Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/da4aU-AZtoF8FNnvGdyCVtx9zuw.roa
File: da4aU-AZtoF8FNnvGdyCVtx9zuw.roa (raw, json)
Hash identifier: PDwo5AH4n8HZvCnAaABdT/+t4/EnWAQF9HBDBAeFEtg=
Subject key identifier: 75:AE:1A:53:E0:19:B6:81:7C:14:D9:EF:19:DC:82:56:DC:7D:CE:EC
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197316C1C1946D396022290742DE629C96D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/da4aU-AZtoF8FNnvGdyCVtx9zuw.roa
Signing time: Mon 02 Jun 2025 16:14:18 +0000
ROA not before: Mon 02 Jun 2025 16:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Jun 2025 17:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:6c:1c:19:46:d3:96:02:22:90:74:2d:e6:29:c9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 2 16:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75ae1a53e019b6817c14d9ef19dc8256dc7dceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:05:c4:50:b6:f3:d1:cb:f4:ba:b1:cf:28:
22:2f:24:77:ad:6b:23:d6:1d:56:5d:d7:91:28:41:
ee:c9:ae:18:78:99:d3:7a:56:f4:70:91:87:7e:f0:
63:b0:77:18:16:8a:29:cf:4f:22:e6:e5:66:b9:52:
9e:ec:6c:fb:62:cf:ef:6a:c0:53:71:d6:92:8a:b5:
9c:0f:fb:02:8e:e5:7f:e0:91:c4:7b:ef:8e:9d:8c:
15:99:89:a3:c6:d6:5d:fe:2f:1c:3d:e8:0d:be:1c:
dd:aa:23:68:de:6b:27:3d:84:c9:d9:8d:ee:24:d3:
dd:14:03:c9:cb:b3:15:8b:c7:94:b6:ba:31:3c:01:
f0:00:a9:5d:5c:ea:90:6f:be:34:26:0b:60:3f:a8:
8a:be:3c:19:60:e1:5a:19:30:83:d6:e1:be:7b:ec:
67:c9:e4:c4:7c:f2:fd:8c:8d:9f:e6:a3:e1:75:93:
03:34:89:48:8c:6d:04:24:01:f4:96:3d:f8:57:51:
41:fc:c4:a9:34:ae:85:27:cf:2d:2c:12:bf:4b:88:
8d:60:cd:14:5d:20:57:cc:29:20:b3:f9:07:8e:e9:
7a:93:59:83:89:c3:8f:3e:ed:b6:d5:d3:0e:0b:4f:
0d:30:e0:0c:d9:1b:e5:0a:1d:82:c5:18:bb:c8:3c:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:1A:53:E0:19:B6:81:7C:14:D9:EF:19:DC:82:56:DC:7D:CE:EC
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/da4aU-AZtoF8FNnvGdyCVtx9zuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
6f:42:25:86:82:e5:7b:b3:ad:4e:32:9f:3f:40:4f:dd:78:76:
f2:38:98:ef:2b:fa:f3:20:75:3b:5a:0f:03:5a:41:4b:26:20:
1a:17:5e:b0:34:eb:bd:20:16:a4:34:d4:12:d6:1d:ed:47:cb:
87:35:9e:b2:44:78:75:87:be:03:7f:75:26:82:e1:e3:a6:6a:
3a:32:ff:43:a8:ea:d0:fc:47:e7:60:1a:7e:91:88:5c:00:0f:
af:0a:06:6a:26:12:57:41:25:bb:96:8e:df:00:c9:c8:c1:0c:
d0:be:58:b8:fd:02:93:ab:03:cf:b9:f8:50:f7:23:9f:b8:11:
fa:f8:05:05:a0:7a:6e:7a:5c:68:bc:5f:fb:b6:20:bc:b8:94:
fe:ba:54:7e:4f:bb:da:69:7a:59:69:b2:bf:7c:aa:ed:b4:c6:
06:dc:3b:f5:aa:82:42:7f:14:f0:32:23:97:d3:17:97:09:94:
91:f1:32:e5:38:5c:12:1b:4c:ec:44:2c:b7:01:36:c8:18:9a:
f5:bf:e9:6f:68:25:b5:58:9e:76:1a:79:df:ba:76:14:87:ee:
c0:47:3d:87:fc:df:73:8b:42:da:87:99:a7:e7:24:bb:b3:22:
fb:f7:81:c9:5d:08:6a:24:71:8f:37:8f:1e:1c:63:af:32:03:
46:a2:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:31 2025 by rpki-client