Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V3ZqfZrPCHij6_iJfgU9IAdNaEg.roa
File: V3ZqfZrPCHij6_iJfgU9IAdNaEg.roa (raw, json)
Hash identifier: yTLuFulFFUl81IXJb2XQj34C+r8jBGV7QaJzHgvmSj8=
Subject key identifier: 57:76:6A:7D:9A:CF:08:78:A3:EB:F8:89:7E:05:3D:20:07:4D:68:48
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019691F58BC0E44CA50DA4E1E6430A5F2436
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V3ZqfZrPCHij6_iJfgU9IAdNaEg.roa
Signing time: Fri 02 May 2025 17:05:10 +0000
ROA not before: Fri 02 May 2025 17:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:91f4:ab22/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 02 May 2025 17:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f5:8b:c0:e4:4c:a5:0d:a4:e1:e6:43:0a:5f:24:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 2 17:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57766a7d9acf0878a3ebf8897e053d20074d6848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:c0:97:90:d0:e9:66:c6:21:7c:c4:2d:40:
35:da:6f:23:a9:1f:f5:60:80:ff:83:d7:4e:71:67:
19:c7:22:c7:05:ef:57:3d:59:83:f7:f4:84:8b:d7:
cf:18:68:26:86:71:7d:5d:75:52:61:c2:26:e1:c2:
04:84:95:b9:8d:64:cc:b6:1e:9e:6b:25:10:28:f7:
ae:37:97:cf:bc:f9:4b:f6:ff:ab:be:4d:a6:18:4c:
d1:78:35:64:33:9a:41:b4:eb:b9:46:ec:29:f1:0f:
11:1b:e1:e0:1f:14:61:01:b7:be:78:75:49:de:c5:
60:54:36:aa:a8:a0:36:24:63:71:6f:8e:81:6c:72:
14:9d:61:03:68:1c:c2:3e:bb:2c:36:53:76:0e:67:
21:4a:47:84:49:02:19:13:00:e1:8e:fa:71:6b:22:
5d:10:a8:03:24:54:dd:1c:2d:62:18:8d:58:c7:70:
f6:c9:17:bb:d3:3e:4d:86:a6:e8:e9:c2:db:b7:dd:
c0:98:7a:58:bb:43:83:a9:e7:f8:95:2f:21:14:cc:
3e:82:d7:b6:ed:f4:70:bc:8d:97:68:f6:b8:3d:17:
4f:ba:b1:c5:e8:a3:80:4a:be:48:1b:70:27:7b:77:
50:17:79:3c:df:0e:ee:70:8a:10:1f:b3:d8:d3:9f:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:6A:7D:9A:CF:08:78:A3:EB:F8:89:7E:05:3D:20:07:4D:68:48
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V3ZqfZrPCHij6_iJfgU9IAdNaEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:91f4:ab22/128
Signature Algorithm: sha256WithRSAEncryption
49:d1:8e:3b:02:c4:68:8d:ae:ee:1e:b8:ac:c3:76:38:c6:fd:
54:3d:75:26:d8:0c:e2:ca:a1:6b:6a:64:03:39:2e:1a:69:18:
d7:43:fc:b0:bd:cc:cf:ff:6c:15:41:3e:fb:f3:db:2f:dc:5f:
bd:4c:37:71:3e:17:6b:1f:2d:b1:19:3c:a6:8b:41:6c:ba:99:
f2:8b:48:06:27:22:b3:07:d2:ba:a2:57:a8:6c:ab:e7:e3:14:
51:21:e4:99:c1:13:3e:30:42:67:4a:bc:b0:b4:43:c3:f6:65:
c0:dd:74:f6:51:5b:a4:9d:7e:08:bd:6c:e2:1a:5f:21:cf:cc:
e6:08:2a:2e:fc:6e:86:2c:e0:48:29:65:42:00:42:e4:1a:65:
4e:0d:6d:ea:03:ff:8e:7e:22:78:da:43:72:0d:24:4c:67:bc:
7f:d3:4c:5a:2d:86:7c:cf:f1:e2:26:39:c4:e1:34:4b:e7:e4:
8f:42:cc:5f:9d:e7:fc:f9:55:69:ef:f4:a8:5a:aa:77:ed:ec:
e0:f9:ff:99:b0:d1:fd:01:8f:26:ec:fb:fe:85:09:e0:6b:c7:
48:f9:be:49:e0:9a:75:ce:6c:61:a2:07:d6:fd:bc:30:aa:65:
2c:21:43:9d:c7:f6:ee:4f:84:d8:e1:f4:29:c5:12:a1:d8:36:
e1:38:71:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:24:22 2025 by rpki-client