Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/QgSzKq_B2m0QDZythb4EoIPpwZE.roa
File: QgSzKq_B2m0QDZythb4EoIPpwZE.roa (raw, json)
Hash identifier: qE4P7V+C5wSHh8qZV0EN5kpzacUbOnAuzsSF2a1wg2M=
Subject key identifier: 42:04:B3:2A:AF:C1:DA:6D:10:0D:9C:AD:85:BE:04:A0:83:E9:C1:91
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970F83A43793C33D2C0E3FF75AFE662ED2
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/QgSzKq_B2m0QDZythb4EoIPpwZE.roa
Signing time: Tue 27 May 2025 02:12:54 +0000
ROA not before: Tue 27 May 2025 02:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 03:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0f:83:a4:37:93:c3:3d:2c:0e:3f:f7:5a:fe:66:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 02:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4204b32aafc1da6d100d9cad85be04a083e9c191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:27:d6:74:df:bd:d4:7b:a7:8d:74:cd:4b:
3d:aa:7f:04:56:7e:b8:bf:2c:5f:3f:58:0f:66:01:
05:c4:ee:0e:1b:db:c7:c3:1f:10:5c:79:4b:35:47:
50:49:b0:22:10:5c:0b:8a:b8:e7:cb:45:49:39:02:
74:fe:14:9a:10:d4:38:b5:1a:b8:d1:60:5c:49:34:
73:c2:2a:0b:1e:09:35:d4:a0:0b:9c:17:f3:60:bf:
9b:35:2e:c0:71:3d:cb:55:8d:3b:96:b6:ec:c7:98:
2e:1f:ed:87:86:ec:78:bd:db:86:e7:c9:47:27:5c:
42:b2:dc:70:18:b0:1e:ad:77:19:85:d6:d5:fd:a4:
bc:a7:8a:88:c8:b7:e0:37:bd:a8:13:5e:fc:4a:1f:
f5:18:d9:ce:c0:c5:14:96:83:79:57:0a:78:1d:b7:
48:fe:5b:2f:de:1a:6e:c5:c2:8b:dd:3c:77:5a:3b:
26:58:24:af:2f:53:6e:00:27:7e:79:2c:f5:e3:fd:
78:d3:42:37:7c:19:36:fa:2d:97:32:bf:34:ac:9e:
26:20:13:18:81:09:4f:79:64:ca:3e:c8:24:4c:de:
35:b8:03:ce:5f:43:af:ca:82:48:84:1b:02:82:36:
96:96:15:1d:08:30:99:db:7c:46:2b:39:4e:c0:c4:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:B3:2A:AF:C1:DA:6D:10:0D:9C:AD:85:BE:04:A0:83:E9:C1:91
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/QgSzKq_B2m0QDZythb4EoIPpwZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
75:60:58:fd:c7:16:1d:83:6b:8f:85:aa:15:99:4d:72:96:ba:
cc:86:b7:4d:1d:b4:59:e9:35:ee:a3:22:cc:53:3c:aa:c6:a5:
8c:7f:db:21:25:b3:66:e5:3a:d0:33:a8:f1:fb:bd:85:da:ff:
d0:29:99:a6:47:a0:26:8b:41:5d:25:23:5e:6d:63:59:b2:da:
3d:f3:bd:cc:74:ff:be:28:42:bc:4a:fd:95:57:f9:fa:75:c2:
36:f2:6b:e0:e1:e4:90:b0:14:51:a1:fa:af:dc:ce:8e:da:6e:
a9:0f:03:b5:95:bf:d6:7f:38:89:aa:01:41:70:fc:53:50:cf:
32:e8:cb:a5:87:dc:eb:73:e4:8b:1e:65:b4:72:2c:f6:19:26:
b6:ea:88:3c:93:6c:4e:ae:50:3e:9b:f1:4c:eb:68:cd:f4:3b:
a6:27:7b:50:2a:f5:12:54:7b:29:af:b1:e4:52:47:61:d5:6a:
0e:74:1b:da:b0:c8:9b:a3:b8:1e:13:4c:e2:f5:f7:61:41:ca:
cb:bc:a3:a9:d4:2e:7d:78:a2:52:85:22:bd:3c:56:33:5e:d3:
8d:d9:9e:7c:56:e6:39:c6:c4:1e:ce:72:6b:8b:b0:1d:23:0d:
75:e8:12:93:dd:3c:41:a5:12:fe:18:41:9d:53:ce:a1:62:c9:
54:b4:9b:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:27:06 2025 by rpki-client