Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/TBgrNyQoF_Stxf3R0Did1qvyWMU.roa
File: TBgrNyQoF_Stxf3R0Did1qvyWMU.roa (raw, json)
Hash identifier: bFnCeaN+X5e4zTJ8gnuXbthv2tci59NHuWxLGptXSro=
Subject key identifier: 4C:18:2B:37:24:28:17:F4:AD:C5:FD:D1:D0:38:9D:D6:AB:F2:58:C5
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971850C075C3D0039D63A4297C28B3BA0A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/TBgrNyQoF_Stxf3R0Did1qvyWMU.roa
Signing time: Wed 28 May 2025 19:13:54 +0000
ROA not before: Wed 28 May 2025 19:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 28 May 2025 20:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:50:c0:75:c3:d0:03:9d:63:a4:29:7c:28:b3:ba:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 28 19:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c182b37242817f4adc5fdd1d0389dd6abf258c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:12:cc:91:e6:85:47:82:03:c4:dc:04:9b:
5c:d7:38:9a:97:d9:ef:19:40:3e:52:dc:35:33:d2:
db:bd:c1:28:84:da:ff:7a:97:f3:ef:0f:40:6e:13:
ed:db:9b:b1:96:f4:c7:81:6f:af:8d:69:e3:bb:a4:
ea:c0:d1:39:0b:5c:e0:1d:98:e3:ff:05:63:a7:d8:
6a:f1:13:14:25:b8:f1:2f:53:14:a2:f4:c4:80:92:
bc:e2:1f:38:1a:84:6b:e6:8f:78:c4:76:03:55:53:
9c:41:4c:31:8f:57:53:21:89:4f:d3:98:31:2c:48:
c1:4f:30:75:65:c5:d4:9c:eb:b5:e6:79:1a:ba:b4:
21:58:cd:16:69:df:5c:27:7f:19:22:f7:48:e4:88:
c1:1c:6b:24:f4:47:45:50:c8:b7:0d:0a:cc:01:19:
16:64:b2:d0:42:1d:13:d7:7a:ce:9c:70:0d:80:9e:
c7:70:3b:9f:47:b2:24:4b:5f:d1:70:23:36:56:b1:
b8:c3:3d:ae:a4:46:3c:6a:16:82:03:eb:cd:0d:a1:
09:d1:58:94:61:24:4a:3e:01:55:58:a3:06:5d:73:
37:ee:48:41:ab:b7:13:02:87:ef:c1:5b:58:ec:a0:
f4:11:66:6c:b0:3a:a5:56:60:c1:82:65:93:38:13:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:18:2B:37:24:28:17:F4:AD:C5:FD:D1:D0:38:9D:D6:AB:F2:58:C5
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/TBgrNyQoF_Stxf3R0Did1qvyWMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
16:31:30:ea:57:f7:8b:fe:2e:aa:21:c4:cd:00:3b:28:2d:af:
2d:e2:28:39:b9:bc:19:bf:59:43:b2:4b:5e:00:de:58:0b:29:
0b:8c:ac:60:2c:a0:ca:e2:84:b4:6d:f4:1a:ee:2d:d1:32:cb:
b1:8f:75:50:5d:5d:5a:0d:a2:1d:e6:1a:58:f0:26:67:4f:f6:
dd:aa:3c:11:7e:30:f2:27:90:58:5c:aa:45:2e:c1:53:0a:6e:
30:f0:41:9d:bc:71:06:dd:7f:b7:31:65:64:7d:3e:e0:2d:b3:
c1:9e:37:1b:48:1b:a2:8f:a6:06:2c:2f:59:ed:ab:97:60:52:
0b:6d:86:ad:a9:31:0b:50:b4:08:01:d3:1c:52:43:98:f7:89:
9d:0d:36:ea:4c:b3:99:5c:ab:88:2f:99:f9:98:f7:a9:33:fd:
72:b8:03:14:7c:62:eb:3c:e8:af:83:46:92:1b:30:72:29:18:
b2:8a:e5:6a:55:9e:6f:1e:d4:1b:ac:d1:59:7c:3d:a1:41:82:
23:45:46:a4:e2:9f:ca:4c:97:54:67:84:ad:10:49:f2:09:88:
2a:31:75:2a:ba:b0:28:59:6c:6d:be:26:09:8a:61:32:8c:e0:
d1:9e:6d:1e:48:77:7b:f5:39:e2:11:5c:51:7d:c7:26:26:1a:
3e:c6:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:23 2025 by rpki-client