Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NBbMazC90-c8el28lXqyF1mZV9I.roa
File: NBbMazC90-c8el28lXqyF1mZV9I.roa (raw, json)
Hash identifier: LSzRY4uArFUL0fcTNVteN2o6Poc/FcSdTFYnuz9j2tY=
Subject key identifier: 34:16:CC:6B:30:BD:D3:E7:3C:7A:5D:BC:95:7A:B2:17:59:99:57:D2
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F96A988D643E54ADFB232A50C39C8A6B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NBbMazC90-c8el28lXqyF1mZV9I.roa
Signing time: Thu 22 May 2025 19:13:54 +0000
ROA not before: Thu 22 May 2025 19:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 20:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:6a:98:8d:64:3e:54:ad:fb:23:2a:50:c3:9c:8a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 19:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3416cc6b30bdd3e73c7a5dbc957ab217599957d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:8d:7f:ea:15:3b:ae:7a:65:46:04:b5:de:
18:49:d5:ee:f0:8d:24:da:d6:67:1f:47:12:32:6a:
7c:4f:26:8f:f3:ec:ba:df:32:01:2a:c7:aa:96:07:
b3:24:6d:ba:e4:83:60:75:ba:be:a1:bd:4f:13:00:
91:ac:13:39:80:3a:b0:45:ad:58:3f:cf:8c:2d:3f:
de:91:30:13:a9:eb:cb:86:65:a7:24:8a:c2:3c:d4:
41:0a:82:32:7f:39:f7:8e:b5:4a:6d:f9:6e:b8:29:
30:26:5e:2d:c5:6e:9a:6f:7e:28:47:bc:ff:49:21:
76:38:2f:75:c9:ff:c5:b7:ac:fc:db:00:6b:a6:ba:
58:e5:29:50:e3:bf:1d:4b:d8:da:cf:86:6b:81:08:
1d:a7:c5:bf:aa:d1:9f:bf:44:13:2b:99:45:f3:d8:
18:88:d3:07:78:66:d1:03:b9:21:3a:c3:29:4e:f8:
bc:64:66:75:ac:81:33:55:19:35:f2:17:66:48:63:
c3:b9:44:95:a1:71:76:1e:85:be:19:e5:b8:33:8b:
03:39:a5:ed:6e:81:45:ce:5d:a5:9c:3f:ec:64:4c:
00:b6:4a:62:ca:7f:35:69:41:f8:c0:30:5e:85:d1:
7a:d6:fa:eb:ce:25:1b:6f:7f:cd:f1:0b:b0:df:37:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:16:CC:6B:30:BD:D3:E7:3C:7A:5D:BC:95:7A:B2:17:59:99:57:D2
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NBbMazC90-c8el28lXqyF1mZV9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
21:db:dd:c0:30:86:49:b1:41:8d:2b:bf:c1:c4:50:ae:6b:22:
60:e9:09:86:76:61:76:d9:8b:8f:c4:d0:75:c4:a2:4e:60:2e:
a9:8d:ad:5e:e1:d6:12:e2:1f:8f:6e:32:0d:63:98:4f:4c:05:
11:ab:71:53:d7:17:af:5b:32:b7:7b:02:9a:ae:e4:4e:63:57:
c2:7c:23:9c:90:4e:0c:47:63:79:d9:9b:0e:f4:0b:f7:0e:4d:
22:95:29:4d:ea:d3:22:08:57:f5:1b:e5:75:cc:a3:bf:df:ea:
66:0c:27:33:0f:af:eb:20:58:ff:30:08:3d:f2:e7:58:97:d7:
4a:0b:11:18:26:2e:89:a5:9e:b4:65:76:35:f8:aa:02:4a:30:
f7:02:ff:8d:48:aa:25:92:09:87:3a:f2:70:a0:85:be:db:1c:
b0:b6:f1:4a:1b:82:99:ab:60:09:93:dc:3b:ef:43:0e:2e:6e:
d6:d8:27:b2:0d:d2:d8:bf:7b:93:46:cc:9d:51:6e:9e:86:f4:
f0:51:25:ec:b1:4d:b1:ea:1e:23:53:c0:51:25:6f:72:4c:5e:
2c:2f:16:1d:ab:e3:ee:83:50:c7:1c:eb:0c:13:63:ad:c1:ee:
0b:77:9c:b4:60:db:d1:47:50:12:a7:b7:fc:ac:2b:c5:d9:6f:
06:21:a8:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:30 2025 by rpki-client