Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gktEmis6d6Ex2qt2I4pM6Dfpuow.roa
File: gktEmis6d6Ex2qt2I4pM6Dfpuow.roa (raw, json)
Hash identifier: E6TqNLLrr37/e0+TPa9e9Pb+kusL9MCxNqwtjuImZEQ=
Subject key identifier: 82:4B:44:9A:2B:3A:77:A1:31:DA:AB:76:23:8A:4C:E8:37:E9:BA:8C
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970FBA94056E30EA869BA2F9DFA04B4F4F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gktEmis6d6Ex2qt2I4pM6Dfpuow.roa
Signing time: Tue 27 May 2025 03:12:55 +0000
ROA not before: Tue 27 May 2025 03:12:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 04:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0f:ba:94:05:6e:30:ea:86:9b:a2:f9:df:a0:4b:4f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 03:12:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=824b449a2b3a77a131daab76238a4ce837e9ba8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:0a:5e:73:59:b5:9f:bf:00:48:1f:5a:e8:
5f:92:ec:ff:5f:e9:50:db:cc:40:9a:73:5d:a9:7a:
39:5d:95:c0:3d:37:b1:ca:59:fd:dc:4c:6c:9c:c1:
cb:89:d5:20:bf:10:64:d6:54:79:5d:98:5b:ac:dd:
04:3f:1c:0b:f5:47:be:2b:70:1a:bb:48:16:37:e5:
e6:31:9c:0c:b7:c4:5e:12:b1:24:cc:9f:fe:99:2c:
27:42:10:9d:7b:84:7e:8e:10:06:26:3e:69:05:13:
c3:4b:ea:5b:b0:28:8c:46:95:c4:9b:d2:27:78:ce:
9f:e4:02:b3:c3:57:1a:bd:91:d4:55:06:31:14:59:
e5:f9:93:59:24:8b:6e:94:cb:8f:15:b0:92:39:f1:
54:81:d3:19:1f:d7:31:8a:ed:30:4a:75:54:07:52:
59:61:97:13:85:81:54:97:6b:c8:10:2e:fb:d4:06:
aa:9f:b3:fa:e4:4b:31:d9:66:9e:f8:d5:be:9f:61:
ba:bb:3c:f7:e9:31:ac:23:e9:8e:3c:c6:fe:96:6d:
f5:fb:da:b4:59:2c:ed:bb:2e:76:da:54:3c:6c:48:
dc:8d:84:d6:6e:d8:69:52:b3:40:0d:37:da:54:c3:
e0:8c:4e:aa:c5:43:42:a2:07:5d:f0:ce:7a:49:a5:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:44:9A:2B:3A:77:A1:31:DA:AB:76:23:8A:4C:E8:37:E9:BA:8C
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/gktEmis6d6Ex2qt2I4pM6Dfpuow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
9d:e7:81:0d:02:d8:8f:39:9c:3a:42:70:dd:db:91:76:ad:92:
c8:66:54:7a:f1:4e:2b:34:b2:97:02:24:86:1c:8c:36:e9:d6:
9c:68:00:67:16:63:92:08:99:84:60:3a:9d:69:14:9e:44:2f:
9a:b7:85:4e:30:f0:42:85:46:19:c9:ec:9b:b5:25:3c:a9:d8:
93:62:1f:5c:ed:28:81:d3:11:6d:16:88:57:8e:74:0b:b6:27:
25:56:3b:65:8f:fc:e9:07:d0:8d:b8:52:de:bb:10:8e:71:2d:
9b:cc:7b:a7:86:72:5c:06:59:e2:83:e5:77:7d:ff:c8:b7:90:
a1:ae:71:fa:8e:8d:1e:72:54:59:3c:f6:b1:2e:71:12:60:95:
f2:2c:0f:90:79:e7:95:e6:d3:7d:d6:a8:13:e9:dd:f4:99:ed:
dd:5f:3a:1e:42:fb:c9:b9:45:99:9f:5e:ad:77:15:4d:7a:e8:
fe:83:ea:4b:19:65:1a:b2:0f:9f:41:16:6d:12:f0:1a:f3:ed:
ee:7a:48:43:25:3c:89:e3:bd:27:13:9b:22:c3:09:bf:09:67:
46:ce:70:be:4c:e4:73:16:ea:c3:74:47:30:a9:11:4d:4e:90:
0b:09:63:d6:bc:41:d6:d5:3f:37:6d:6b:71:01:f6:3e:f8:85:
18:5a:10:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:24:40 2025 by rpki-client