Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eqWn8p95iMhxbqyhefJQH5nJpwY.roa
File: eqWn8p95iMhxbqyhefJQH5nJpwY.roa (raw, json)
Hash identifier: zcOzACAx/j6qxoKRy5wqn4rjOZf2o+6UgaWc6G6kDdc=
Subject key identifier: 7A:A5:A7:F2:9F:79:88:C8:71:6E:AC:A1:79:F2:50:1F:99:C9:A7:06
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019717E2E408403AA86F9808CD8DBB4A630E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eqWn8p95iMhxbqyhefJQH5nJpwY.roa
Signing time: Wed 28 May 2025 17:13:54 +0000
ROA not before: Wed 28 May 2025 17:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 28 May 2025 18:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:e2:e4:08:40:3a:a8:6f:98:08:cd:8d:bb:4a:63:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 28 17:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aa5a7f29f7988c8716eaca179f2501f99c9a706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:09:08:ae:87:2d:e4:6c:b5:5e:0b:24:83:
b9:b4:75:c2:3f:0a:6c:1b:55:71:e8:7e:1e:e5:1d:
e2:9d:db:e9:2a:fd:1c:2e:ae:3c:4f:8d:32:03:14:
80:10:6f:a6:75:d6:f0:f3:b6:19:a3:85:b7:f3:2b:
5b:59:cf:c7:0a:a2:c9:85:b9:08:7e:fd:84:b8:a3:
89:9f:c8:00:eb:f6:45:79:c4:55:ed:e5:7e:32:29:
a5:8a:e3:2c:1f:77:eb:cc:35:85:7f:37:8b:f0:17:
da:fb:99:d6:b1:b6:cf:9a:73:6a:f6:d1:7f:b2:60:
6b:24:7f:95:ca:c9:07:c7:38:89:0f:99:e9:dc:d7:
40:8c:f8:6a:f1:c0:0f:2f:e4:b6:03:98:03:55:9f:
06:83:6f:a4:fb:a5:43:6c:85:c3:ad:d8:90:b6:aa:
c6:d7:29:d1:f0:89:02:2c:f6:5f:5b:8d:44:fb:c6:
96:b4:d0:71:5c:6a:4d:ae:89:3d:25:34:0c:31:b3:
94:3c:a7:0b:2c:a2:d1:fc:03:a4:8a:06:f6:2f:0c:
2d:25:04:fa:d4:dd:3f:ed:3d:b0:63:f1:09:19:50:
5a:a6:af:bd:41:de:a8:17:26:58:e5:2b:40:6f:78:
bc:70:65:2d:43:22:2d:4e:56:80:19:54:b7:e2:1f:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A5:A7:F2:9F:79:88:C8:71:6E:AC:A1:79:F2:50:1F:99:C9:A7:06
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/eqWn8p95iMhxbqyhefJQH5nJpwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
a3:13:1e:27:95:c5:08:4b:aa:2d:30:30:06:19:0b:00:87:2c:
7c:e0:a1:d1:f8:1b:66:78:5f:85:27:a0:fe:3f:42:6c:d4:d5:
9a:0b:b9:54:9d:7b:9d:af:e4:63:3d:07:6b:7e:9c:85:1c:ef:
84:d4:aa:d6:b3:20:8d:5c:9d:8c:c7:45:2d:5b:95:0b:8d:70:
ae:f5:2e:c2:d4:e4:47:9c:04:a9:9d:b4:e9:50:a3:df:06:69:
98:ed:ef:08:1d:c5:f6:e0:9e:6d:0a:34:30:f2:b7:a5:b2:94:
26:9d:b3:94:ef:7d:dd:77:e9:35:74:d6:3f:cb:64:cb:6d:92:
d7:dc:46:f9:66:f0:1d:1f:24:9b:be:f1:b7:79:27:ed:85:a1:
53:c6:aa:8b:e4:3d:d6:05:14:ce:b4:1e:4f:d8:19:66:db:b2:
b8:47:ce:e8:06:c9:03:5b:ca:fb:aa:d4:fc:74:19:76:4d:fb:
3b:a1:de:ee:e7:7d:dd:22:8d:4c:2e:1d:b0:18:0f:63:ad:13:
2f:bf:d2:71:d7:a7:e6:4a:28:4e:13:e4:55:48:e8:02:c3:23:
13:f9:ee:e8:30:b1:0d:07:a2:b3:88:99:91:c0:c5:b2:ca:d4:
ea:58:df:71:79:82:b5:d8:e4:1b:54:ec:fe:cf:bc:92:0c:ba:
93:58:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:10 2025 by rpki-client