Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jDsEW1SKwQhGOKpoBeFHPiFOYmY.roa
File: jDsEW1SKwQhGOKpoBeFHPiFOYmY.roa (raw, json)
Hash identifier: ZWAYXNdw7wfFC3lxMS5QdGUpap+KLccedQpbN1MA0hw=
Subject key identifier: 8C:3B:04:5B:54:8A:C1:08:46:38:AA:68:05:E1:47:3E:21:4E:62:66
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970E72D072D8FEC4A944CA49927339F52C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jDsEW1SKwQhGOKpoBeFHPiFOYmY.roa
Signing time: Mon 26 May 2025 21:14:54 +0000
ROA not before: Mon 26 May 2025 21:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 22:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:72:d0:72:d8:fe:c4:a9:44:ca:49:92:73:39:f5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 21:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c3b045b548ac1084638aa6805e1473e214e6266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:0e:b8:9e:ae:e0:48:03:03:7b:86:c9:6b:
8d:64:96:11:f5:b3:63:1e:ad:19:15:0a:7c:8a:f4:
76:dd:62:39:ee:12:c8:ff:40:03:06:98:c3:0b:62:
0d:1b:b2:da:20:01:5a:a0:09:33:6e:5d:5e:26:ef:
a5:55:f4:69:95:c8:d8:b2:67:94:d2:ba:9b:a9:8a:
57:4b:bc:35:5e:e6:b7:9a:59:6b:d1:ed:68:1c:c5:
b7:b9:d3:d1:c0:33:bb:84:95:79:4b:16:a7:0e:62:
c3:6b:14:d8:e1:f3:41:7a:07:1e:c3:51:bf:80:8b:
d5:8c:ef:9b:11:9a:fc:6f:8d:c1:85:d4:65:42:b3:
b5:80:16:3b:e5:3a:43:f4:45:7b:55:73:2a:a6:c1:
ed:c5:bb:81:8c:4a:12:9f:6b:a4:d0:90:91:af:da:
bc:e3:ee:84:93:81:d8:61:d6:f9:d7:91:38:d8:d2:
05:50:70:26:b5:ad:02:b5:5f:20:5a:a2:44:51:09:
f0:c5:35:d2:a0:3e:44:9c:35:2f:49:06:4e:83:1f:
e6:ee:8a:37:a6:8e:e6:bf:c2:f3:b4:44:e5:4e:c3:
9b:dc:fb:8e:87:2f:4d:6a:48:a0:61:b7:d8:9b:79:
e3:68:26:b7:aa:af:9a:d0:36:0e:0f:3d:51:ea:3a:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:04:5B:54:8A:C1:08:46:38:AA:68:05:E1:47:3E:21:4E:62:66
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jDsEW1SKwQhGOKpoBeFHPiFOYmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
58:9f:d9:12:b0:d4:5c:2d:f0:b6:bb:f5:af:75:8f:cf:75:67:
d6:ab:24:b0:c2:e2:02:d1:45:58:e4:1b:05:eb:ac:fb:69:64:
71:22:84:e5:80:83:c7:ab:24:98:df:02:16:66:5d:2a:28:a5:
dd:25:b2:3c:f9:e1:b9:aa:82:6c:74:4b:a4:43:3a:1f:82:d0:
a2:f5:6a:61:07:34:d0:dc:cd:6c:93:aa:bd:26:80:e7:29:b8:
4a:ce:87:f3:8e:28:2e:3d:6c:99:a4:f3:4b:66:1e:1a:b8:22:
e9:1e:8a:b7:04:4c:85:fa:e2:bb:06:4b:3e:26:f9:e3:b1:98:
d8:d0:35:f0:3f:e1:75:ae:40:e7:e7:67:b0:48:1c:6d:b2:72:
f8:d5:c9:03:f3:77:3e:55:1d:69:95:67:75:90:8b:8d:60:4b:
45:2e:a4:19:a8:aa:c2:d2:27:f0:cd:d0:fb:ba:b7:4a:64:13:
2e:e6:5c:e5:f8:47:ed:56:fc:8b:59:19:3a:7b:17:46:80:7e:
22:cc:2d:47:82:50:2b:7d:a7:99:83:45:13:46:0e:67:1d:f1:
d1:49:a1:61:e3:3c:65:45:86:50:05:cf:e2:96:5e:4d:db:1a:
c6:9e:6f:c6:ab:fa:17:b4:c2:55:ff:48:85:84:81:67:87:96:
ec:1a:4d:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:29 2025 by rpki-client