Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/___0IvY9USErZejOpCLDF0H9Wkk.roa
File: ___0IvY9USErZejOpCLDF0H9Wkk.roa (raw, json)
Hash identifier: HeOt5w+3jS8p2gDMladmJ67GRS2Nzh6ZixS8Jsq8WZY=
Subject key identifier: FF:FF:F4:22:F6:3D:51:21:2B:65:E8:CE:A4:22:C3:17:41:FD:5A:49
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019726B042AC7B4860C990E06D358B26B673
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/___0IvY9USErZejOpCLDF0H9Wkk.roa
Signing time: Sat 31 May 2025 14:12:54 +0000
ROA not before: Sat 31 May 2025 14:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 31 May 2025 15:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:b0:42:ac:7b:48:60:c9:90:e0:6d:35:8b:26:b6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 31 14:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fffff422f63d51212b65e8cea422c31741fd5a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:c0:e1:79:45:c9:87:fa:16:73:b2:ce:f1:
bf:1e:7d:be:48:a9:3b:42:f1:71:67:5d:fd:68:d4:
3e:3f:77:7f:fa:e1:62:0b:ff:e9:14:c8:6f:3a:3b:
e8:7c:82:9d:a1:9e:c5:1c:20:56:f5:47:3a:b0:ef:
7e:8a:59:00:6e:bd:d7:f9:b3:b6:51:53:cf:2f:bf:
e2:66:01:32:e5:f7:a8:2a:13:ba:a5:79:53:c8:c3:
69:f1:49:c1:b7:c0:1a:48:76:ee:f6:47:32:e8:43:
15:44:f3:fb:8b:a9:8f:c9:0a:fb:8a:6f:8a:33:1b:
be:9d:2d:6b:38:41:a4:30:3a:80:0b:7b:f1:8d:4a:
0c:ea:9c:00:f0:c8:10:73:f3:1a:e9:af:ff:d9:d8:
84:a2:4d:f3:de:09:18:b8:5c:9b:cf:d7:3c:aa:6c:
3e:53:3f:f7:74:ae:8d:59:b1:9d:43:12:a9:ce:a4:
6d:b4:45:fc:b3:69:eb:12:ca:29:d0:a2:e1:c4:1f:
96:e6:eb:6e:d0:82:e7:ef:86:a2:34:06:dc:40:dc:
02:47:af:52:52:73:c5:17:2c:e4:a4:03:2a:ab:01:
f0:5b:3a:74:db:61:1a:5d:7d:b9:f7:e0:db:be:b0:
82:00:c3:bf:6e:83:de:d0:c3:5b:fa:8f:1e:ef:c2:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:F4:22:F6:3D:51:21:2B:65:E8:CE:A4:22:C3:17:41:FD:5A:49
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/___0IvY9USErZejOpCLDF0H9Wkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
c2:76:f2:ea:95:10:b9:41:4d:40:dd:8f:91:49:79:f1:8c:dd:
0c:60:d6:f2:bc:df:47:1c:48:b6:37:d1:88:fa:71:1d:a1:fb:
eb:73:8c:0e:1f:90:e8:6f:4f:10:b7:bc:67:5a:82:30:bc:db:
4e:b3:df:ea:18:65:2f:6f:3f:de:ed:66:8a:49:a1:06:d4:88:
ca:6e:83:d2:55:d3:f4:fe:78:5c:65:e6:26:12:ae:91:ef:fc:
d1:4f:c0:9e:b2:66:6d:35:07:4e:bd:a8:f0:f5:1d:2d:51:57:
2f:85:22:bd:25:85:26:ee:fc:8c:b2:1f:d0:21:ab:38:e9:5b:
ab:84:2b:36:a4:14:9e:b4:cc:0e:99:52:54:22:b8:8d:41:cb:
21:7b:f1:e7:96:55:5f:6d:10:8b:c2:0a:86:96:5d:b6:9c:cf:
52:69:ae:2c:9e:79:df:62:10:d7:f9:f3:f8:87:f8:6e:9c:bf:
a2:02:e0:26:f5:2b:1a:12:b9:39:ff:7f:06:fb:a6:2b:ec:f3:
86:de:35:fd:d9:b5:25:d9:0b:a3:bb:7e:5a:04:c4:bd:42:7b:
36:cf:ca:29:6b:1c:c4:87:07:54:dd:ef:c7:dc:b5:1e:e0:f7:
0f:d1:ec:56:03:e9:a3:e1:52:ea:98:f7:15:c2:02:54:71:4b:
cc:59:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:14:45 2025 by rpki-client