Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/_B6IOHybETfsV6rlkU8U0BXjIXQ.roa
File: _B6IOHybETfsV6rlkU8U0BXjIXQ.roa (raw, json)
Hash identifier: ShxHtvDtSNatzqDtH6hxI5CTGdo6wJ5znxiJgnxdebs=
Subject key identifier: FC:1E:88:38:7C:9B:11:37:EC:57:AA:E5:91:4F:14:D0:15:E3:21:74
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019714731254EA1422014A775A386690683A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/_B6IOHybETfsV6rlkU8U0BXjIXQ.roa
Signing time: Wed 28 May 2025 01:12:54 +0000
ROA not before: Wed 28 May 2025 01:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 28 May 2025 02:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:14:73:12:54:ea:14:22:01:4a:77:5a:38:66:90:68:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 28 01:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc1e88387c9b1137ec57aae5914f14d015e32174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:ec:67:37:76:a1:45:4c:7e:18:ed:89:6b:
04:20:f2:5c:35:a2:fb:cc:25:6a:cb:00:5e:33:95:
0c:03:27:fb:8a:b3:a2:03:49:1e:12:f8:3b:5a:18:
78:c2:24:cd:33:ba:b1:f7:77:80:58:4d:90:5f:b6:
67:8f:bf:64:62:a9:9e:a2:40:10:09:72:85:a6:5c:
fa:23:26:a7:73:2b:62:ff:3a:34:12:db:27:41:45:
ed:f5:6c:23:eb:7f:7f:f4:21:5d:4f:c0:63:c2:dd:
99:f7:1b:be:2e:7a:3d:ae:24:11:55:f2:ca:39:4c:
99:87:59:b9:db:b5:ef:2c:2d:87:c3:e9:86:99:a5:
35:4f:88:61:d7:66:8c:b8:aa:17:21:c6:6e:9e:48:
be:e2:17:53:c0:71:a9:16:7f:64:f1:2e:45:5f:b2:
db:93:9b:82:37:0e:a2:4e:a2:bc:42:35:92:c6:2d:
43:aa:4e:9b:4f:34:f5:c5:a5:78:1a:38:61:54:31:
fa:4a:52:59:27:af:ee:52:f0:75:53:86:0c:ac:a2:
a4:66:27:8d:3c:d0:09:cd:89:71:9d:b7:ce:21:e9:
91:08:12:a6:b6:35:86:76:2f:53:69:91:a7:ae:27:
7b:b7:7a:12:85:30:b0:24:39:d4:b3:66:15:ec:fb:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:88:38:7C:9B:11:37:EC:57:AA:E5:91:4F:14:D0:15:E3:21:74
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/_B6IOHybETfsV6rlkU8U0BXjIXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
Signature Algorithm: sha256WithRSAEncryption
bd:5d:65:40:ac:b1:03:e9:ed:bb:c7:2a:bf:6c:27:52:5c:24:
c4:90:40:91:66:83:73:cf:e3:19:a6:61:d0:45:46:0a:01:ac:
2a:44:3c:4f:b8:41:8c:f0:26:32:28:78:59:5e:9d:99:39:10:
9c:15:36:68:14:7a:16:96:f8:a1:a3:83:39:c8:d8:b6:28:d4:
bf:23:77:b3:c4:b8:b5:e6:55:4d:49:36:8c:78:f4:07:a3:2c:
a9:10:2f:12:73:91:b7:4b:c8:5a:3d:4b:1e:6c:ec:82:71:3e:
54:23:ad:02:76:d1:28:eb:5d:b2:0d:2d:b3:f3:ab:a7:61:42:
36:3a:f9:7b:7c:b8:cd:51:f8:d1:61:da:69:07:8a:64:29:75:
01:22:96:12:c6:9a:71:89:be:54:82:a4:55:f9:e6:41:e9:f0:
25:9f:d3:c7:c0:2a:bf:80:5c:8d:17:b7:ee:3c:bb:05:75:89:
cc:55:3e:e3:37:2d:09:da:44:d2:d3:01:c8:7e:0d:cb:28:fb:
71:13:02:35:84:67:54:52:b2:95:64:e5:1d:55:c0:23:d3:3e:
6b:c3:07:b6:32:76:30:a3:b1:f7:71:d1:5a:b7:84:52:da:52:
eb:11:a3:ee:da:fa:16:33:68:0d:38:1f:f8:73:13:51:67:cb:
c7:cc:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:49:35 2025 by rpki-client