Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/el7AZCQHpR6hgIwItXb86FN6Wtg.roa
File: el7AZCQHpR6hgIwItXb86FN6Wtg.roa (raw, json)
Hash identifier: t4Y5DLrIXPvbVqSYO/Et0bnP685LiD3nlrNiYayxV9M=
Subject key identifier: 7A:5E:C0:64:24:07:A5:1E:A1:80:8C:08:B5:76:FC:E8:53:7A:5A:D8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01972340705CB5D47C6977C26CF436E78964
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/el7AZCQHpR6hgIwItXb86FN6Wtg.roa
Signing time: Fri 30 May 2025 22:11:55 +0000
ROA not before: Fri 30 May 2025 22:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 30 May 2025 23:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:23:40:70:5c:b5:d4:7c:69:77:c2:6c:f4:36:e7:89:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 30 22:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a5ec0642407a51ea1808c08b576fce8537a5ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:b1:97:85:41:66:fe:b0:be:88:7e:36:2d:
89:5f:b6:ec:3f:7a:1d:52:71:f8:d7:d7:7a:5d:9f:
d5:a3:a5:4d:49:25:40:6f:b9:77:6f:39:1c:ba:2b:
5c:91:82:33:21:4a:33:ea:a5:89:af:4a:1d:60:7d:
b5:c3:1c:29:83:d9:d4:44:18:83:cb:74:4b:0c:e5:
cf:39:23:a8:77:8d:15:dc:54:53:50:4c:2b:41:71:
78:97:10:cd:7c:28:46:1f:24:42:c6:61:47:cd:6e:
ad:f8:0b:47:cb:0a:98:e0:1f:27:d9:b8:7c:f6:43:
92:a6:ba:07:90:e4:ea:47:88:b5:43:25:b3:2f:b2:
b3:90:e8:b1:9e:f6:05:31:76:1f:2f:19:4d:4e:13:
f4:65:f8:fa:e5:4d:80:fd:96:6e:e8:2f:d7:89:1e:
a1:ed:a2:27:ba:0b:f9:ac:13:8f:5e:34:49:23:ad:
dc:3c:80:58:13:20:3d:2d:f3:62:70:35:92:d7:87:
2d:86:35:01:39:41:7d:b5:09:e3:e8:8a:af:63:47:
14:da:fe:75:de:a5:15:0e:fa:61:47:cb:ee:6b:17:
ab:5d:44:6a:70:ba:77:15:e5:25:f8:c9:e4:b5:db:
4d:af:70:e8:5c:75:1b:99:71:79:ce:c3:90:e9:93:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5E:C0:64:24:07:A5:1E:A1:80:8C:08:B5:76:FC:E8:53:7A:5A:D8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/el7AZCQHpR6hgIwItXb86FN6Wtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
62:28:b4:66:74:81:6f:fd:69:07:d7:23:15:b3:c4:2d:0f:64:
0a:ab:24:74:7f:ed:a1:15:73:80:80:d4:3a:9f:3b:83:47:f2:
e0:30:92:d9:7b:f2:c1:52:b3:c9:40:67:66:49:da:8a:30:52:
17:55:be:a0:54:40:a3:70:b6:70:1c:16:36:41:2d:01:11:a4:
fe:0c:0b:bf:37:f5:1b:52:6a:2c:b9:bf:3b:7f:90:84:17:4a:
7a:b2:e8:8e:05:09:40:95:13:98:4b:19:a3:dd:87:e7:b2:fe:
40:9d:d2:e5:58:ee:24:52:52:fe:ca:7d:36:09:f6:4f:2a:fb:
24:aa:7c:16:bc:3c:e3:ff:0a:96:2e:07:68:8d:75:b5:74:23:
f0:c0:cd:1f:aa:29:f4:9b:4f:79:97:2a:65:0e:03:e7:c4:64:
64:f6:2e:10:1c:3b:d7:a5:84:92:57:60:1c:0d:cc:ac:c3:68:
c8:ca:ad:78:5f:c3:04:f1:3e:cd:05:cc:06:85:90:d8:d2:3b:
34:0e:0e:0d:18:ae:55:93:83:02:fa:20:25:8f:3b:46:f4:85:
f0:91:f6:a0:26:ea:ee:af:0b:b0:51:b8:dd:c6:ef:bd:36:79:
5a:88:cb:b8:05:72:5d:eb:64:cf:73:d4:4f:b2:08:2d:26:9f:
bd:ee:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:31 2025 by rpki-client