Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/VuhQqu1hhdNfij8KYihUwVibEiA.roa
File: VuhQqu1hhdNfij8KYihUwVibEiA.roa (raw, json)
Hash identifier: q2bEoXbMADms10har0laxAxKdEVLGklFcRnD8oTCLY0=
Subject key identifier: 56:E8:50:AA:ED:61:85:D3:5F:8A:3F:0A:62:28:54:C1:58:9B:12:20
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019708A5D42E03708D739DA12923872D2360
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/VuhQqu1hhdNfij8KYihUwVibEiA.roa
Signing time: Sun 25 May 2025 18:12:54 +0000
ROA not before: Sun 25 May 2025 18:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 19:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:08:a5:d4:2e:03:70:8d:73:9d:a1:29:23:87:2d:23:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 18:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e850aaed6185d35f8a3f0a622854c1589b1220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:89:1d:68:6d:55:a5:49:99:2b:b0:5f:3c:4d:
d1:cd:88:74:60:73:a1:ed:ff:ae:df:2d:e6:a0:ba:
93:42:27:91:11:93:6f:1e:ae:f1:f5:65:64:31:47:
7b:65:3a:10:d6:f7:fb:76:9d:1d:4d:13:10:0c:5a:
2a:72:db:4e:19:c9:1a:df:0b:93:1f:72:6f:c2:f6:
69:b0:b3:9b:2d:87:d1:6a:92:18:9d:0b:53:dd:2f:
66:de:2b:e9:f1:17:f1:b4:47:37:64:ea:bf:82:37:
9f:09:cc:34:e5:dd:c2:f9:8b:2d:86:82:06:9e:30:
a2:c0:0a:33:db:d3:67:9f:3d:3f:34:97:14:75:3a:
d2:53:82:e6:b2:77:c7:62:f5:06:53:b6:60:cc:80:
fa:cc:64:52:ac:8a:6c:81:18:87:b4:51:02:0f:47:
d3:f6:36:27:20:b6:ae:c9:bc:c9:b7:29:68:a5:0b:
d5:ed:57:45:8c:fd:26:72:06:aa:e2:e9:4e:fb:30:
1d:fa:a5:ac:42:77:08:30:d9:b3:7a:28:44:6c:92:
93:18:e5:e2:97:db:47:f5:f0:e0:55:bb:78:08:d6:
cf:66:c1:fc:f3:99:d5:29:6f:18:de:32:ad:ab:ab:
b2:53:8c:36:f9:ea:96:10:f0:2d:51:d8:b6:b6:dd:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:50:AA:ED:61:85:D3:5F:8A:3F:0A:62:28:54:C1:58:9B:12:20
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/VuhQqu1hhdNfij8KYihUwVibEiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
54:07:0d:41:cb:e1:c0:e7:ad:c3:b8:73:b2:99:34:54:58:8c:
21:1e:b5:50:4d:d6:4d:39:36:7c:0f:33:eb:39:c7:be:08:6b:
2f:89:3a:ac:1b:2c:47:41:84:41:f3:0b:4f:07:15:13:ff:f5:
db:a9:08:06:25:ed:16:ee:83:0f:c5:92:f4:57:51:bf:c6:71:
c0:49:a3:3d:83:c6:66:11:73:51:a0:07:68:ff:00:84:fe:0a:
d1:a3:72:36:b5:a5:70:aa:f5:4a:9e:20:ad:29:67:79:f3:5c:
d2:5f:e0:31:8a:a2:8f:80:80:a4:56:c2:d8:53:77:af:ee:20:
2e:a8:87:d7:ca:65:bb:68:d5:ad:c6:8d:3f:0c:66:1e:42:75:
67:61:4d:1e:be:58:c8:6f:2f:96:a3:b3:ec:85:32:c8:26:ff:
1c:88:49:10:37:20:1b:f3:8d:6f:4c:aa:38:8a:42:3c:bb:a7:
c1:43:24:35:4a:4f:9f:86:bd:cc:24:f3:f3:14:47:82:1f:ad:
92:74:ee:47:c7:4c:95:7a:58:24:5b:fb:4a:78:22:5e:ab:93:
09:2b:bb:4e:4d:cd:15:3b:d4:ed:6a:48:70:75:9a:c9:87:84:
b3:75:83:29:16:24:a6:e2:8f:54:8d:7c:8b:ab:0c:8e:61:e6:
5e:34:f7:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:32 2025 by rpki-client