Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/RnxuFXONdJw1DcjraP8CsJ3lLlg.roa
File: RnxuFXONdJw1DcjraP8CsJ3lLlg.roa (raw, json)
Hash identifier: AZk2pCUSVjZgr20QedGNhuC6A7lT11U1ntkWJz0W+LI=
Subject key identifier: 46:7C:6E:15:73:8D:74:9C:35:0D:C8:EB:68:FF:02:B0:9D:E5:2E:58
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019705DF6115A751656D2BEC0E7B69A8A00D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/RnxuFXONdJw1DcjraP8CsJ3lLlg.roa
Signing time: Sun 25 May 2025 05:16:54 +0000
ROA not before: Sun 25 May 2025 05:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 06:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:05:df:61:15:a7:51:65:6d:2b:ec:0e:7b:69:a8:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 05:16:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=467c6e15738d749c350dc8eb68ff02b09de52e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:91:b5:d7:a2:c2:50:c9:5a:0a:14:b3:4e:
be:ae:60:46:a1:40:86:2f:8e:ba:a1:5d:b3:b1:06:
5b:d0:95:d5:8f:3f:d6:22:5c:85:3f:c7:e3:b6:91:
11:17:45:16:15:2a:49:bb:a2:52:ba:0c:62:3e:25:
31:85:5b:8f:cd:4b:6b:13:cc:ac:04:27:56:cd:56:
ac:e9:f8:e0:7a:65:64:a6:ed:ad:11:1c:e6:e8:3c:
c3:00:44:2a:3b:06:af:d2:bc:80:9c:5b:ef:f4:2c:
3e:99:ef:41:94:68:ce:cb:c3:b0:01:13:38:92:02:
31:b8:a5:5c:3b:2a:3f:50:84:72:10:95:cb:56:38:
86:50:2d:08:73:42:2d:02:5b:d1:09:d9:ee:bd:3c:
74:e3:d4:6f:9b:04:98:66:99:cc:16:f9:6e:1c:e3:
69:94:f6:89:48:92:80:4b:b5:4b:ec:50:4e:18:78:
24:49:5c:3c:8d:f5:99:d2:7e:67:38:b8:3a:e8:a6:
9e:c3:5e:e0:44:1a:bd:6b:ce:2e:ef:09:cd:4c:87:
20:67:e0:6d:5e:6c:34:e3:40:a6:f5:03:b5:f7:0e:
34:50:0f:11:d0:77:79:68:90:f8:f3:d2:7f:87:79:
23:bc:89:5c:49:2e:34:ff:b5:ba:07:c3:66:8c:9b:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:6E:15:73:8D:74:9C:35:0D:C8:EB:68:FF:02:B0:9D:E5:2E:58
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/RnxuFXONdJw1DcjraP8CsJ3lLlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
b7:9a:9b:78:ba:24:7f:cc:ef:24:63:90:31:be:e5:54:bb:49:
9a:b3:f3:4b:ee:93:2f:62:2d:2f:62:ad:3f:32:b8:77:50:28:
24:e7:57:a1:48:1a:a7:e3:d9:31:9b:00:f2:22:1e:1b:7f:40:
23:18:6b:e7:1d:6d:47:24:26:22:55:07:9f:69:c9:de:e6:22:
01:a0:ee:07:33:21:0b:cf:4c:ab:10:05:4b:59:b1:13:48:15:
83:e3:64:bb:50:a6:e8:89:10:2b:8e:d9:0b:09:9c:d2:cd:91:
d2:4a:d3:0a:02:fa:9c:2f:33:af:2d:3a:9f:cd:cb:8e:ad:7c:
44:f1:fb:c4:22:5f:d0:21:f4:51:9b:db:48:50:3f:14:b1:3e:
76:18:fe:1c:92:d9:86:9a:a8:91:b1:a7:9c:0c:72:99:a6:5e:
28:b4:dc:46:92:e0:7d:97:94:4f:c6:28:85:36:8f:3b:35:69:
48:06:df:39:bd:95:33:ad:cb:3a:e8:20:82:ed:d8:49:6f:e9:
e8:1d:59:4b:dd:24:26:e0:7a:39:9a:6e:b0:0a:dc:01:6c:36:
ac:c0:86:4e:b2:6e:48:43:ed:4c:3f:4e:74:11:70:2d:f2:74:
af:7f:b1:8a:74:f1:ed:08:07:16:6f:92:73:91:66:4f:3b:3c:
75:8b:ef:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:40 2025 by rpki-client