Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iC9DWIZxMIK11Zdmc3VuRmSXyf0.roa
File: iC9DWIZxMIK11Zdmc3VuRmSXyf0.roa (raw, json)
Hash identifier: HhnEgfU+kdEA4Vvqct9vPzjtZ2wLgPx6QqY3ovg3H9o=
Subject key identifier: 88:2F:43:58:86:71:30:82:B5:D5:97:66:73:75:6E:46:64:97:C9:FD
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019741EF19119B539D38402DB5D95ED400C4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iC9DWIZxMIK11Zdmc3VuRmSXyf0.roa
Signing time: Thu 05 Jun 2025 21:11:17 +0000
ROA not before: Thu 05 Jun 2025 21:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Jun 2025 22:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:ef:19:11:9b:53:9d:38:40:2d:b5:d9:5e:d4:00:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 5 21:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=882f435886713082b5d5976673756e466497c9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:c0:ea:09:28:9e:ff:98:89:ce:59:fd:dd:
78:8d:6a:01:60:90:1d:9b:06:59:d3:fa:b4:bb:3e:
27:1c:7e:d7:be:ad:35:eb:e6:79:2c:1c:a3:9a:3f:
ef:bf:10:cc:f4:12:39:d1:33:a5:47:0d:86:a7:20:
0d:3d:9a:21:24:d8:a4:37:a3:aa:1c:6c:d8:c3:9a:
e7:99:5f:8b:1a:46:46:0a:f5:05:88:a6:b7:c2:2e:
a8:d9:cc:59:0d:65:43:5c:67:7b:fe:e4:69:53:02:
55:b8:14:65:ee:d2:b3:7c:10:5b:f9:1c:16:f4:f4:
a2:6b:c8:b6:06:fd:04:2b:4d:06:0b:cc:ba:55:e1:
2f:74:c8:93:ee:76:78:b8:0c:74:58:d0:11:ef:ba:
20:7b:3a:67:c8:1a:bb:5b:f2:2e:76:03:37:9c:82:
43:06:a7:0f:77:13:fd:3a:14:d1:83:df:33:67:c2:
17:90:e5:ea:7c:d1:dc:a9:2f:9b:46:06:91:49:97:
65:67:f9:8f:e4:3a:98:7e:dc:bf:61:29:fa:73:63:
41:43:86:c5:1e:a4:93:54:5a:83:98:80:1d:5f:ac:
b2:d6:ef:95:57:26:bf:a4:5f:0b:a5:f8:21:b4:16:
4f:bb:1c:82:12:14:93:2d:a1:86:1a:95:58:83:dd:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2F:43:58:86:71:30:82:B5:D5:97:66:73:75:6E:46:64:97:C9:FD
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iC9DWIZxMIK11Zdmc3VuRmSXyf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
ab:7c:66:e8:c5:a4:d2:3a:48:29:54:81:2d:69:64:4f:a8:ca:
c4:94:6d:40:96:a9:c9:67:01:78:5a:2b:5a:d2:2a:22:e6:b9:
f6:6b:2c:63:d0:c7:20:20:ff:e8:cc:96:8a:dd:dc:b2:73:9d:
91:dc:c4:52:62:bf:40:bf:f9:f2:2f:ff:f9:d3:98:e9:51:63:
00:cd:e7:52:52:86:e9:76:16:02:c9:fa:85:10:62:78:1b:2e:
9a:39:1b:30:98:31:a2:bc:64:7e:0e:de:7a:0a:3a:fb:aa:39:
31:5c:d0:0e:00:ee:f4:7e:ca:7d:c5:8c:96:c0:b9:8a:51:5e:
aa:19:42:18:89:16:97:74:34:89:f3:22:e3:2c:dd:ea:19:53:
e3:ca:a3:44:a6:63:f1:5a:8d:12:5d:aa:29:86:ea:1c:e7:49:
c0:5c:da:52:44:17:f2:8b:8a:c9:25:2e:bb:56:01:c2:c8:f9:
05:8c:8c:3b:a0:6b:8f:99:ac:ac:99:c9:f5:30:df:79:e3:c0:
31:12:d7:ae:94:b7:19:64:63:b7:7e:cf:6b:46:ac:aa:40:c8:
c2:b0:02:e8:2a:eb:a7:aa:fb:eb:2e:41:77:ff:76:49:85:26:
29:99:7a:39:c5:0b:c5:93:87:bf:97:a8:dd:4a:ff:cf:f7:6d:
26:ba:bd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:15:18 2025 by rpki-client