Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ipIWUbmBAdsUO0Asuo7F8wJH8CM.roa
File: ipIWUbmBAdsUO0Asuo7F8wJH8CM.roa (raw, json)
Hash identifier: cfd/8318d2v+0Cenc7rYKDOHulC3aHh7ScbIfr6+Eu4=
Subject key identifier: 8A:92:16:51:B9:81:01:DB:14:3B:40:2C:BA:8E:C5:F3:02:47:F0:23
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971B51CBB3DCC0D9245979194A5DF72FF0
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ipIWUbmBAdsUO0Asuo7F8wJH8CM.roa
Signing time: Thu 29 May 2025 09:13:54 +0000
ROA not before: Thu 29 May 2025 09:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 May 2025 10:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:51:cb:b3:dc:c0:d9:24:59:79:19:4a:5d:f7:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 29 09:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a921651b98101db143b402cba8ec5f30247f023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:df:7e:d2:73:5d:e0:17:2d:25:94:ba:8d:
6d:cc:65:f9:ea:f0:79:4d:69:9b:59:ed:b5:fc:49:
ae:4f:4d:0c:d0:80:36:a9:42:b4:c9:74:15:3d:3d:
4d:d2:a0:1d:a6:6e:40:8e:59:44:71:9e:ed:39:5b:
03:ca:d7:35:a8:e4:dc:ab:81:ba:90:e5:1a:c4:d6:
97:6e:d5:29:1d:23:8d:95:c2:bc:80:88:41:5d:bd:
39:35:68:57:22:9a:6a:21:2d:44:2a:25:5c:de:e9:
75:2b:6b:a3:64:04:27:86:48:21:cc:c3:3c:d4:7d:
e4:1d:89:fb:5e:d1:c6:3e:0a:2f:7c:64:96:2b:5c:
9b:cf:d7:2a:62:40:2e:25:74:01:5c:de:4e:e5:1b:
43:5d:12:71:ca:00:05:92:c1:06:7b:18:ba:d7:d2:
58:0f:23:c4:72:2c:fb:1b:f4:8b:73:bb:4a:6a:52:
34:ae:84:1a:86:2c:18:a7:0a:19:95:e4:3d:87:2b:
bb:47:8e:8a:2c:c3:b0:ba:80:bc:ed:cb:e6:41:8f:
31:d3:7a:39:01:c0:8e:5c:e2:e0:4d:bb:66:18:1c:
16:bf:81:43:d8:29:50:f0:b5:ac:e4:33:f2:81:57:
d2:c2:5b:a2:74:c5:94:2b:7d:b2:7e:ea:cb:d6:68:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:16:51:B9:81:01:DB:14:3B:40:2C:BA:8E:C5:F3:02:47:F0:23
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ipIWUbmBAdsUO0Asuo7F8wJH8CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
9a:f1:00:e3:3d:32:8b:82:cf:eb:55:c0:39:ee:48:c7:25:f0:
f7:f1:43:f8:82:bf:2a:7f:42:0c:88:0f:1d:51:9b:c8:9b:a5:
e4:f7:06:8c:5e:cc:65:d7:0d:51:cb:e4:7b:1b:e8:15:9e:85:
6f:d1:d4:4d:76:b3:34:eb:4a:66:90:c9:b1:06:38:c1:a9:e3:
4b:f5:c1:78:28:d2:07:5c:37:1f:23:8c:40:01:2a:6a:7a:d4:
a3:6f:37:67:72:55:89:9c:00:30:51:ab:55:19:45:3b:cd:c7:
51:81:26:fc:cf:3b:99:55:b0:88:cf:83:ed:70:ad:7c:22:ba:
3f:08:e8:58:c5:bd:19:84:89:7d:37:ca:c7:29:66:bd:0d:eb:
0d:04:1a:ce:32:3e:3a:fd:48:a0:38:a2:3d:4f:ea:03:4c:33:
93:fd:43:d5:79:82:ea:b3:28:52:c0:30:b1:39:a5:22:5d:20:
9f:5d:e7:62:52:c6:54:5d:0b:92:7c:ca:96:af:1b:b6:ed:fc:
46:a4:e0:e7:58:8d:11:67:b0:47:64:b4:33:f9:73:e0:4c:ec:
78:72:8b:48:71:57:9b:f4:0a:77:f3:2e:9c:cd:fc:4f:13:c3:
c2:ef:15:0f:d3:29:10:fc:ce:73:a2:8a:e5:21:ad:a8:1e:ff:
0e:1e:f7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:31:18 2025 by rpki-client