Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WePb1rjpYfv6MDAd0zyneNSfXUw.roa
File: WePb1rjpYfv6MDAd0zyneNSfXUw.roa (raw, json)
Hash identifier: zkE4mYNek3SeafGq9RtuVp6A8m8fMmAZM/w5GtwNxcY=
Subject key identifier: 59:E3:DB:D6:B8:E9:61:FB:FA:30:30:1D:D3:3C:A7:78:D4:9F:5D:4C
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197433A85E3075037272EFF9FC8E367349F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WePb1rjpYfv6MDAd0zyneNSfXUw.roa
Signing time: Fri 06 Jun 2025 03:13:18 +0000
ROA not before: Fri 06 Jun 2025 03:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 04:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:3a:85:e3:07:50:37:27:2e:ff:9f:c8:e3:67:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 03:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e3dbd6b8e961fbfa30301dd33ca778d49f5d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:b5:65:87:03:a6:9a:dc:85:5c:00:4a:8b:
9f:57:bf:68:22:a3:14:13:7e:2f:42:99:56:3f:8c:
78:f8:d4:98:9b:5a:ab:6e:52:a2:50:55:2e:68:41:
47:01:0f:ce:88:45:55:85:54:10:34:b6:12:18:1e:
00:ca:af:99:aa:5e:12:09:5d:4f:12:da:1a:4e:b7:
e9:e1:c4:fa:9b:8c:df:63:92:1f:8c:61:91:a6:c8:
99:e2:d4:0c:ad:de:ff:67:7e:c0:15:9d:42:11:f3:
09:b3:36:6e:e2:47:bc:06:d4:11:b5:e8:43:ad:c2:
78:d5:d1:9c:6a:f8:61:a2:04:ca:d4:8d:2e:42:2e:
ea:e2:a5:31:16:c7:7e:d0:5d:4d:b5:fd:33:51:0a:
a8:cb:a5:83:64:d1:b1:99:0a:40:7d:93:e6:cc:6e:
90:cc:00:5c:6f:41:18:ef:e3:9c:7a:ce:3a:8c:f2:
b7:fd:65:5a:65:2d:50:fe:d5:69:46:9a:b8:64:85:
82:63:cc:ae:0a:22:c9:c4:cc:4d:1d:7a:1c:eb:c2:
7d:6a:a9:ad:a9:3a:81:df:f7:18:87:4f:60:e4:71:
99:98:ff:fa:a2:48:1a:58:9a:4a:a3:1f:f1:f0:34:
18:de:71:69:89:49:a6:3b:31:fc:26:43:cc:ae:b6:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:DB:D6:B8:E9:61:FB:FA:30:30:1D:D3:3C:A7:78:D4:9F:5D:4C
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/WePb1rjpYfv6MDAd0zyneNSfXUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
7a:b6:fc:09:92:5d:29:86:94:fb:da:69:07:21:54:03:75:4f:
f6:3a:ac:6a:bd:eb:ee:32:af:2d:54:71:18:6d:f0:bf:74:24:
e6:c3:bc:96:9f:53:86:20:cb:b9:fe:0d:de:14:b1:f9:f3:6a:
ec:98:03:c9:36:c8:ba:d1:99:f6:c2:62:38:76:7b:9a:17:d6:
fd:99:97:02:e8:a5:27:ab:41:0d:bd:cc:24:31:78:1a:33:f0:
e0:09:41:1f:9d:fd:1b:f6:e5:e6:84:fc:b4:8d:a9:03:94:3c:
7d:0b:77:3a:f6:eb:70:91:fb:74:06:f7:36:85:c5:2f:0d:51:
c3:32:98:a3:b2:4e:26:9e:3c:a8:a5:0e:21:dc:12:43:ad:0e:
09:3f:6f:c3:9e:d7:81:28:98:21:83:b0:96:ea:b9:ba:71:19:
07:51:cd:86:b2:42:6e:2f:7b:57:9d:87:3b:49:33:64:51:3b:
91:8a:52:51:88:87:b8:d5:c4:34:fe:30:15:c9:e7:b7:a3:2c:
10:22:3a:aa:26:8f:be:7b:4e:47:d7:e7:2d:ef:4d:24:db:0e:
b5:51:c8:72:a1:82:54:20:7f:a4:a2:89:1f:8f:64:c8:ab:e0:
c3:4b:35:f5:1a:09:9d:79:05:99:e1:35:4f:dc:74:e8:3c:a2:
ba:f3:e3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:08 2025 by rpki-client