Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PVMw-_a_7RZcGdKWUgMj-jZCuxE.roa
File: PVMw-_a_7RZcGdKWUgMj-jZCuxE.roa (raw, json)
Hash identifier: NWJy2h27PMNUK7e7agNYGFLe0Zoe2neqoFPu9dg4Y5U=
Subject key identifier: 3D:53:30:FB:F6:BF:ED:16:5C:19:D2:96:52:03:23:FA:36:42:BB:11
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971EF5CDBA6254F00FEC35B92C5B3A1F64
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PVMw-_a_7RZcGdKWUgMj-jZCuxE.roa
Signing time: Fri 30 May 2025 02:11:54 +0000
ROA not before: Fri 30 May 2025 02:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 30 May 2025 03:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1e:f5:cd:ba:62:54:f0:0f:ec:35:b9:2c:5b:3a:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 30 02:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d5330fbf6bfed165c19d296520323fa3642bb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:3f:c5:74:59:6e:5e:59:f6:52:a3:4c:d8:
a6:b4:be:d5:76:67:16:54:5b:8f:22:ce:df:42:c3:
d2:b5:51:d8:bf:e8:8f:06:03:ea:ff:41:8b:67:2b:
26:7a:7b:c9:a8:a8:17:17:2b:af:37:88:57:fc:be:
62:72:88:64:9b:7f:08:8f:32:1b:f8:db:65:5f:84:
8f:f7:1f:a6:e4:b9:46:86:37:e7:1a:7e:ae:31:19:
e6:5e:51:ce:72:91:a7:a9:39:50:f8:10:1d:4a:aa:
1d:67:de:e0:42:95:ed:30:53:80:c7:22:ca:c7:86:
aa:02:b4:ee:fd:9e:13:6f:b8:5e:55:07:e5:0e:65:
87:64:98:f8:09:b3:67:0b:13:8c:00:91:3d:c4:13:
73:a4:8c:5f:84:f8:fc:3a:6c:c8:46:4d:e3:36:ed:
6a:07:79:bb:f3:6a:5c:68:62:d3:79:9b:b8:00:91:
91:26:60:61:02:f6:8e:a2:f8:19:ad:3b:f2:d6:63:
21:44:23:0c:09:1c:a0:96:16:13:2b:90:a6:70:63:
b0:e7:f7:4a:1d:82:3e:ac:55:ee:ae:3a:82:7b:f3:
6c:69:52:4d:20:25:cf:6d:54:5e:c4:6a:f3:b6:42:
5b:a8:0a:c4:47:96:0d:67:c6:e5:6b:5d:6e:b6:52:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:53:30:FB:F6:BF:ED:16:5C:19:D2:96:52:03:23:FA:36:42:BB:11
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PVMw-_a_7RZcGdKWUgMj-jZCuxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
8d:04:26:17:36:fa:9e:a9:61:e6:0b:18:ff:97:de:d9:b2:19:
7a:d1:da:2d:02:7a:ff:df:a5:ef:79:4d:a8:3b:1b:33:1e:2e:
ec:04:74:21:23:56:5a:4d:50:17:9b:1f:59:d9:96:ae:a5:a2:
fc:f5:08:3a:67:8a:1c:69:99:d6:37:b4:d3:e8:04:0f:de:e8:
8d:39:a5:10:ea:39:98:e0:fb:7f:84:af:69:6d:33:35:b3:4f:
a6:cb:d5:09:ab:70:c9:1d:ba:94:32:9f:7e:d4:03:3d:fd:d2:
69:8d:48:4c:e9:87:a9:37:08:a4:96:1a:0f:3d:f7:8c:52:a4:
dd:e6:f7:29:7e:10:90:aa:37:a7:f7:26:25:54:6b:6b:ae:2f:
53:98:57:6f:f0:70:d0:60:84:61:74:4a:2d:3b:fc:d0:a9:e5:
6e:e7:16:79:00:65:6d:57:20:3f:ea:99:b0:4d:f0:76:17:e2:
13:1e:86:cb:9b:e3:df:f0:b9:7f:7d:4f:ab:bb:12:86:59:e5:
62:ec:e1:31:3d:72:a9:b6:31:8a:00:6c:7c:59:f3:62:00:a6:
ac:33:a8:aa:03:a1:26:65:25:1e:de:2c:0e:75:65:5a:f7:72:
c3:8c:bd:56:11:b6:bf:84:b2:2d:53:70:77:45:0c:80:19:16:
1a:ab:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:23 2025 by rpki-client