Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jRCoj-psnrZev4JFU2a6Y2l9yRE.roa
File: jRCoj-psnrZev4JFU2a6Y2l9yRE.roa (raw, json)
Hash identifier: H9bjEQNIFxoehiuArObDF8++cU8OjaaJVmobg5lQfEA=
Subject key identifier: 8D:10:A8:8F:EA:6C:9E:B6:5E:BF:82:45:53:66:BA:63:69:7D:C9:11
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FD7E4C6C8DFE062C3291E4ED44E64487
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jRCoj-psnrZev4JFU2a6Y2l9yRE.roa
Signing time: Fri 23 May 2025 14:13:54 +0000
ROA not before: Fri 23 May 2025 14:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 23 May 2025 15:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:7e:4c:6c:8d:fe:06:2c:32:91:e4:ed:44:e6:44:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 14:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d10a88fea6c9eb65ebf82455366ba63697dc911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:70:fa:b3:44:a8:bc:80:f5:80:71:bd:57:
25:b7:3a:f7:56:7f:38:27:1e:3f:1f:7d:41:bc:fd:
07:50:c1:76:66:9b:87:73:1b:45:18:2f:89:4a:73:
88:b2:fb:24:50:e6:a9:6d:70:e3:c0:87:85:8e:65:
95:e1:38:ab:90:cb:56:15:2c:1d:77:df:c9:03:56:
fd:24:97:e8:24:cb:95:25:4a:4f:ab:32:3f:8e:03:
0c:3b:9b:77:57:3b:dd:83:ec:7d:43:8f:76:d0:7a:
4c:76:d1:45:6a:6d:b4:89:d2:cd:5b:86:62:03:37:
d8:1d:db:7e:26:8c:bb:44:9b:4f:61:2b:05:fc:2a:
1e:33:14:26:a4:76:1f:3d:35:3d:ab:5f:c5:f3:7a:
7a:d4:68:2f:69:e8:a1:92:e2:05:62:b4:a8:f2:5e:
be:15:11:ef:cb:1a:d7:16:07:fc:a9:26:58:42:05:
6a:bb:82:32:9b:77:d9:27:28:30:c3:c8:8e:68:bf:
d1:f9:e5:f2:3e:10:6e:99:dd:fd:65:d6:b2:c5:17:
57:b1:e5:72:1b:fa:f3:d0:42:33:6f:16:da:f8:29:
ae:95:4d:46:7a:e0:ec:f7:54:ce:c3:55:5a:06:6c:
84:3a:4a:2a:b3:7b:bf:db:b7:8e:f5:f3:67:62:fa:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:10:A8:8F:EA:6C:9E:B6:5E:BF:82:45:53:66:BA:63:69:7D:C9:11
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jRCoj-psnrZev4JFU2a6Y2l9yRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
a2:96:53:e1:f1:03:0f:51:ce:2a:56:a6:e2:29:20:ca:43:07:
4e:79:10:be:a1:de:8e:16:e3:55:d6:e6:35:cb:bc:4d:c0:84:
fa:72:a8:8a:ab:51:ff:35:df:21:d2:c7:90:2c:2b:21:a3:70:
ff:fd:ee:79:21:a4:9e:d4:54:b7:63:42:35:11:ba:6f:e2:a1:
43:c9:b8:bf:b8:13:4e:f2:4a:19:57:7f:ef:0e:80:ee:eb:69:
ba:44:65:a5:40:60:09:dc:bc:ea:16:18:3f:39:e9:f4:1f:05:
11:d8:06:82:29:bb:66:3f:43:e4:fc:e7:05:bc:6e:70:38:c8:
be:87:db:eb:5f:67:86:26:5a:72:54:a9:9a:16:d1:2a:39:43:
08:06:42:b8:75:3a:75:8c:04:19:1e:83:de:e3:80:d1:70:fc:
85:9c:a3:45:2f:30:d8:97:52:4f:39:5b:88:bb:a9:39:f5:b7:
71:68:c2:b3:8c:23:70:56:15:58:cf:7c:fe:bd:93:55:e2:90:
b9:d7:94:9e:09:09:6a:d5:00:a8:0a:4a:30:62:6f:02:bb:79:
e0:76:3a:b8:a2:af:f8:9d:0a:92:70:33:96:04:ad:6f:1a:05:
fe:15:9f:59:78:0e:81:39:8f:eb:20:25:e1:ed:1c:0f:9d:e5:
e8:9a:2f:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:46:01 2025 by rpki-client