Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SlcVX4UAYNlmL38EY3pbPkE3aDI.roa
File: SlcVX4UAYNlmL38EY3pbPkE3aDI.roa (raw, json)
Hash identifier: uw62SwOktDElez3awT00G0LuR4MVDHixO//P3GgHqDA=
Subject key identifier: 4A:57:15:5F:85:00:60:D9:66:2F:7F:04:63:7A:5B:3E:41:37:68:32
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971E51EC728A0F202C88AD7ECB5251131C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SlcVX4UAYNlmL38EY3pbPkE3aDI.roa
Signing time: Thu 29 May 2025 23:12:54 +0000
ROA not before: Thu 29 May 2025 23:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 30 May 2025 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1e:51:ec:72:8a:0f:20:2c:88:ad:7e:cb:52:51:13:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 29 23:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a57155f850060d9662f7f04637a5b3e41376832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:74:79:66:0a:5b:c2:ee:1d:e4:90:c2:c6:
b2:e2:c7:b0:0d:14:3d:7c:0f:79:7d:78:41:21:e1:
e8:c1:7c:b9:00:3a:4b:0d:72:6c:89:b3:b3:29:6f:
e7:fa:bb:3e:68:27:52:7a:14:9a:52:c5:54:f5:9e:
02:2d:52:ab:7a:2f:af:b6:ee:3b:86:27:51:7e:2b:
65:94:95:36:ba:dd:66:78:bd:69:24:4d:15:d1:b1:
32:62:94:b8:b9:19:21:68:58:d0:e7:f4:26:55:73:
6f:a8:72:f4:03:20:24:0c:c1:48:ab:e5:14:0a:3a:
5f:64:3b:30:b1:22:32:f0:fa:53:16:2b:fb:a2:89:
69:de:69:44:91:75:f8:3e:dc:b4:79:df:a2:ef:b1:
f3:26:7d:b4:23:b9:99:6a:69:30:4d:10:cd:8c:83:
5d:59:b5:43:b2:f8:d3:6c:ba:c4:d4:44:6f:da:26:
de:0d:e0:65:a5:a0:a9:73:60:5f:78:9e:58:8f:1f:
a4:f6:48:93:9b:c9:87:3e:81:9f:1d:a1:8a:21:51:
87:8b:ac:9f:13:e7:17:39:cd:eb:83:cc:8a:42:f3:
a3:2f:25:b1:5f:62:53:f2:f2:5e:d9:1b:11:6f:d3:
83:42:3d:68:a7:dd:65:0b:52:30:fe:41:35:e6:80:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:15:5F:85:00:60:D9:66:2F:7F:04:63:7A:5B:3E:41:37:68:32
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SlcVX4UAYNlmL38EY3pbPkE3aDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
79:c5:17:3e:6c:7d:25:a8:c0:63:a5:60:bd:13:32:c2:c4:3d:
ae:b9:99:a4:93:78:09:cd:62:62:4f:e4:16:5c:07:d5:32:61:
c7:41:76:c5:2c:12:7a:3d:c5:3c:2a:db:1f:23:22:7a:5e:35:
14:87:11:47:07:7d:b7:e1:46:c0:62:b2:91:38:61:a1:3c:52:
0e:6b:80:cc:68:84:75:cb:22:c2:d9:82:23:28:15:19:c6:60:
87:e7:a3:a1:12:8f:f1:09:12:02:c0:1b:1d:f4:7c:56:e9:66:
c7:38:6d:73:f6:9b:3a:d7:fa:0d:ec:7e:66:19:b8:a4:2f:99:
71:e1:ec:6c:31:f2:71:00:7e:0e:df:88:1c:96:b5:b6:87:ae:
8a:0a:de:fc:b4:5c:96:28:1f:3b:74:34:38:2a:b6:3d:fc:08:
78:e4:49:54:2a:f0:2a:35:ac:36:e5:8b:72:5a:34:db:06:d0:
97:05:a4:5a:61:ba:70:b4:41:09:09:4d:8a:16:da:56:64:6b:
40:fb:53:01:a1:3e:ab:65:61:3d:cc:68:25:93:3c:ed:a0:a0:
31:94:b4:0d:3a:e3:aa:0d:d8:35:16:fd:14:18:85:b0:78:91:
cb:a7:8b:c2:e4:8c:03:96:de:c6:06:8c:73:f7:88:72:e1:63:
8d:e4:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:42 2025 by rpki-client