Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/e-XFKn38WMjNSdg8M__fGNFl2fs.roa
File: e-XFKn38WMjNSdg8M__fGNFl2fs.roa (raw, json)
Hash identifier: FmGO0/BpcLy+ceqXwkwvlIRFsWcv8fX4WdNGbEE1eso=
Subject key identifier: 7B:E5:C5:2A:7D:FC:58:C8:CD:49:D8:3C:33:FF:DF:18:D1:65:D9:FB
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F69F9225F30A2B4F1B920C2D8D8A9A1A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/e-XFKn38WMjNSdg8M__fGNFl2fs.roa
Signing time: Thu 22 May 2025 06:12:54 +0000
ROA not before: Thu 22 May 2025 06:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 07:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:9f:92:25:f3:0a:2b:4f:1b:92:0c:2d:8d:8a:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 06:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be5c52a7dfc58c8cd49d83c33ffdf18d165d9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:7e:51:6a:d6:36:ae:62:e8:17:41:e1:60:
55:c0:45:e8:fb:a3:15:cb:54:b0:d3:59:57:29:3c:
c7:87:65:59:1f:9e:1e:67:eb:17:ad:9d:1e:bb:92:
e9:bd:f7:c4:99:d3:9b:00:dc:59:bb:b4:0f:a0:0f:
92:0a:c6:7d:55:b2:6d:bc:28:60:b6:f2:7f:d6:fe:
af:31:59:80:0f:e6:9d:23:08:c5:31:03:c0:02:e3:
ec:ad:e9:52:97:51:94:f3:7b:f9:3e:0f:d0:a1:31:
05:f2:c5:e7:75:43:68:85:8a:8a:32:fb:32:6f:33:
e3:fd:4a:84:24:f3:40:d6:f2:bf:f5:f8:79:76:46:
aa:fc:b9:32:59:19:ee:e0:4f:6d:8b:04:33:18:71:
2c:3e:8c:51:36:74:80:fb:08:78:c7:a9:4f:57:f8:
e4:f6:9c:df:d9:5d:30:43:b0:ff:28:16:4f:91:90:
44:ec:bc:22:f5:c8:7c:3b:03:df:fb:28:90:9e:06:
32:22:50:12:d4:45:f2:95:e6:9a:a9:f5:49:60:32:
65:d2:47:b0:fa:3c:83:19:78:b3:32:3f:7f:bf:2c:
13:18:01:a2:1b:63:02:ac:fe:27:6f:23:fe:d1:ed:
bf:22:5c:7e:99:73:84:29:09:ca:1a:1a:4a:73:56:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:C5:2A:7D:FC:58:C8:CD:49:D8:3C:33:FF:DF:18:D1:65:D9:FB
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/e-XFKn38WMjNSdg8M__fGNFl2fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
ae:51:25:12:4b:09:c2:4f:37:41:e6:91:be:56:c8:89:6f:20:
25:a6:f5:f8:9a:b8:9e:25:bf:fd:e6:a5:3d:b9:a1:18:7d:7b:
fa:8b:4b:d4:3a:9a:c2:84:44:db:9f:ca:e4:1e:61:54:46:49:
25:43:7c:f0:7f:2d:7a:b2:34:c8:d7:f1:89:e4:b6:92:b4:b2:
b6:94:00:92:40:89:d7:56:30:e1:c0:62:a0:d0:15:99:eb:35:
b0:d2:c8:b5:dc:7f:6b:ef:a1:7a:54:c2:f1:98:05:4a:ff:91:
10:96:c6:f1:ea:b3:7d:59:3a:18:58:a3:f8:1d:89:0a:80:2b:
34:d6:35:6a:eb:8f:50:eb:96:a2:cd:ca:78:dc:3d:62:55:48:
49:12:a6:c9:13:fc:16:fc:9b:30:4c:17:b7:8c:d5:46:5f:a6:
62:56:1a:a2:76:73:90:2a:ad:0b:45:a7:f5:a7:7a:a0:21:e8:
0f:4b:98:85:80:d3:fd:bb:0c:b6:d5:5c:29:78:31:ac:6a:86:
56:a1:52:36:3e:8f:19:d1:ff:3b:76:a5:fa:be:c5:a2:9d:87:
1c:c7:53:04:34:95:4e:1f:7e:e3:98:48:1e:ed:24:34:a9:5b:
a4:3a:a4:d3:4b:d6:c7:50:c8:84:6f:df:f1:5c:5d:2e:51:99:
6e:1e:31:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:33 2025 by rpki-client