Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Xli07bjuiHibddk2fO2wPX5mm6I.roa
File: Xli07bjuiHibddk2fO2wPX5mm6I.roa (raw, json)
Hash identifier: qHwQAiqAgj/0xJUqNmp6pINoRmVDuFRpiLaKV6QUeYw=
Subject key identifier: 5E:58:B4:ED:B8:EE:88:78:9B:75:D9:36:7C:ED:B0:3D:7E:66:9B:A2
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019744F10DAE23EA859B50C6FA781CBD8613
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Xli07bjuiHibddk2fO2wPX5mm6I.roa
Signing time: Fri 06 Jun 2025 11:12:17 +0000
ROA not before: Fri 06 Jun 2025 11:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 06 Jun 2025 12:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:f1:0d:ae:23:ea:85:9b:50:c6:fa:78:1c:bd:86:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 6 11:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e58b4edb8ee88789b75d9367cedb03d7e669ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:9b:72:e3:07:17:ea:ee:af:3d:83:40:45:
a2:69:79:e3:4b:93:93:3f:3e:ae:b0:bb:de:de:b0:
1b:00:4f:7a:b6:a2:b3:b7:50:a0:d3:24:12:ae:cb:
49:45:b4:34:4f:d9:ae:0d:d0:41:f1:cd:9c:7b:d5:
ea:42:ce:bb:5d:4d:20:d7:b9:44:62:c0:c4:74:46:
53:8a:2c:15:d8:f6:38:97:89:84:60:4a:21:9b:64:
ad:37:64:7d:d1:e1:65:6e:64:9c:f6:ed:87:7d:69:
06:3c:e3:29:3e:0b:50:51:24:37:c4:91:37:15:93:
a1:55:c5:1c:01:d8:b2:c8:87:34:a3:a1:6d:fb:98:
cf:e7:b7:2e:e6:2e:ed:bb:79:d1:4f:f9:ce:b1:f3:
5c:69:de:a2:44:27:01:30:06:09:f3:85:31:07:55:
67:44:f3:e5:f1:05:54:9c:d9:79:2b:e3:4b:fb:6d:
37:b9:c9:ee:be:bd:d6:09:2e:65:15:9b:78:ac:2e:
75:b3:fc:b1:09:e3:d5:6c:75:43:9d:0d:64:0a:94:
9e:f6:10:d3:7c:2e:e0:84:72:bf:a1:c0:ac:0d:fb:
0d:01:38:a9:45:06:a3:8f:7f:32:8e:45:f3:62:61:
9d:67:89:f2:c6:53:74:8e:3f:7e:56:fc:10:e2:b5:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:B4:ED:B8:EE:88:78:9B:75:D9:36:7C:ED:B0:3D:7E:66:9B:A2
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Xli07bjuiHibddk2fO2wPX5mm6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
04:11:76:fe:32:8e:71:79:41:5d:5f:6f:70:8c:02:24:db:de:
cf:b7:61:7e:86:cd:63:c0:0c:a8:9c:78:71:ba:13:17:99:9f:
11:21:9a:ce:c0:fe:1c:64:82:c2:2e:cb:0b:9a:3f:75:00:47:
ca:76:28:aa:a8:b4:df:7b:1b:df:53:77:67:8b:50:64:67:c2:
61:ac:92:c5:56:ad:f6:5a:31:6b:ec:54:66:8d:f8:d6:8a:5b:
d1:5f:0e:1f:93:8a:4a:ab:02:2f:8f:b2:59:e2:8d:65:bb:37:
36:95:b4:f9:c0:e0:ab:ad:a3:10:10:89:47:66:e6:f8:93:75:
89:cf:dc:08:aa:59:16:c1:90:42:3b:d4:51:6b:6d:5a:ab:97:
22:cd:13:e8:e5:30:9f:45:95:25:31:4d:33:0d:17:04:2f:75:
b5:19:40:f6:f3:19:c5:46:66:72:01:09:5d:a9:a1:b1:d7:75:
2c:e7:15:10:8b:44:4e:d8:fc:a8:fe:40:87:3f:4e:d6:55:e8:
4b:a8:76:10:48:79:73:47:92:c5:9a:ca:42:81:84:3d:d2:f4:
f1:c5:9a:58:d8:e3:5a:bf:61:3b:96:18:b9:85:fc:3e:e9:f3:
fa:c3:73:39:93:11:ce:10:58:9b:84:60:6a:02:17:d8:7a:ed:
34:18:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:26:52 2025 by rpki-client