Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OJu90HH9kPL-_5_uApQWzxhiyXQ.roa
File: OJu90HH9kPL-_5_uApQWzxhiyXQ.roa (raw, json)
Hash identifier: Ru0ns+nBZaQKswWlqE5QyrJgJ3RAKrbv7qz7vER2DIE=
Subject key identifier: 38:9B:BD:D0:71:FD:90:F2:FE:FF:9F:EE:02:94:16:CF:18:62:C9:74
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01966289A88DDE25397A016B3D565993EB89
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OJu90HH9kPL-_5_uApQWzxhiyXQ.roa
Signing time: Wed 23 Apr 2025 12:05:10 +0000
ROA not before: Wed 23 Apr 2025 12:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:6288:dc54/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 23 Apr 2025 12:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:89:a8:8d:de:25:39:7a:01:6b:3d:56:59:93:eb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 23 12:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=389bbdd071fd90f2feff9fee029416cf1862c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:8b:be:14:e8:69:22:3a:d5:9e:50:05:56:
3d:ac:58:c4:a1:f8:8e:ad:e9:60:98:56:37:82:e9:
dc:cc:80:ee:e7:8f:1d:66:5d:f0:cc:4c:e8:04:12:
d5:a6:b1:fc:a6:9d:a9:04:b1:69:1d:9e:c9:92:12:
c0:2b:fd:8d:95:cc:46:5b:ab:7c:5e:73:6c:8c:04:
82:e1:5b:5f:f7:5c:27:64:af:44:e1:dc:25:d8:d9:
16:d7:ba:57:bd:f6:95:2b:1b:8d:c7:89:43:11:b9:
f9:c2:05:05:91:10:b3:6e:61:e4:f6:86:ae:f0:3e:
26:57:b7:b5:97:25:24:1e:d9:d1:e4:64:a4:08:ac:
7f:5b:bd:b3:0a:9d:a5:15:84:ab:95:65:a2:7e:47:
61:db:42:04:8c:56:b2:85:0a:db:16:23:3c:45:dd:
f8:6a:0b:70:81:59:46:11:fb:38:6a:57:2d:84:a4:
a3:a2:8a:92:ed:8c:ca:e8:01:f1:6a:6b:1d:3e:ab:
f1:31:88:cd:fb:68:54:ca:70:d3:8d:78:71:41:bc:
cd:c0:98:da:67:e2:e9:23:68:26:f5:1d:1c:27:3c:
b6:cb:d4:12:89:8a:6d:2f:e4:ab:3e:c6:b3:8b:72:
0f:20:fc:2e:a7:8f:5b:e9:99:f0:b9:35:c8:01:8f:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:BD:D0:71:FD:90:F2:FE:FF:9F:EE:02:94:16:CF:18:62:C9:74
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/OJu90HH9kPL-_5_uApQWzxhiyXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:6288:dc54/128
Signature Algorithm: sha256WithRSAEncryption
1f:12:d2:84:74:82:03:4f:6b:f8:b0:c3:36:65:d9:58:11:b5:
9d:6e:a9:fa:d3:24:75:fd:a2:ba:cd:bd:1d:90:77:93:21:20:
9e:15:21:f4:37:2a:1a:f7:24:2f:4e:27:47:ac:de:03:59:b2:
6f:71:b4:84:0e:64:14:ae:d7:24:3c:80:f0:4d:72:08:be:53:
bf:73:87:0e:76:ee:ca:5c:b5:e6:98:3d:5c:84:21:90:cc:9d:
d5:3c:55:be:4a:cf:32:b1:c3:7b:bf:32:81:fa:15:ed:f6:50:
3c:98:fe:d6:66:e4:c8:3c:d5:88:93:b5:d4:b6:92:7f:90:df:
af:30:03:b8:bc:c3:73:42:21:0b:50:8a:e9:8a:8e:4c:3f:5c:
31:57:24:f4:2e:b8:51:c4:1f:76:28:bc:97:f7:e6:42:ab:d1:
7e:79:11:be:59:35:08:b2:3c:20:a7:50:3a:68:7d:b2:6d:b7:
8c:15:15:9d:ad:44:e6:71:95:17:62:78:80:b5:61:9f:b1:30:
63:ea:a1:28:e5:81:8b:ab:ec:6f:fd:bc:04:8e:e3:39:81:4d:
f8:0c:b4:57:0d:7c:7b:fb:18:ac:f8:dc:c2:1b:83:1b:48:d2:
01:c6:4c:5a:c3:82:bd:6f:c5:bf:68:a0:de:99:90:57:29:64:
83:55:f2:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:11:16 2025 by rpki-client