Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dUzBjItW0iA03YYtj8KWblPEtnk.roa
File: dUzBjItW0iA03YYtj8KWblPEtnk.roa (raw, json)
Hash identifier: T31T1S9HOJMaCIAI706AJUxNDqSYSr67ap2GLdQHSvY=
Subject key identifier: 75:4C:C1:8C:8B:56:D2:20:34:DD:86:2D:8F:C2:96:6E:53:C4:B6:79
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196C9BEDC6750540878DCF7DB530B175E65
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dUzBjItW0iA03YYtj8KWblPEtnk.roa
Signing time: Tue 13 May 2025 13:04:10 +0000
ROA not before: Tue 13 May 2025 13:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:c9be:a685/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 13 May 2025 13:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:be:dc:67:50:54:08:78:dc:f7:db:53:0b:17:5e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 13 13:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=754cc18c8b56d22034dd862d8fc2966e53c4b679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:2b:b6:39:cc:e4:a0:5e:58:70:9d:7a:67:
40:2a:a1:0d:b3:ed:11:bf:9f:36:49:58:a9:7d:ad:
ab:a7:6d:68:50:9a:56:19:02:df:80:63:9a:13:d7:
b8:b8:58:7c:6c:06:a2:92:4d:3c:87:c8:8b:bc:6e:
42:1e:6f:70:4f:2f:b4:7b:f7:67:ff:49:2c:18:3c:
93:66:ca:1d:43:60:ad:fa:5b:f7:d8:63:94:94:12:
33:50:b3:02:86:5a:56:51:11:31:93:52:46:45:c7:
cc:8d:57:69:ab:d9:a6:34:2f:6c:ce:75:33:61:45:
39:7f:73:c7:3f:c0:82:90:1d:13:84:0e:b6:e5:19:
c5:c7:da:05:0e:bf:1b:a6:5b:a8:1c:86:62:88:16:
a0:ac:dc:ac:4a:98:58:61:25:c3:4c:99:76:bc:e7:
94:f8:cd:d1:6d:cd:02:e6:d3:e0:ec:09:02:1e:07:
2c:54:22:1e:4b:80:b8:0f:74:27:b0:cc:d9:5d:ae:
e8:5a:58:f9:db:76:e1:cb:7e:65:02:75:b6:d3:40:
c4:5e:04:b7:46:b9:4d:53:bb:54:29:2b:d8:03:e6:
32:28:b9:c9:26:d9:1a:cc:a7:6c:ab:a1:0c:83:73:
c2:49:c3:0a:7b:51:08:8f:7c:ac:06:56:28:03:18:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4C:C1:8C:8B:56:D2:20:34:DD:86:2D:8F:C2:96:6E:53:C4:B6:79
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/dUzBjItW0iA03YYtj8KWblPEtnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:c9be:a685/128
Signature Algorithm: sha256WithRSAEncryption
b0:2f:5d:1a:9e:83:65:b5:9c:69:35:b8:de:e5:70:88:d4:c9:
cb:62:93:93:b1:22:dc:73:18:b0:df:73:27:9a:2a:91:20:0d:
c4:90:b4:1d:af:a7:85:cf:ae:c4:42:eb:09:8f:19:99:ba:ef:
18:42:d5:c9:52:6e:22:e3:e5:66:c1:dd:6a:d1:17:02:0d:ce:
3e:7d:b3:9a:8d:e9:97:45:35:32:a4:a9:08:1a:d4:31:c7:95:
dd:7f:ba:79:10:7a:91:3e:66:71:22:f4:72:1c:f0:ab:35:62:
6d:6f:85:ee:b1:66:fd:5b:88:f2:74:d1:43:0e:c7:de:f8:0d:
7e:e7:96:08:8f:11:35:24:20:ca:d8:cc:22:b3:dd:f2:f6:1a:
b1:fd:e8:34:0b:5b:e1:bf:34:87:e9:bf:da:8d:45:ed:95:48:
b7:67:94:7f:85:5a:e4:eb:fd:61:f9:77:4e:fc:a4:fa:a3:bb:
53:b2:e5:a4:bf:45:77:49:8d:92:0d:ae:67:01:78:fc:23:6e:
c2:03:bf:be:f8:e4:6d:c0:b8:d3:18:c7:e6:96:83:4f:2e:28:
4b:a8:d5:37:60:22:a6:77:0c:72:08:fc:a8:45:04:1f:4d:fd:
5b:51:d1:7f:15:26:05:e1:05:3f:3c:96:18:05:8b:8b:47:c7:
37:77:3d:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:07:07 2025 by rpki-client