Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZPcuqj0F4t3MqqzhcYIbwd3-Qw8.roa
File: ZPcuqj0F4t3MqqzhcYIbwd3-Qw8.roa (raw, json)
Hash identifier: Y/0Yz8A1rh+nCnfBQJqQoQsEwYz3GtQeKDC443vdu3k=
Subject key identifier: 64:F7:2E:AA:3D:05:E2:DD:CC:AA:AC:E1:71:82:1B:C1:DD:FE:43:0F
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197132227BBEE8414C0705E6BDACE77414F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZPcuqj0F4t3MqqzhcYIbwd3-Qw8.roa
Signing time: Tue 27 May 2025 19:04:54 +0000
ROA not before: Tue 27 May 2025 19:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:1321:8e3a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 19:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:13:22:27:bb:ee:84:14:c0:70:5e:6b:da:ce:77:41:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 19:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64f72eaa3d05e2ddccaaace171821bc1ddfe430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:0e:fb:5f:d3:45:9c:76:af:11:84:ec:3f:
25:3e:c4:5d:8c:4d:91:63:37:69:de:a2:fe:88:8b:
2e:47:7e:99:a4:ab:b0:c8:dc:47:10:d2:f5:1d:b2:
28:4a:0a:43:c9:70:d9:30:c8:8f:e7:d1:15:59:58:
13:80:b0:ec:a8:82:14:2b:e9:d8:98:fe:10:88:9c:
49:85:b4:14:98:e4:3c:6c:71:57:e6:9a:24:b8:98:
0d:b6:45:99:02:37:77:04:0d:d8:8b:9c:d5:eb:23:
6b:6b:fd:49:a7:16:b9:d5:58:ea:d0:08:d5:29:b5:
cb:7d:88:34:bc:1f:cc:cf:ee:44:0d:49:0e:94:8f:
2e:35:43:ba:6f:ad:19:7a:ed:bc:24:73:c3:27:17:
92:9a:8f:60:80:5d:ea:be:5d:3a:f8:5c:39:d5:6d:
9f:7c:3a:c6:f2:10:8d:84:bb:57:36:3b:96:b1:aa:
34:3c:fe:2d:9a:03:6c:62:2c:ce:3a:8c:76:99:74:
ab:d0:04:ed:6b:5e:f7:b6:d4:ff:3a:fa:66:2b:89:
08:9b:4a:b5:41:e7:67:73:0c:59:4e:a7:97:98:b4:
08:02:9d:24:86:60:19:92:ab:42:76:4d:3d:86:9b:
4a:85:1d:38:94:0b:b8:fb:23:8f:b0:b6:c6:50:aa:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F7:2E:AA:3D:05:E2:DD:CC:AA:AC:E1:71:82:1B:C1:DD:FE:43:0F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZPcuqj0F4t3MqqzhcYIbwd3-Qw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:1321:8e3a/128
Signature Algorithm: sha256WithRSAEncryption
49:76:92:9f:5a:ca:7c:b9:3c:78:da:0b:38:61:69:68:d8:3c:
30:5d:8c:36:3a:9f:a4:92:fa:bd:be:e6:9f:6f:e8:21:2e:9c:
86:b7:8b:11:a9:84:08:a8:b3:eb:a6:9e:22:59:de:d8:7f:59:
12:4d:ee:83:9c:66:96:82:e7:d0:41:10:b0:14:21:90:17:bb:
ba:f6:95:4a:1e:be:1e:26:6f:2f:8f:de:86:65:1a:81:53:e5:
40:17:1c:8d:8f:53:8d:9b:e9:43:1f:e3:45:d5:b3:c2:dc:04:
74:dc:5d:ae:61:42:51:18:6f:d0:e4:5b:4f:d0:b1:6f:98:af:
1b:8b:d1:63:25:15:a8:36:62:c3:a1:b1:87:73:38:76:0c:cd:
19:6d:12:f3:bc:bd:28:dc:8b:c5:a9:c0:7b:b2:a2:b2:7d:cf:
b4:4e:8f:5f:ea:9b:2f:a1:0c:a1:d7:0e:86:36:7c:cc:02:87:
b5:9a:2f:0d:13:18:44:ce:79:f3:f4:49:2a:ae:f1:16:83:af:
3f:5c:e4:e7:79:c5:a1:19:03:8a:23:6d:23:9f:f8:ae:94:7c:
df:71:86:3f:f4:d3:90:a1:cc:ad:c2:56:a6:fd:a3:a8:9d:61:
20:88:bb:77:72:fb:7a:b3:e4:e0:7f:44:b3:f4:4e:62:1b:55:
62:69:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:37 2025 by rpki-client