Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/XtkrtAAxtboKmDfCxsCaWSincss.roa
File: XtkrtAAxtboKmDfCxsCaWSincss.roa (raw, json)
Hash identifier: nzBqTr3PPxF/xl3edyRNhCRuO1705B8n4imrebnZhbA=
Subject key identifier: 5E:D9:2B:B4:00:31:B5:BA:0A:98:37:C2:C6:C0:9A:59:28:A7:72:CB
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970F0E74355355E404C94A0446C6024F3A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/XtkrtAAxtboKmDfCxsCaWSincss.roa
Signing time: Tue 27 May 2025 00:04:54 +0000
ROA not before: Tue 27 May 2025 00:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:f0e:38d1/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 00:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0f:0e:74:35:53:55:e4:04:c9:4a:04:46:c6:02:4f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 00:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ed92bb40031b5ba0a9837c2c6c09a5928a772cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:65:d7:6f:69:ca:68:a6:5d:46:d2:4d:75:
72:1c:d7:8a:2a:8a:4b:c0:b4:f3:59:e6:e2:b9:26:
3d:ed:60:76:45:cf:44:5d:9d:57:9e:5d:17:5d:7f:
6a:0d:a0:00:13:9a:07:04:31:d1:97:fd:36:bb:c5:
67:59:82:ad:75:a2:c8:92:ff:74:1f:82:eb:3a:95:
d1:1f:38:a0:f4:bc:b3:15:23:ee:99:ed:ad:a0:2c:
f3:be:a5:38:07:bc:22:a7:ba:28:fa:d9:d9:f3:36:
92:47:ff:c4:b5:21:c2:a2:ed:e0:df:31:45:8e:11:
db:f3:31:4b:99:55:71:ff:e7:43:90:ec:66:c2:89:
76:7f:b2:5c:2a:69:68:2d:1d:7e:e4:44:58:49:09:
9a:20:20:2f:9c:c4:d9:75:3a:82:86:2d:a6:4e:86:
4b:79:94:64:6b:55:b4:96:70:79:a8:8c:a0:46:bc:
f0:4c:ca:74:de:36:0a:6f:e8:d1:ae:f7:e4:80:6e:
20:66:60:58:f3:8a:2d:bf:29:65:c5:12:14:71:9b:
fe:87:8e:89:45:33:c5:e6:1b:84:56:7b:85:05:83:
57:27:16:d9:ce:2c:b2:da:01:af:a8:89:43:7f:4f:
61:d4:11:52:43:0e:d2:9f:cc:40:92:44:d8:21:78:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D9:2B:B4:00:31:B5:BA:0A:98:37:C2:C6:C0:9A:59:28:A7:72:CB
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/XtkrtAAxtboKmDfCxsCaWSincss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:f0e:38d1/128
Signature Algorithm: sha256WithRSAEncryption
6a:d9:74:a7:ee:8f:9f:92:1c:3a:59:71:b5:2f:7c:9f:3f:ef:
cb:00:00:ef:39:e0:95:d0:68:b0:a6:4a:26:36:0c:50:42:4b:
00:e4:d1:30:9c:89:1c:87:ab:71:76:8a:ea:18:d3:31:7e:ac:
6d:be:62:94:8a:7b:e9:0e:d8:50:ef:1e:76:61:16:4a:df:34:
2b:b5:d0:fe:de:cd:fe:96:76:2c:10:92:a5:59:55:f4:41:d5:
a6:e0:56:c9:7c:3f:32:32:07:f0:fa:17:5f:cf:75:9d:2a:b9:
78:4f:b9:c8:bb:c1:60:0f:73:8c:70:28:4b:89:1a:3d:05:75:
5e:f7:a1:23:f7:d2:f3:e6:57:ac:15:42:2d:bc:09:46:7c:55:
28:7a:3a:53:d1:e8:e6:c8:fb:1b:db:cd:2a:50:51:d2:6f:a8:
20:f1:77:74:22:75:68:c9:7f:e5:4e:fd:62:45:68:e4:32:46:
0a:df:a8:2c:72:15:b3:a2:2c:6d:cc:9e:dc:e1:e5:ff:ad:8f:
bb:54:90:9c:35:ca:7f:b8:e1:b4:d6:e4:c7:a2:38:f6:da:3a:
3f:a9:d8:f4:c6:bb:6f:9a:93:7d:cb:11:4e:eb:42:fa:24:93:
8e:d3:02:09:6c:47:bf:77:4b:95:b6:3b:fc:0c:96:75:d8:37:
e6:e1:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:22:11 2025 by rpki-client