Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V-tFqvThcvq5WeDaWVrfJHOJQ3w.roa
File: V-tFqvThcvq5WeDaWVrfJHOJQ3w.roa (raw, json)
Hash identifier: ABx6kbiaHDFWQ137AgRbq+SkQwsLO5+LTKHJ4Qz10X4=
Subject key identifier: 57:EB:45:AA:F4:E1:72:FA:B9:59:E0:DA:59:5A:DF:24:73:89:43:7C
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973134423F058CBEA9D588F4834FB3113F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V-tFqvThcvq5WeDaWVrfJHOJQ3w.roa
Signing time: Mon 02 Jun 2025 15:13:17 +0000
ROA not before: Mon 02 Jun 2025 15:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Jun 2025 16:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:34:42:3f:05:8c:be:a9:d5:88:f4:83:4f:b3:11:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 2 15:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57eb45aaf4e172fab959e0da595adf247389437c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:b7:dc:6a:11:ba:6a:81:dd:49:ad:83:27:
a3:88:75:60:7f:6b:6c:8c:6c:44:85:b6:33:85:e1:
26:6a:93:de:06:46:d3:67:45:09:ee:76:e3:2e:31:
c5:65:b9:5a:d2:b6:97:c1:6e:83:46:f2:c0:b0:88:
a8:a2:eb:6f:17:1e:c1:a1:07:09:81:80:b5:bb:55:
bc:d3:69:46:e7:1f:ca:f7:b8:af:f3:e2:76:87:1e:
9f:cc:bc:5d:2b:8b:d3:5f:82:af:41:57:aa:a7:61:
95:09:66:56:27:0d:d6:32:72:db:13:a4:b0:6b:47:
f0:9f:f9:6b:bb:87:84:9e:f8:b4:13:e1:33:63:d4:
cf:06:a8:d4:96:d2:0f:b6:de:bc:61:fd:5f:39:72:
16:cf:02:4c:cb:b0:0a:c6:54:9b:b2:ea:45:cd:ed:
25:0f:ca:74:7c:90:7e:1c:6c:d8:ce:11:e3:3a:07:
e4:fc:b2:02:13:c1:62:16:ac:66:2a:d7:0c:b1:9c:
e9:e4:84:22:d4:dc:43:19:88:65:69:21:cf:b1:71:
96:79:b5:8d:f5:4e:a0:a8:e0:ae:fa:d6:16:e0:74:
2b:cc:bf:bc:85:b6:5b:7a:cb:94:06:b9:34:d1:94:
15:91:ff:b2:c5:e8:9d:23:46:c0:9d:bb:b5:52:70:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EB:45:AA:F4:E1:72:FA:B9:59:E0:DA:59:5A:DF:24:73:89:43:7C
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V-tFqvThcvq5WeDaWVrfJHOJQ3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
77:d8:a2:b7:6d:47:15:e3:ce:6e:28:68:71:6c:98:da:de:b7:
f5:3a:18:a8:32:94:68:09:71:00:19:8f:dc:27:36:62:fa:f9:
9f:b7:7d:1b:ca:e3:3d:77:83:ad:0f:fa:95:17:f5:af:d5:a4:
8d:e1:af:17:bf:50:9b:01:6d:f0:97:57:50:55:d8:5e:6c:70:
36:f8:ad:90:65:9e:19:8f:66:43:ae:63:d6:1f:f0:43:1d:dd:
35:1a:34:af:f0:01:13:d8:92:00:75:94:78:85:4c:76:d9:ac:
71:10:6e:9a:be:5f:5e:3f:9d:23:fd:70:0f:db:f3:31:77:05:
81:bc:60:99:39:74:4b:b3:79:95:cc:4e:dc:d8:20:d6:99:20:
99:93:a4:dc:2d:57:88:d8:1c:36:f4:8d:73:08:d9:eb:68:1e:
f1:9b:a1:95:cc:f5:c3:5d:42:d0:93:76:bc:1e:f3:85:4a:40:
a7:40:be:2f:62:71:27:a2:85:c7:12:68:21:17:c5:d5:8c:ce:
22:8c:09:57:5f:21:86:bb:21:cb:0e:34:9f:af:8a:bf:91:3a:
9f:d7:19:23:5c:f1:84:cf:fc:09:00:8e:e0:5a:e2:21:46:ec:
2f:60:93:66:0b:c5:c9:a1:6a:9a:55:4e:dd:84:d8:28:8b:b2:
57:c4:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:49:06 2025 by rpki-client