Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PsxtteEDmsIP_8VVwvwSo1OGMSg.roa
File: PsxtteEDmsIP_8VVwvwSo1OGMSg.roa (raw, json)
Hash identifier: OlTKQLHDI4lz8DNfUsTXatkZgb0QZWlVmxjQlSUj3d0=
Subject key identifier: 3E:CC:6D:B5:E1:03:9A:C2:0F:FF:C5:55:C2:FC:12:A3:53:86:31:28
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FC9FD2FF2BFCA50CFBA0BD948D4BA5A8
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PsxtteEDmsIP_8VVwvwSo1OGMSg.roa
Signing time: Fri 23 May 2025 10:10:54 +0000
ROA not before: Fri 23 May 2025 10:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 23 May 2025 11:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:9f:d2:ff:2b:fc:a5:0c:fb:a0:bd:94:8d:4b:a5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 10:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ecc6db5e1039ac20fffc555c2fc12a353863128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:91:a0:c6:4a:ac:22:66:c6:d4:29:4c:d9:
e4:6e:9c:c1:55:1c:ff:01:fe:f4:cb:da:06:a2:e7:
68:a6:65:5f:3d:74:b8:2c:d8:f7:d2:9e:73:00:24:
2c:d5:2f:3a:d1:f0:05:a4:f6:9a:5a:67:35:99:25:
1e:e7:b5:89:7e:37:7e:36:31:3c:2d:60:3e:75:5f:
b7:35:26:b4:1f:ea:df:10:cb:a1:ba:59:01:47:de:
3a:5e:0b:b9:b8:80:ec:d7:07:dc:4c:5b:7a:21:36:
66:b6:e0:17:cf:21:2d:33:a8:2b:f7:b7:96:98:ca:
37:a6:4d:54:30:3b:17:1c:bc:b1:27:8b:cd:d4:30:
ec:43:14:13:a7:00:a9:0e:51:06:c5:ab:73:c3:73:
0e:db:02:a0:4d:43:71:71:ab:c2:e4:5e:12:01:52:
1a:52:32:56:e6:86:3c:91:00:1d:05:f5:0d:21:f4:
af:f8:cf:55:71:cb:a3:84:8e:15:b6:6d:02:45:0d:
7c:19:06:80:d1:1a:06:ab:d6:56:93:ea:20:54:22:
92:cc:d7:c6:83:37:54:97:e4:5f:1a:fa:7c:c7:16:
2e:34:c4:07:75:c7:d9:f1:d1:41:34:9b:1e:ff:5e:
35:b2:99:ea:fc:c2:cf:96:24:ea:1a:6f:91:bd:ce:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CC:6D:B5:E1:03:9A:C2:0F:FF:C5:55:C2:FC:12:A3:53:86:31:28
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/PsxtteEDmsIP_8VVwvwSo1OGMSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
92:e5:6c:29:4e:b8:51:aa:ae:da:cf:b4:b2:98:01:9e:f3:9c:
0b:97:1e:fc:b6:76:8c:08:b1:f7:46:82:46:1e:96:1a:12:e6:
76:e5:04:bf:6a:3c:c7:8d:cd:5b:16:33:de:2f:98:ae:48:64:
e5:c9:d8:62:fe:8b:47:b7:30:19:a6:d6:9b:cd:35:88:62:21:
0f:38:13:02:1e:d5:a8:ba:28:fa:42:f3:e7:34:2c:34:dc:d6:
b1:e3:70:52:e6:35:44:f9:8f:6e:96:14:22:ad:5e:3c:b1:2c:
e7:97:2f:49:ba:f2:b5:fb:92:02:41:d3:7d:6b:e4:18:c2:1d:
cb:7c:29:c7:03:ff:3e:6b:46:60:c0:df:3c:52:2c:26:bd:dc:
5a:ea:b1:5a:72:64:54:7b:c3:2f:4d:ef:47:db:28:7e:10:73:
5f:14:80:57:cc:25:4d:08:da:71:6a:f2:d0:6b:4b:d2:c6:11:
a9:04:fc:54:10:33:0d:0e:bd:20:fe:2b:46:0d:1d:d9:e7:43:
e1:ca:46:91:2b:74:df:72:54:be:17:3f:64:e6:f4:1b:8c:50:
7d:cd:a0:0e:b0:da:1b:fe:e6:f8:6e:1f:a5:a0:46:e7:25:c7:
b6:33:2e:c8:4e:e7:92:c7:4c:fd:05:5a:cd:79:5f:f7:d8:f4:
32:9e:75:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:02:02 2025 by rpki-client