Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SytihhzK4g2dCj4uelOaB8qwazA.roa
File: SytihhzK4g2dCj4uelOaB8qwazA.roa (raw, json)
Hash identifier: UNxYlGkA5dy7+sgxxBffZWKva1DY/n7gBwZNq/guy1U=
Subject key identifier: 4B:2B:62:86:1C:CA:E2:0D:9D:0A:3E:2E:7A:53:9A:07:CA:B0:6B:30
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019742CCA758034A4ECA9BC45F0A404E1E5E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SytihhzK4g2dCj4uelOaB8qwazA.roa
Signing time: Fri 06 Jun 2025 01:13:17 +0000
ROA not before: Fri 06 Jun 2025 01:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 02:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:cc:a7:58:03:4a:4e:ca:9b:c4:5f:0a:40:4e:1e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 01:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b2b62861ccae20d9d0a3e2e7a539a07cab06b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:05:6a:af:66:f4:50:7b:16:44:b1:c1:bd:
6e:81:31:cd:45:44:8e:25:9d:57:40:08:e2:ec:3d:
7d:69:0d:a3:77:89:69:a7:20:4b:ca:a8:9b:18:b3:
17:ab:ce:a6:9e:26:99:37:49:d7:df:75:15:48:0a:
87:72:cf:fb:5f:a7:c0:79:89:8f:55:e8:70:a0:39:
6d:dd:fa:d7:28:47:85:51:ce:2e:d0:d7:77:b8:81:
59:03:b0:2a:3d:f0:e1:2b:5d:06:22:77:14:bc:cd:
66:76:06:e7:7d:af:1e:05:bf:fd:23:43:96:a7:46:
d7:e3:8b:f2:52:00:29:fc:1e:a9:4a:d2:77:b5:3b:
2d:73:af:bd:e8:d1:86:89:0b:ef:e8:fc:57:cc:c8:
ee:e9:fb:68:9a:59:d9:20:08:30:33:35:3c:5c:b3:
2b:ae:14:c5:9b:49:e5:0d:80:3c:a9:dd:80:da:3e:
4b:4f:8e:ad:26:70:f0:8e:5c:8b:5e:21:c3:af:7a:
ac:e7:77:db:1f:a3:87:3d:45:23:d0:eb:0e:57:51:
8c:ba:c7:3c:01:6c:42:ad:2f:3e:b4:1c:c7:dd:e5:
13:3f:07:66:ed:99:8c:76:41:de:15:a4:0b:7d:80:
8f:e0:28:b0:0e:8a:0e:3d:88:f3:96:53:ba:07:da:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2B:62:86:1C:CA:E2:0D:9D:0A:3E:2E:7A:53:9A:07:CA:B0:6B:30
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SytihhzK4g2dCj4uelOaB8qwazA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
93:70:ee:ff:56:1b:10:93:e0:b6:cc:46:07:b8:77:45:cd:c5:
7b:40:82:ed:76:b8:32:6a:c3:26:13:51:77:19:66:8d:40:59:
16:68:98:c9:3b:f5:b3:6e:42:ba:0e:e3:56:a7:c1:d1:d5:f2:
20:4f:5d:b2:cc:b2:af:49:9c:39:67:83:4b:6f:51:6d:0f:fc:
6f:82:b2:84:30:9b:85:1f:da:2a:f7:2d:6a:c3:0b:54:45:5d:
bc:84:2b:4a:3c:5b:e4:a6:5f:50:43:81:3e:6c:ab:bc:34:97:
04:f7:49:23:63:97:37:6e:19:81:1c:4c:69:43:7c:b7:af:aa:
61:8c:21:b9:37:f7:6a:f9:40:cc:09:94:5a:e2:58:37:15:42:
d4:9f:af:a9:47:7b:c3:24:b9:a8:d8:e0:f6:3f:ed:e9:66:1e:
b2:06:23:23:b3:10:46:bc:b7:cd:8e:8f:58:3d:dd:7b:93:2d:
0b:7f:57:1d:be:a0:d1:71:d8:e4:8a:71:ca:ce:fd:f2:b6:b7:
1c:73:f4:17:4e:25:7a:ed:dc:1b:c1:78:7b:0b:63:20:5e:cc:
d9:48:9a:97:03:c2:12:85:5a:bf:a2:20:fc:80:cb:fa:05:37:
4e:97:bf:6c:1a:48:3a:8c:b4:b1:de:cf:27:75:08:80:9b:f2:
d9:53:fa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:18 2025 by rpki-client