Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/_8UsHrFnVZE7R3Vx6pcAtS6eIcU.roa
File: _8UsHrFnVZE7R3Vx6pcAtS6eIcU.roa (raw, json)
Hash identifier: Jh5TnLvn7tKjNMpRhbAwZ+lK9XqGDy5wzuPCujmMlf0=
Subject key identifier: FF:C5:2C:1E:B1:67:55:91:3B:47:75:71:EA:97:00:B5:2E:9E:21:C5
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FA130E1C2F61B7C02BCEB8E94B94A5A8
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/_8UsHrFnVZE7R3Vx6pcAtS6eIcU.roa
Signing time: Thu 22 May 2025 22:17:54 +0000
ROA not before: Thu 22 May 2025 22:17:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 23:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fa:13:0e:1c:2f:61:b7:c0:2b:ce:b8:e9:4b:94:a5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 22:17:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffc52c1eb16755913b477571ea9700b52e9e21c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:05:13:c8:68:1d:23:98:76:70:d8:cd:e1:
7b:60:ae:7f:cf:37:29:5c:3e:d6:4c:0c:a2:96:48:
68:37:40:a4:06:0f:5d:74:3d:08:35:b5:cd:2f:db:
fe:66:bc:8c:a3:99:25:bb:1b:5d:28:2b:89:e8:c3:
a8:4a:b7:00:1f:aa:f9:81:98:0e:3c:89:39:ab:1e:
7c:bc:ee:59:9e:2e:89:ed:e3:f9:13:0c:b7:71:c9:
53:d9:e9:00:15:be:f2:4a:b4:ec:92:9c:db:06:87:
7d:27:cc:32:b2:b8:3f:95:f3:01:9d:84:f6:09:16:
1a:4f:5b:99:db:b6:37:c4:03:fe:fb:26:78:3b:ba:
e2:8c:e4:0b:05:53:11:16:c8:07:53:0d:d2:a3:5d:
4c:eb:e5:2e:49:40:d0:a2:cc:f1:b7:f8:76:62:70:
06:a5:7e:f3:36:85:3c:be:08:6d:c6:24:09:08:89:
95:c8:9a:11:3b:02:cb:af:57:4f:86:ff:40:d1:80:
f4:a6:93:98:6d:78:18:d6:cc:88:3e:60:37:18:f5:
13:1f:d1:98:0b:c8:e5:c2:3d:e8:62:ce:ea:78:93:
c5:af:34:2b:d4:51:9c:8a:77:5f:e3:34:db:3b:62:
3a:f2:6d:59:01:4f:fb:a5:da:ae:10:d0:fe:35:46:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C5:2C:1E:B1:67:55:91:3B:47:75:71:EA:97:00:B5:2E:9E:21:C5
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/_8UsHrFnVZE7R3Vx6pcAtS6eIcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
79:93:bc:64:3b:16:e9:7b:f5:b1:b2:b6:6d:be:34:14:a4:e4:
a4:8b:01:a9:7e:17:19:be:97:6f:0e:cd:09:16:1e:5a:11:17:
a5:2a:62:34:ce:29:08:0a:98:56:44:8f:b6:31:c3:bd:54:b2:
04:c2:ed:b4:6a:13:8e:44:0f:b8:9d:32:81:87:80:a1:10:70:
f7:9b:2e:11:39:64:e5:b1:4d:ad:10:cb:f4:86:68:42:d7:3c:
f4:a2:79:78:02:71:c9:57:00:ff:35:a0:6d:ad:a1:68:c8:b5:
94:0d:9c:b0:0d:80:5a:32:89:7d:51:49:3c:bc:5c:80:2d:a6:
cb:1b:6f:43:9c:08:ba:53:2e:a8:4c:74:0b:00:4a:16:ef:6b:
b4:f4:85:ea:67:97:28:9e:ff:3b:02:36:3a:3f:4d:e0:84:62:
97:f3:5f:6c:eb:9b:8d:f1:ff:4a:a8:4b:24:d1:3b:f7:6f:42:
ee:bf:e4:9e:72:1b:8a:4a:b9:de:e8:cb:7b:6a:17:7f:f3:bb:
92:a8:d5:b6:3b:9f:41:2e:c5:f7:c4:82:0b:2c:2a:28:25:6f:
42:c5:0d:17:2b:63:64:70:46:54:69:46:45:c8:69:c4:bd:f6:
88:c9:f9:54:a1:32:d1:c6:92:c7:fe:d2:45:ac:d6:99:27:a2:
dd:f1:bf:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:59 2025 by rpki-client