
ROA not before: Wed 28 May 2025 03:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 28 May 2025 04:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:14:e0:ef:45:60:44:41:a9:1d:8d:37:05:9d:0f:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 28 03:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32c11c145bb91dd88072c8c065486916e099fe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:24:a2:ea:79:76:d1:72:50:86:73:c9:c9:
e6:cb:77:cc:cf:1a:e6:59:ff:6f:96:f5:ec:4e:ab:
a6:34:15:68:24:42:b8:78:c2:24:01:33:51:92:5f:
c3:84:13:f1:33:9e:16:ef:bc:c4:b5:b8:f0:b6:15:
17:4f:60:c0:27:61:c0:fd:5e:02:7a:c4:8b:bc:9d:
07:93:15:80:c5:29:10:e0:ed:e3:30:80:dc:18:49:
e6:ee:cb:cf:2b:af:d4:dd:f0:54:24:4a:be:0d:94:
a4:a1:9e:13:d6:48:d7:4e:6b:5d:79:30:35:88:a3:
4c:c0:2f:68:be:10:3e:de:8a:86:cd:c9:90:63:1f:
e0:6b:27:1f:64:3c:18:99:4e:ca:29:1f:19:6f:80:
fa:b2:d0:2a:6a:12:8b:7e:f4:9a:a7:57:ad:9e:1f:
5d:c1:08:83:dd:e1:fb:ee:83:38:f7:2d:aa:fb:0b:
eb:56:42:ff:b3:bf:63:03:2b:e6:40:19:8f:37:88:
5f:7c:d8:f7:b4:dd:de:39:f7:5e:54:75:3a:37:2e:
48:9a:d5:2a:63:3e:62:a3:17:2a:d3:70:4d:d9:be:
af:fa:ed:ef:14:3c:7b:9a:fe:d3:fb:5c:6c:05:a3:
d7:db:de:8e:0d:b5:d2:4b:6d:82:81:b3:db:18:6e:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:1C:14:5B:B9:1D:D8:80:72:C8:C0:65:48:69:16:E0:99:FE:3D
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/MsEcFFu5HdiAcsjAZUhpFuCZ_j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
Signature Algorithm: sha256WithRSAEncryption
46:c4:b8:27:ff:75:6b:11:10:eb:ad:42:7d:68:03:08:de:f4:
f8:53:3b:05:c4:f8:cb:21:d4:70:d6:5e:e0:e7:84:dc:8c:1b:
a7:26:a6:10:69:e0:9a:78:7d:1a:c4:b5:72:9b:28:41:7c:d3:
8c:08:eb:50:cd:dd:c9:b3:95:92:26:fc:d8:a3:f7:16:7c:a7:
9f:1b:bf:27:94:04:87:c1:af:8e:55:6d:0e:af:f2:57:06:2e:
4e:a0:8d:b9:71:bd:f2:bc:6a:07:d6:a2:87:05:eb:75:16:17:
bc:16:bd:7a:23:ce:9e:54:56:14:ff:1e:45:27:f3:f8:50:cb:
14:16:49:08:29:49:ca:14:f9:04:47:65:87:c5:8d:61:d4:44:
28:1c:63:77:24:0a:68:6a:bf:6e:f6:60:ff:dc:88:e9:f2:6d:
35:5a:dc:fa:54:2d:b0:11:0e:4f:33:86:77:02:f1:39:d0:a5:
b3:e7:a3:a9:ea:72:e1:4a:88:cd:d6:01:1d:77:e1:0e:6d:74:
8e:9a:e8:34:4f:e8:ed:c4:64:88:f2:4d:ae:09:4d:46:35:a8:
94:7c:0e:cc:7c:0d:e4:81:bd:2d:41:c7:69:aa:63:b2:c3:49:
5b:91:b2:fa:7e:80:27:95:2a:f5:8b:2a:8b:68:1e:b5:6d:5f:
b6:89:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:47:31 2025 by rpki-client