Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eUFG0UzFk6yQukkrZWcHJUOaWn8.roa
File: eUFG0UzFk6yQukkrZWcHJUOaWn8.roa (raw, json)
Hash identifier: jzG2u6Z5O5eyH3ZDggEvKfv8GpoRuF/wZlwhM7UZIws=
Subject key identifier: 79:41:46:D1:4C:C5:93:AC:90:BA:49:2B:65:67:07:25:43:9A:5A:7F
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019706816CE6F59F8DE8DA5FEA3BB459C953
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eUFG0UzFk6yQukkrZWcHJUOaWn8.roa
Signing time: Sun 25 May 2025 08:13:54 +0000
ROA not before: Sun 25 May 2025 08:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 09:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:81:6c:e6:f5:9f:8d:e8:da:5f:ea:3b:b4:59:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 08:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=794146d14cc593ac90ba492b65670725439a5a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:eb:e4:ff:43:03:c5:31:33:cd:f1:f1:10:
25:3f:0a:9a:1a:7b:1d:16:c0:6e:58:d7:e6:99:e6:
59:2c:ee:9e:df:19:59:c1:ea:5c:2a:2f:9b:17:bf:
74:2e:07:2e:11:91:9e:d0:90:3a:97:b6:71:b7:bf:
65:cb:13:42:b8:ce:88:7f:20:cf:c7:c3:51:b0:d3:
63:9d:92:f6:49:a6:2e:5d:d8:43:da:5f:a3:de:19:
de:7c:8b:10:24:6b:50:b9:96:a1:84:16:73:c8:d0:
ce:31:f4:70:10:5e:29:28:15:f9:b4:a4:e2:6c:05:
87:7f:6d:0b:fe:33:bf:11:9b:10:42:3d:d6:60:2a:
52:8d:35:41:f2:9e:df:1f:86:1e:17:1a:e0:d8:f3:
46:ab:0f:31:39:91:20:08:e9:47:ea:ac:dd:c5:73:
99:a9:6d:f7:87:45:d9:78:a8:5d:49:cd:47:fb:a0:
69:22:d5:a2:83:14:cc:4d:a8:fe:54:3d:c5:93:66:
36:ce:31:f4:66:4c:c5:63:1e:43:00:d6:8e:7b:54:
da:1d:d3:89:aa:f8:05:40:28:1a:92:8e:fc:34:9a:
f4:2a:d4:9f:4c:46:0c:b2:fa:57:6f:0e:70:8c:d4:
45:bc:83:c1:a4:a8:00:ac:54:31:71:c5:a5:33:96:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:46:D1:4C:C5:93:AC:90:BA:49:2B:65:67:07:25:43:9A:5A:7F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eUFG0UzFk6yQukkrZWcHJUOaWn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
63:ef:94:73:47:fd:1d:e4:16:6e:e6:8e:15:51:96:2b:ec:1f:
e5:27:5c:49:8f:df:e8:61:7e:c9:e8:d8:01:dd:7d:2e:86:16:
ce:42:82:70:2c:ff:f2:72:02:90:44:54:c1:17:46:74:b0:14:
d1:d4:21:ab:ea:a7:ec:aa:59:d1:81:83:39:eb:4e:99:d0:9a:
2f:ad:5b:f2:f5:1a:62:fc:1d:d2:39:52:dc:9a:17:83:43:23:
07:91:02:d5:4a:a3:ed:a7:da:68:0c:f1:72:c0:68:37:bf:a8:
2a:2d:fe:42:9d:0b:3a:ed:c8:52:c8:b6:8c:c6:4c:d0:e6:8a:
cc:25:eb:76:77:82:3a:d0:69:e3:10:66:51:da:2c:6c:99:92:
f8:dc:a0:fa:4a:f5:1b:45:82:9e:df:af:97:3b:b9:7b:12:94:
9a:c7:08:d8:14:06:be:f2:d7:a7:72:05:3b:c6:b7:f1:94:5a:
9f:cf:ec:85:59:df:3f:fc:88:19:5b:13:06:b4:d9:d4:cb:73:
08:32:a3:e1:26:d9:2f:fe:3a:b1:92:1a:af:28:26:76:fb:eb:
5b:46:bf:e5:7c:25:54:6f:dd:52:9b:b2:aa:98:52:95:b4:33:
58:31:60:17:ad:3c:18:51:e6:95:22:05:ee:4c:3e:85:02:a4:
ea:2a:c5:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:15 2025 by rpki-client