Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZsT2-7WiNPlfkY8nTYXiGc17h1c.roa
File: ZsT2-7WiNPlfkY8nTYXiGc17h1c.roa (raw, json)
Hash identifier: veUE02epllrkOlPmwpqgHiJemrKWZT1xAIlwU6k+bhI=
Subject key identifier: 66:C4:F6:FB:B5:A2:34:F9:5F:91:8F:27:4D:85:E2:19:CD:7B:87:57
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01973A6E53390B73580C4FDB210D02F6C154
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZsT2-7WiNPlfkY8nTYXiGc17h1c.roa
Signing time: Wed 04 Jun 2025 10:13:18 +0000
ROA not before: Wed 04 Jun 2025 10:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 04 Jun 2025 11:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:6e:53:39:0b:73:58:0c:4f:db:21:0d:02:f6:c1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 4 10:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66c4f6fbb5a234f95f918f274d85e219cd7b8757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:ef:3e:f8:89:8b:fa:16:a3:0b:d9:1f:26:
d5:9c:ee:0b:46:5e:5a:56:c0:08:f3:a2:fa:0f:a8:
1c:35:b7:56:cf:74:1d:e4:c1:32:f6:47:b9:1a:d2:
cf:d8:6b:b0:ab:9e:77:48:e2:52:33:30:9e:6a:e0:
f3:62:a1:5e:84:d5:a1:f6:ca:15:03:74:d7:6c:2a:
b0:14:0e:d4:a0:8f:a2:5e:11:36:71:ce:16:e6:d0:
8c:87:4f:ab:5f:46:19:3f:e9:62:b7:6c:46:e2:fb:
84:3a:f0:ff:9d:7e:c4:2c:46:e5:dd:95:3f:17:f9:
f4:10:f6:6b:75:4e:4d:2e:ac:dc:e6:73:ce:9f:e8:
43:cb:69:72:22:e5:7f:b2:f6:1d:e6:d3:af:6f:81:
ba:9f:3c:a7:c1:52:be:c4:0a:3d:ee:ed:a0:8a:4a:
10:12:df:7a:a6:bc:f0:3f:ee:78:1f:00:28:af:53:
f4:4f:fd:95:1b:7c:bf:ff:32:84:8d:1f:90:55:73:
ec:64:c7:e4:26:42:c0:54:6e:d3:31:87:ec:c6:4c:
83:1b:53:90:7e:e0:5b:87:f1:00:f8:44:06:4b:f0:
6b:7a:8c:56:bd:a0:f8:9c:06:b5:0f:27:a6:df:42:
fe:49:36:99:d1:c1:2f:23:fa:b7:58:88:ff:07:2d:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:F6:FB:B5:A2:34:F9:5F:91:8F:27:4D:85:E2:19:CD:7B:87:57
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZsT2-7WiNPlfkY8nTYXiGc17h1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
49:52:d0:a8:e0:2c:80:1c:6f:0e:51:28:05:22:23:74:b4:09:
11:6e:90:0b:12:4e:57:3c:45:80:af:29:f9:91:90:8d:1d:ec:
c9:af:a0:93:be:65:ed:f5:ea:79:a9:b6:85:f4:d2:77:1f:77:
c8:d0:e6:99:43:35:62:0f:29:54:6e:65:a6:45:88:7c:d2:06:
f1:06:14:cf:18:19:14:a4:e7:fc:ae:5d:ad:4e:90:56:34:4e:
8f:87:20:75:ee:bd:07:0b:c2:77:9f:a2:0b:32:ee:b3:8d:d3:
a2:ad:4e:51:1d:fa:0f:10:05:e3:c4:67:86:f2:df:d5:e2:66:
97:15:0a:6d:b9:66:1e:93:06:cb:35:3c:cd:22:a7:5a:a7:b9:
4e:0c:db:d7:a5:d7:a7:f6:3e:4d:f8:5c:e8:66:ff:5c:94:ea:
e9:cf:42:87:b7:9d:6d:96:93:9e:62:f9:3c:90:c1:c3:d5:b2:
da:39:aa:47:e1:6a:49:5b:43:7b:9c:38:ee:0b:36:83:09:49:
8f:2b:43:a0:ad:95:85:da:5e:aa:95:e9:61:5d:e0:11:5e:b4:
5d:a6:89:3b:10:7e:7c:b7:1c:81:34:cf:8d:7f:aa:1d:24:b1:
fd:d7:36:9d:d4:fa:56:20:47:3e:41:e9:61:9e:b5:46:e9:bd:
b2:f5:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:48:00 2025 by rpki-client