Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eDBWq4HK-M4bqLYYLvO_aGuRznA.roa
File: eDBWq4HK-M4bqLYYLvO_aGuRznA.roa (raw, json)
Hash identifier: nNC+nk+oimE0rGcsqVNu7xHJhDTqE/4dB5weiMWZz08=
Subject key identifier: 78:30:56:AB:81:CA:F8:CE:1B:A8:B6:18:2E:F3:BF:68:6B:91:CE:70
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019730914C873C2BFD0991B2372A71A97C5C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eDBWq4HK-M4bqLYYLvO_aGuRznA.roa
Signing time: Mon 02 Jun 2025 12:15:18 +0000
ROA not before: Mon 02 Jun 2025 12:15:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Jun 2025 13:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:91:4c:87:3c:2b:fd:09:91:b2:37:2a:71:a9:7c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 2 12:15:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=783056ab81caf8ce1ba8b6182ef3bf686b91ce70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:31:41:3a:4c:6b:25:a2:d0:7e:9f:1a:97:
cc:1e:65:c4:33:24:56:2b:e4:d7:b7:ba:a8:e0:85:
73:38:1d:27:d5:17:16:20:82:98:06:35:fe:fe:b2:
de:08:8b:d8:db:b7:f8:35:0a:f7:0e:ba:58:84:0b:
0c:f3:99:2c:55:60:1a:3e:6c:e3:fb:d2:8c:2a:f8:
e6:ad:11:32:a3:ca:d3:5f:49:35:67:e2:18:3c:e4:
1b:a5:5a:6a:c0:a9:63:04:e7:7b:a5:f5:44:94:1b:
64:3e:e7:ca:c3:07:65:7d:2a:ab:4f:6c:1b:04:33:
ce:d9:7a:b2:f2:f7:7d:cd:7a:be:f4:3f:0e:ef:84:
95:58:36:3a:1d:83:06:8c:4d:d0:a2:24:61:2a:34:
1b:9d:9c:d7:a1:c6:db:74:49:de:4b:b4:69:78:81:
da:fc:2c:6e:81:21:82:8c:22:33:b6:0d:53:4c:f6:
ed:f1:ac:25:57:08:e8:a2:0c:24:ac:9d:93:65:95:
cd:43:9a:7b:13:87:57:26:0a:1a:6c:18:8f:f6:ee:
33:7f:80:26:a4:e5:6f:f5:7d:b1:f2:39:8b:2e:6a:
79:75:c9:09:85:4e:ee:4b:a6:01:f5:6f:54:59:92:
19:a1:77:2d:8a:10:69:5f:e3:17:58:f5:5c:0a:83:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:30:56:AB:81:CA:F8:CE:1B:A8:B6:18:2E:F3:BF:68:6B:91:CE:70
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eDBWq4HK-M4bqLYYLvO_aGuRznA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
37:10:eb:ad:fd:a4:3e:67:f6:c1:8d:b6:0b:6d:32:00:17:11:
de:04:ae:4a:16:29:00:34:f6:1f:97:98:73:fa:99:0b:c7:03:
96:b1:ad:b9:3d:e2:44:f1:48:b4:51:aa:79:ab:f1:17:26:d5:
74:cd:f4:3b:8a:e5:c3:c1:0a:e2:c4:bb:fc:33:84:a9:0f:6c:
cd:e8:5d:ba:21:01:34:52:c9:6a:22:ce:12:ea:b7:92:4b:2b:
23:26:e8:d9:63:99:22:a3:30:46:ce:01:33:43:2f:ea:a0:a4:
4c:ee:fa:46:e6:78:f1:77:28:ac:05:46:f3:b8:a4:33:f9:29:
b9:84:92:b9:2b:b3:76:ae:d8:f9:c3:47:1b:37:55:8f:ee:91:
f4:11:c2:a4:3e:a7:b9:10:e3:04:68:41:8c:25:28:62:47:b1:
24:0e:96:b6:ce:5c:23:0f:02:7f:62:02:8c:36:f6:ba:f3:b2:
22:82:94:7b:97:c0:1e:f0:75:48:13:e5:bf:d2:ba:0c:f3:9d:
47:42:1d:7a:22:ef:bf:fe:a5:2f:db:72:16:21:7c:31:fa:b6:
db:5a:e0:e6:2c:2e:e6:d1:be:4d:a0:ed:9c:53:f0:f4:7d:af:
ec:54:69:67:4e:b7:53:c1:56:3d:ec:bf:66:75:80:02:ac:ed:
5d:49:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:57:14 2025 by rpki-client