Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/X-kxoo79z34KhrFc0BForG612mI.roa
File: X-kxoo79z34KhrFc0BForG612mI.roa (raw, json)
Hash identifier: 7fgPOvw4dMehpl6eeeaVFGs2JJY5g0gcyJPn9E0tILU=
Subject key identifier: 5F:E9:31:A2:8E:FD:CF:7E:0A:86:B1:5C:D0:11:68:AC:6E:B5:DA:62
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01964936CDC235AE4E794174B8B321D58C86
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/X-kxoo79z34KhrFc0BForG612mI.roa
Signing time: Fri 18 Apr 2025 14:04:10 +0000
ROA not before: Fri 18 Apr 2025 14:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:4936:c5f7/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 18 Apr 2025 14:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:36:cd:c2:35:ae:4e:79:41:74:b8:b3:21:d5:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 18 14:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fe931a28efdcf7e0a86b15cd01168ac6eb5da62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:73:0c:68:7c:35:ce:31:60:34:b8:27:68:
a1:f5:ab:00:7f:6c:95:71:ea:e3:27:e6:bf:5a:f9:
be:36:29:5f:ae:c0:2e:34:60:51:6d:10:17:2e:df:
8e:1b:78:4b:cd:1a:8a:44:aa:29:3c:d8:94:ab:41:
e6:6a:90:b1:ed:07:54:23:8d:fb:a8:86:09:4f:b0:
6f:51:ec:00:28:1a:e8:ac:a4:4c:9f:66:f3:03:05:
cb:82:62:89:02:45:14:59:92:89:ac:6a:bd:fb:2e:
1f:85:b5:fc:0c:cb:52:03:5d:a8:5a:d1:2c:16:5c:
f4:e0:13:83:a1:90:e5:b3:67:2d:b2:7f:1d:e2:b5:
c0:c0:e2:ee:f6:80:80:73:9f:22:c4:11:fa:c9:f1:
ef:f5:e4:ab:62:32:4c:07:ed:45:80:fb:b2:17:8f:
7d:c0:84:9c:fb:e8:fe:a5:26:f3:e4:52:6e:b5:9a:
ed:6c:bf:14:0f:26:e5:d0:70:a9:cb:6e:aa:16:69:
ba:7d:13:99:62:57:7f:43:05:df:7f:f7:ca:d5:80:
0a:6d:7a:5b:a3:bc:05:d2:c1:c0:36:c9:6e:ce:c4:
7f:88:6d:15:5a:36:4b:0f:2d:bc:eb:01:b7:9f:4a:
78:7e:ed:14:37:5d:47:d9:9c:3b:7a:8e:eb:04:b4:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E9:31:A2:8E:FD:CF:7E:0A:86:B1:5C:D0:11:68:AC:6E:B5:DA:62
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/X-kxoo79z34KhrFc0BForG612mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:4936:c5f7/128
Signature Algorithm: sha256WithRSAEncryption
8f:7a:26:23:47:8e:91:47:b9:dc:49:76:c0:76:b6:8f:d9:b4:
10:68:1d:55:d9:c8:9d:ef:16:4b:50:92:b7:46:8d:63:3f:2a:
f8:eb:54:d9:f3:6a:02:c7:e0:72:16:f5:5c:d7:a1:59:e8:bd:
ff:92:6d:b3:93:da:5b:c8:fd:87:cf:61:5d:df:1b:86:8f:3a:
dd:6d:1e:97:93:9b:35:f4:ee:69:2a:99:a0:2c:12:eb:88:c8:
85:09:38:e4:22:be:05:91:3c:bf:68:66:a1:a3:2e:de:bc:39:
33:d8:c5:f3:82:44:e8:fb:10:27:85:37:93:4d:d7:67:ce:5e:
33:9e:95:71:ec:71:14:7a:43:00:aa:e5:75:0b:d2:c7:e8:5c:
ee:e6:a5:98:98:f9:31:f1:fb:6a:2e:42:eb:35:87:45:a9:e2:
ce:e5:63:01:26:26:50:d3:3b:69:45:87:6d:2f:d8:25:aa:71:
d2:1c:4a:d4:1b:bd:da:94:00:1c:d2:b0:c3:c4:ea:47:a9:dd:
cc:5a:4e:f6:df:5e:ff:30:c0:71:a9:40:e9:74:82:03:32:74:
4d:89:e5:75:02:5a:e0:00:d6:45:61:d5:cf:36:d1:6f:7a:ea:
1e:af:71:0a:9d:63:46:87:41:eb:bf:35:16:e5:8f:25:98:3d:
e2:39:38:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:56 2025 by rpki-client