Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NOP5C27lEovdQ-RnsEajkhvQfV4.roa
File: NOP5C27lEovdQ-RnsEajkhvQfV4.roa (raw, json)
Hash identifier: I6p1eFnYFCBDhTm1nDyKnpXf/rQynzqA9cWaEGZ1Cjw=
Subject key identifier: 34:E3:F9:0B:6E:E5:12:8B:DD:43:E4:67:B0:46:A3:92:1B:D0:7D:5E
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FBFCDC69BDEB8499A36CED0B339704CA
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NOP5C27lEovdQ-RnsEajkhvQfV4.roa
Signing time: Fri 23 May 2025 07:12:54 +0000
ROA not before: Fri 23 May 2025 07:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 23 May 2025 08:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:fc:dc:69:bd:eb:84:99:a3:6c:ed:0b:33:97:04:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 07:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34e3f90b6ee5128bdd43e467b046a3921bd07d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:31:5b:f5:0e:29:0c:30:f4:d9:cb:49:6e:
a3:4f:a3:e8:81:07:2a:b0:86:0c:51:bf:96:10:f5:
64:ad:99:c1:21:85:56:1b:4d:52:ef:ea:3a:e9:a0:
25:4b:4c:1f:cb:90:b0:a2:bd:f8:26:c1:54:32:89:
2b:24:0c:6a:78:00:e0:a0:c1:7c:fd:95:7e:8f:03:
96:b7:19:57:f2:3f:16:78:a1:51:d0:7c:bc:9b:0e:
af:77:fb:55:8a:fa:ca:22:b6:2a:11:ba:11:7d:2b:
2d:3a:45:04:38:a4:1a:48:4b:ce:63:b9:ab:94:27:
98:2e:3b:48:6d:89:7b:e2:c6:b4:46:6e:52:32:31:
6f:e0:c6:a9:72:a5:b6:e4:d7:ce:80:62:6a:77:95:
63:f8:4a:99:0a:51:40:91:eb:96:6f:81:60:00:1a:
76:57:81:0a:0e:0b:74:08:a6:a1:8f:4e:4e:d6:82:
1b:8c:05:7b:81:f9:7a:d4:74:c1:96:d5:f5:2b:1a:
69:dc:07:a2:94:48:27:43:b9:53:db:d0:fa:95:29:
4c:21:3d:58:cc:88:03:ff:75:42:f5:e0:3b:d7:43:
ba:2a:a4:e7:cd:a7:4e:3a:bd:23:bc:a5:72:38:16:
0b:42:a1:03:1d:f4:bf:ec:32:2a:13:af:83:a8:a8:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E3:F9:0B:6E:E5:12:8B:DD:43:E4:67:B0:46:A3:92:1B:D0:7D:5E
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/NOP5C27lEovdQ-RnsEajkhvQfV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
5b:31:18:8f:a4:98:d9:94:41:f7:ff:d7:0c:c4:7f:f1:1a:b7:
f2:52:26:55:07:e9:74:dc:b9:c8:b1:1e:07:90:16:41:e7:77:
66:11:57:8d:f2:b9:fe:cf:1c:05:27:c0:b9:ef:4f:fe:68:7b:
65:2b:63:dc:56:6b:3d:c9:c9:f0:30:dc:5f:31:01:7a:9c:8d:
82:0f:8f:68:31:c4:57:1c:7d:f2:3d:cd:67:23:bc:8b:fd:19:
be:dc:0d:04:21:b6:5b:f1:26:34:fe:27:d2:ce:c2:1c:df:98:
18:7d:d3:ff:24:26:74:d6:a9:a6:5e:74:ec:15:d8:0c:94:c3:
dd:2f:60:80:75:ca:80:73:c6:cd:3d:3d:52:96:32:35:c7:4f:
0e:bd:52:4a:dd:b8:2e:62:0c:6b:db:33:71:44:e2:56:03:f6:
2f:a4:10:e0:04:16:8b:f7:c9:67:23:c0:28:a4:0f:7a:bc:5e:
63:f9:30:89:68:5c:40:55:86:55:ca:29:28:ca:6f:85:29:d9:
60:20:a3:c9:5d:d9:52:64:99:9b:4f:91:52:b6:bf:89:86:7f:
f6:49:63:84:f6:e7:20:87:83:14:45:89:9f:78:01:7a:d8:44:
66:19:27:e9:a1:05:c1:2a:fe:6d:96:03:24:25:c5:7d:18:6b:
ee:2f:09:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:25 2025 by rpki-client