Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/R1ksDuEudiP1_Wjqs5HVbJKP5a0.roa
File: R1ksDuEudiP1_Wjqs5HVbJKP5a0.roa (raw, json)
Hash identifier: UjXpZEf+XnKdhLEsHId0cAepkIQpBbI2doU4tUxmo6M=
Subject key identifier: 47:59:2C:0E:E1:2E:76:23:F5:FD:68:EA:B3:91:D5:6C:92:8F:E5:AD
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197271E1FA3C8E32B3C87044954316B1187
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/R1ksDuEudiP1_Wjqs5HVbJKP5a0.roa
Signing time: Sat 31 May 2025 16:12:54 +0000
ROA not before: Sat 31 May 2025 16:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 31 May 2025 17:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:27:1e:1f:a3:c8:e3:2b:3c:87:04:49:54:31:6b:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 31 16:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47592c0ee12e7623f5fd68eab391d56c928fe5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:ad:f2:b4:ec:d9:e0:5e:c5:79:fe:d8:9e:
78:05:05:08:74:57:a3:26:c6:9f:52:13:ca:2e:9c:
ec:78:10:e2:65:58:e6:b2:b8:59:a3:32:3d:88:95:
71:21:28:7b:b5:56:d1:b0:39:ea:cc:75:eb:36:81:
ae:9c:6a:6c:c4:db:93:99:64:20:14:4b:d0:41:9a:
df:c0:5f:53:bf:e0:94:a2:39:3a:d5:cb:03:4f:d2:
a2:df:70:66:e0:e3:15:07:85:4a:3d:3a:6d:7d:09:
84:a7:35:31:6f:a5:7d:cf:8c:8e:b6:10:70:41:6a:
1d:fa:ba:b7:eb:0d:14:31:1d:2f:49:d8:2d:aa:c9:
e5:c7:db:88:6b:91:3d:74:a5:a8:f3:d6:6f:fe:f2:
0c:79:ee:9f:a4:8d:a3:9f:09:ee:02:ef:ec:7f:9a:
ce:9d:c2:60:7a:99:61:ff:ea:1b:dd:66:ae:20:ad:
80:f9:a4:ab:1a:89:71:49:06:f4:1b:b1:bb:c8:8d:
fe:ad:a6:99:c3:ee:62:f8:c4:bb:13:22:ac:6d:71:
de:01:46:e7:89:75:b0:61:c0:6d:87:81:b0:35:ac:
89:4a:64:15:5a:80:3e:e6:ff:c4:fc:04:f8:03:9f:
3d:c9:1a:e2:ae:95:22:9d:c6:32:28:02:3b:0c:83:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:59:2C:0E:E1:2E:76:23:F5:FD:68:EA:B3:91:D5:6C:92:8F:E5:AD
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/R1ksDuEudiP1_Wjqs5HVbJKP5a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
98:b9:99:c9:16:0e:99:ec:9d:1e:52:f5:75:cb:ab:3b:ab:3b:
52:74:70:00:05:38:57:bd:b8:13:af:ae:a4:e2:f2:40:7e:ab:
cb:96:3b:50:44:59:04:d1:e4:ce:0e:30:e2:bd:09:f3:b0:cc:
9d:cf:b9:7b:6f:90:16:10:d7:61:51:d1:55:59:ef:4b:2c:e2:
78:ae:4c:c5:43:be:92:3b:23:0b:65:8a:38:7c:c6:b8:ee:bb:
0c:a0:25:77:a3:ef:18:68:37:65:ca:1b:e7:f5:95:5f:95:24:
37:5c:81:cf:68:16:21:87:ff:f3:e2:72:3f:62:e5:4e:01:71:
d0:62:c2:b3:8e:e4:1f:02:61:18:54:c9:51:cc:96:f1:93:02:
fd:76:4d:0c:bc:4f:6f:2d:40:be:dd:77:86:82:13:ef:e2:33:
60:f9:2d:12:70:1c:33:d4:45:fb:5b:b0:ba:b4:24:1e:4d:4d:
9c:94:54:0f:8f:15:b4:b4:a0:e8:b9:da:e5:1b:b9:47:28:6a:
6f:19:5f:e6:d9:a0:e6:99:c0:15:70:2e:bc:f9:2e:95:45:6f:
9a:2d:00:3c:fe:fe:7f:bf:8b:cf:11:23:4b:c1:5b:f4:c0:7b:
0d:ed:fb:01:20:6e:aa:86:ec:89:38:a6:86:5e:db:de:38:f5:
7b:57:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:14 2025 by rpki-client