Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/j5ZpkUkgkrl82huoMaWwawPOJxQ.roa
File: j5ZpkUkgkrl82huoMaWwawPOJxQ.roa (raw, json)
Hash identifier: sP1I0YyEGm6QRV9UCOJxKXZAw1gScC10/9sHWo4ntyI=
Subject key identifier: 8F:96:69:91:49:20:92:B9:7C:DA:1B:A8:31:A5:B0:6B:03:CE:27:14
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F09EA362EBDA709D382FBDEC3D407CAE
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/j5ZpkUkgkrl82huoMaWwawPOJxQ.roa
Signing time: Wed 21 May 2025 02:14:10 +0000
ROA not before: Wed 21 May 2025 02:14:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 03:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f0:9e:a3:62:eb:da:70:9d:38:2f:bd:ec:3d:40:7c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 02:14:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f966991492092b97cda1ba831a5b06b03ce2714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:47:bf:91:15:98:be:52:08:ef:ea:ef:1f:
ca:ef:f3:61:15:d7:48:d1:98:fe:ff:64:ab:19:ab:
94:98:f3:f9:0a:6a:f8:ff:9f:a1:61:da:5c:08:08:
8f:d2:2e:ff:02:9b:cc:c2:ea:9f:f8:4d:58:8f:85:
64:23:20:bc:db:a9:75:48:0b:74:a1:c8:7f:a2:6a:
c9:8a:43:55:6e:d2:a4:6e:01:77:bb:5b:cb:e5:97:
ef:19:92:50:49:35:23:00:bd:f7:ac:80:ae:d0:1c:
13:f5:85:3d:99:97:94:b8:cd:63:60:72:47:ac:57:
29:f3:6b:db:2f:6e:5b:5a:5e:e4:c6:c3:16:f7:ba:
88:b2:51:48:ba:6a:64:d0:59:c4:31:ef:87:e7:d7:
e1:77:50:20:16:6c:c6:f9:eb:03:e3:49:67:92:ae:
1d:84:88:15:09:a9:c5:59:ee:4b:60:5b:68:67:43:
35:fb:88:b8:b7:9b:6a:42:47:86:ec:da:db:98:81:
35:06:b8:73:4b:80:b9:ec:1d:29:b6:0d:bb:af:3f:
f6:23:d6:d8:e5:a6:90:e5:35:95:d9:b0:0a:9d:c9:
66:57:5d:d4:e8:43:eb:0d:a9:3b:30:2a:82:c5:07:
f1:81:ce:d0:20:6f:76:1e:f9:b6:95:0c:47:38:34:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:96:69:91:49:20:92:B9:7C:DA:1B:A8:31:A5:B0:6B:03:CE:27:14
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/j5ZpkUkgkrl82huoMaWwawPOJxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
79:e2:c2:44:3a:df:80:91:75:dd:75:8e:56:7b:9b:b4:e8:4f:
0a:f8:23:30:61:ad:e8:eb:7b:61:31:d3:f8:52:30:86:cb:0e:
cc:50:8b:5d:80:7a:9a:ff:b9:51:5a:0b:c3:b8:8f:8b:44:31:
82:31:39:ff:c6:d4:c3:9b:45:a1:ed:58:f7:0e:94:4a:33:9e:
a1:c2:cb:d7:92:4a:d1:29:f9:4c:0e:ac:61:8c:51:08:d6:3b:
85:b3:fe:ef:fc:a6:6b:e1:1e:1c:82:d3:82:8c:da:d3:b1:b0:
eb:05:86:f5:9b:93:96:58:c7:48:95:bb:f2:71:91:9a:53:1f:
84:55:dd:94:31:a3:d3:4b:be:0e:bd:96:17:2c:26:59:d4:15:
44:78:56:37:7c:d1:11:cb:93:bd:67:aa:2d:44:3c:e9:16:45:
94:2a:59:db:ef:68:94:54:cf:d2:58:55:b0:1e:38:bb:55:ad:
71:52:4a:d9:be:0a:65:0a:8c:b0:0b:38:9e:75:3e:59:de:b7:
d2:59:63:d1:20:a3:ab:a4:8b:fd:fe:52:eb:a7:69:5c:92:37:
2b:12:4b:16:3f:06:7b:5d:11:fe:e6:7c:26:11:e4:3d:3d:1e:
b5:0a:26:e7:d3:32:3a:ee:27:f3:86:f3:18:55:cc:44:4a:5d:
25:2a:46:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:13:48 2025 by rpki-client