Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/S1lmF425P06RA_xKuV8fPZhiQfM.roa
File: S1lmF425P06RA_xKuV8fPZhiQfM.roa (raw, json)
Hash identifier: e1y/6woL2gh6sh2nHsY3n+X15C8XQqGMFYheIYma55M=
Subject key identifier: 4B:59:66:17:8D:B9:3F:4E:91:03:FC:4A:B9:5F:1F:3D:98:62:41:F3
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019709B129507DFA33BEBBA324663B537FF7
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/S1lmF425P06RA_xKuV8fPZhiQfM.roa
Signing time: Sun 25 May 2025 23:04:54 +0000
ROA not before: Sun 25 May 2025 23:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:9b0:6340/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 23:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:b1:29:50:7d:fa:33:be:bb:a3:24:66:3b:53:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 23:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b5966178db93f4e9103fc4ab95f1f3d986241f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:3c:2a:ec:4f:d6:e8:1a:f4:7b:d9:c9:89:
a8:a9:c6:a5:0b:1e:88:49:38:04:b6:5a:5a:65:9b:
1e:12:bc:dc:1d:df:91:7a:bd:4e:56:ff:7b:05:41:
ae:40:f1:71:11:75:2e:30:1b:79:76:ae:f6:d7:41:
bf:17:f5:b6:d8:f4:25:83:54:ae:71:dd:23:ce:39:
58:c5:f2:02:de:46:c1:8e:f6:55:0c:dd:f0:1c:f4:
99:3c:7e:1b:56:47:cc:07:d8:c6:9f:e8:92:13:0b:
8a:c7:7f:05:68:b0:2c:21:95:98:f0:99:97:f3:74:
7e:cc:c5:bc:c0:3a:b1:07:91:e6:1c:8a:15:70:fd:
05:75:65:9a:85:fd:c4:52:86:b0:5a:61:17:e0:78:
ec:df:90:b9:58:f2:50:61:79:b4:32:40:f8:90:36:
fc:00:f2:2c:11:af:8b:a3:a1:c9:d8:23:83:f3:a4:
f0:cb:31:66:3f:ff:61:19:e6:d8:dc:67:9d:b8:01:
6b:ca:1e:f2:0f:db:60:af:ee:8b:27:db:7b:ec:60:
e9:7e:2c:95:0e:ac:12:96:ca:2c:70:6a:6f:5e:55:
58:15:33:17:f7:85:9f:5c:af:dd:e8:cd:32:a0:50:
85:c3:c7:84:9e:06:67:c9:ad:12:b8:fb:a0:00:30:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:59:66:17:8D:B9:3F:4E:91:03:FC:4A:B9:5F:1F:3D:98:62:41:F3
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/S1lmF425P06RA_xKuV8fPZhiQfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:9b0:6340/128
Signature Algorithm: sha256WithRSAEncryption
67:e0:05:b9:65:a8:c8:a9:dc:d9:c3:bc:2d:d4:78:5c:54:7e:
ea:97:14:75:c1:70:8f:b7:93:0e:d8:65:e4:84:7e:d0:d8:9b:
0b:1a:56:bb:6a:8b:84:c9:a2:98:2f:b3:b4:73:51:c5:b1:e3:
06:77:a4:69:f9:73:92:5b:e1:16:cc:0b:ff:8a:d6:34:e1:25:
01:75:c7:52:5f:95:a4:a5:f8:15:9a:12:b9:ed:bc:26:be:6b:
18:3a:1f:dc:5f:5f:93:15:1d:b4:00:b0:c7:2f:04:cc:3c:98:
0c:80:6d:56:82:f7:c6:80:e3:7a:9f:43:cf:aa:09:0d:7e:bd:
17:55:84:3d:8d:ea:1c:e8:84:83:08:88:a1:f0:ca:aa:94:59:
ce:5e:e5:eb:b3:45:0d:de:e1:a8:5c:6f:6f:db:29:79:4e:83:
4e:2d:12:b0:60:19:07:d3:70:da:a3:fb:34:eb:79:92:79:ee:
ac:10:bd:06:6f:b2:a4:95:a0:e0:e4:67:6c:bb:1f:d1:b3:fd:
23:1c:19:89:68:56:16:b4:4d:16:9e:f1:6a:7e:57:38:26:9b:
e8:94:ec:3d:53:46:95:bb:2b:ac:6c:3f:d9:27:c0:1b:9a:5d:
92:c1:4a:39:a6:37:8b:30:7f:41:a4:a3:22:ce:d2:83:1e:3c:
0c:28:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:46:33 2025 by rpki-client