Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gFAg55LAGQuV5bJ7EFX4E_Y0EqA.roa
File: gFAg55LAGQuV5bJ7EFX4E_Y0EqA.roa (raw, json)
Hash identifier: 5bpTdJ1wZPtfDn1CCjYicANh6sa+K4RSxVIwIz7+ijQ=
Subject key identifier: 80:50:20:E7:92:C0:19:0B:95:E5:B2:7B:10:55:F8:13:F6:34:12:A0
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01968A3B16B6893841360D78E3990E54DA5E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gFAg55LAGQuV5bJ7EFX4E_Y0EqA.roa
Signing time: Thu 01 May 2025 05:04:10 +0000
ROA not before: Thu 01 May 2025 05:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:8a3b:1a1/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 01 May 2025 05:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:3b:16:b6:89:38:41:36:0d:78:e3:99:0e:54:da:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 1 05:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805020e792c0190b95e5b27b1055f813f63412a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:72:ed:fa:3c:a9:0f:c1:d8:db:d8:54:e3:
42:1a:8a:24:67:8e:68:46:1e:e8:10:28:fa:cf:61:
1d:8c:77:35:c8:b3:a5:73:0d:03:80:8f:90:4d:37:
94:ee:f1:75:81:48:d7:7e:2a:8f:75:e3:c4:3f:4b:
53:61:27:6f:99:3a:50:26:f7:d5:03:b8:f2:a9:aa:
64:8f:df:2f:49:35:f7:b7:0b:41:ac:45:13:55:c6:
b8:b9:06:2d:e2:3f:10:6e:e2:b0:5d:2d:3e:f5:c3:
0e:b9:ff:c1:95:8a:01:2b:5d:9c:be:63:a5:47:72:
95:0c:0b:f4:85:f9:3b:ea:d6:99:13:a4:02:73:74:
6d:64:9d:17:c9:0b:a5:93:11:16:b3:63:0d:e2:c8:
53:17:1c:3e:6c:e5:0d:5a:e5:ce:0f:b5:4c:d6:c1:
bb:47:af:9d:9d:fa:69:98:49:bb:bf:e3:e6:f3:26:
9e:2d:93:45:bf:86:78:06:0d:21:95:6f:37:66:d6:
9e:c1:36:98:92:cc:62:c5:f3:51:cf:59:03:70:c3:
83:d6:61:b9:41:04:1a:35:75:63:21:59:0d:a0:57:
98:13:36:68:59:0b:6f:2f:88:32:18:0b:a8:18:b8:
55:10:52:57:76:a3:58:b5:7a:d5:e8:39:05:d5:7a:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:20:E7:92:C0:19:0B:95:E5:B2:7B:10:55:F8:13:F6:34:12:A0
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gFAg55LAGQuV5bJ7EFX4E_Y0EqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:8a3b:1a1/128
Signature Algorithm: sha256WithRSAEncryption
82:83:0d:db:a5:b6:4c:c0:a2:3b:35:68:a0:3e:e9:f1:a5:be:
04:7e:a2:44:95:8b:1f:fe:2a:35:5c:57:eb:27:5c:9c:b7:f5:
62:80:d1:a0:36:b8:b7:20:6a:f3:c4:bb:27:3a:8b:f8:1f:df:
da:a5:e0:eb:3f:6a:8d:5c:60:b3:45:00:4a:bf:7a:f2:d9:b5:
a7:2e:5b:ac:80:a7:f4:68:69:a4:cc:40:c1:ac:7b:a7:59:19:
ad:3d:ae:0e:79:a0:80:b6:95:45:be:c8:90:6f:96:e0:62:69:
a9:4f:69:dd:58:5a:fa:6e:53:51:1c:9e:58:f6:77:c6:82:2d:
e1:35:c2:be:85:2d:6b:e7:6f:e4:0e:d5:0b:72:76:36:78:bc:
5d:94:23:15:d7:62:c9:af:fe:f7:9f:67:50:96:f3:aa:cc:6e:
3c:fb:86:f2:47:7b:30:7a:1d:ad:e6:1b:32:ca:4a:18:22:e5:
12:32:5a:99:b5:2f:f3:a4:4a:19:68:9d:ad:fe:5e:2a:0a:10:
03:1a:15:7e:d6:6c:60:ca:e3:2a:aa:13:30:72:b0:3a:6b:f6:
4d:86:d2:c4:25:a7:e8:7d:22:1f:0f:2a:db:23:6b:4a:cc:55:
c0:78:57:43:24:1f:87:66:07:cc:c3:4d:2b:6f:62:7b:9a:b5:
6a:a7:22:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:17 2025 by rpki-client