Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/hF54Cx0bYrIHTcawEtnkTERT0DA.roa
File: hF54Cx0bYrIHTcawEtnkTERT0DA.roa (raw, json)
Hash identifier: mzBq9mgfXr/eOCRPg3iAHj9rQnF5UKriG2xgW5t3Dx4=
Subject key identifier: 84:5E:78:0B:1D:1B:62:B2:07:4D:C6:B0:12:D9:E4:4C:44:53:D0:30
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F17972BED0E7C31BE40B646008FCE4B0
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/hF54Cx0bYrIHTcawEtnkTERT0DA.roa
Signing time: Wed 21 May 2025 06:13:10 +0000
ROA not before: Wed 21 May 2025 06:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 07:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:79:72:be:d0:e7:c3:1b:e4:0b:64:60:08:fc:e4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 06:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=845e780b1d1b62b2074dc6b012d9e44c4453d030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:7c:60:93:b2:61:e0:9a:ca:d8:86:5f:2c:
82:ee:74:80:b6:10:a4:a6:66:9b:23:61:4d:6c:6e:
4f:31:ee:b1:8c:95:f0:c8:38:8d:66:e6:ab:64:b4:
47:51:33:55:f0:10:5b:ec:f7:b5:d9:f7:6b:38:06:
32:93:17:a6:0e:8b:fa:e8:99:45:ed:32:b1:b8:cc:
93:83:66:9c:5e:9e:95:36:04:79:7f:22:35:7f:e1:
d8:c8:ea:0a:10:fd:7e:d2:ba:09:77:d0:b3:db:87:
be:be:79:70:5d:73:fa:f8:6b:5f:68:32:a0:e4:f7:
38:e2:48:75:0c:57:19:96:33:1c:77:db:a4:ac:43:
94:0c:da:64:d0:9a:e8:a2:2d:ed:25:78:12:42:06:
28:f7:90:8f:b4:02:84:b4:93:a8:1e:ae:2c:eb:57:
26:bc:66:fc:65:66:d9:ee:e8:41:43:5f:48:e7:d0:
f8:ff:ae:b4:bd:43:3b:7d:b2:88:1d:4a:55:f7:53:
fd:be:86:78:0f:79:1d:3b:24:8c:ab:c5:a6:d5:f7:
38:a8:b9:38:6e:a3:71:32:25:fa:38:6d:10:55:f0:
3e:84:39:4c:87:c8:57:d0:14:f6:ce:15:ca:22:c1:
de:0c:54:90:fa:0a:c8:ef:f3:44:b8:e5:30:07:73:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5E:78:0B:1D:1B:62:B2:07:4D:C6:B0:12:D9:E4:4C:44:53:D0:30
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/hF54Cx0bYrIHTcawEtnkTERT0DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
ae:29:c5:92:d4:79:7a:97:44:87:ec:3a:02:fa:f3:5b:77:b7:
db:70:dd:bb:8d:2d:00:02:14:9f:bf:12:a2:03:ba:c2:80:62:
93:d2:86:9c:3f:13:49:0c:74:77:5d:00:e2:89:94:80:a7:5f:
2b:18:95:52:4c:9b:88:56:be:7d:84:3f:ca:fd:5d:c2:f4:f5:
c9:b5:70:4d:ba:32:91:e5:e7:89:8f:e5:62:05:45:ac:74:aa:
eb:13:25:be:e0:b7:07:b9:79:14:97:55:4d:de:02:77:ae:d0:
ce:c6:57:cc:ea:60:7f:44:0a:ba:e5:f2:98:27:68:40:ae:4f:
fe:d7:a3:b8:c8:10:64:65:b8:86:9b:2b:4e:a3:e8:73:1a:95:
0b:76:69:78:e5:fe:88:2d:5c:c7:38:0d:48:f4:9e:7c:d6:ce:
3c:97:c5:36:f3:fd:61:46:80:68:a5:3a:56:b9:cf:f2:38:c8:
01:f6:88:d1:c8:c6:e4:9b:35:50:01:0c:39:6f:4b:c1:8e:04:
09:5b:74:e4:9c:f3:99:15:04:54:0a:c9:35:c4:ea:42:3a:b7:
50:75:ef:f3:ee:be:11:c3:27:a5:5b:48:ae:72:3e:ea:eb:48:
5c:98:63:5a:02:28:89:c9:83:f7:77:b4:f5:2e:8e:f3:8f:bb:
f7:17:93:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:07 2025 by rpki-client