Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jccYPSVUpJwmLbuwsL46NpQCCX4.roa
File: jccYPSVUpJwmLbuwsL46NpQCCX4.roa (raw, json)
Hash identifier: w78AONZoyjRd8OPANxy0GwwmBYHxPRcGQ9UQ+JXvsEE=
Subject key identifier: 8D:C7:18:3D:25:54:A4:9C:26:2D:BB:B0:B0:BE:3A:36:94:02:09:7E
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019701902B5519C4317A5CED8D9AAAA1E74C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jccYPSVUpJwmLbuwsL46NpQCCX4.roa
Signing time: Sat 24 May 2025 09:11:54 +0000
ROA not before: Sat 24 May 2025 09:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 24 May 2025 10:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:90:2b:55:19:c4:31:7a:5c:ed:8d:9a:aa:a1:e7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 24 09:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dc7183d2554a49c262dbbb0b0be3a369402097e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:51:1c:4e:5f:4c:d8:66:4c:84:54:60:f8:
86:0e:20:53:45:d4:31:11:4c:fd:9c:0a:ee:9e:cc:
fd:cf:3c:1c:17:95:ef:72:eb:a9:10:f5:48:6a:cb:
56:79:1c:f2:14:42:b4:db:9f:de:eb:57:e5:c5:ac:
6b:d8:ea:68:34:de:46:cb:46:e9:ea:98:96:b7:18:
75:1b:7e:15:76:3d:66:7a:e8:ce:56:29:47:1a:65:
ff:d7:98:c9:fb:61:ef:28:ac:81:c6:28:51:d4:a4:
d9:a0:1c:92:48:7b:6f:f9:d6:09:51:d6:f3:a5:62:
17:62:a5:5b:11:57:bd:20:c5:42:64:50:09:43:1a:
93:84:de:3d:bd:7e:4b:e4:e5:83:0d:92:03:80:dd:
7e:c5:9c:cb:61:af:64:e0:5a:8a:84:21:04:a7:53:
57:5f:38:0b:8a:16:ae:49:a9:f6:80:09:7b:65:f5:
02:21:15:d7:3e:5f:80:e9:a7:39:23:e0:0a:fb:44:
6c:5c:50:8e:5a:f3:33:38:ee:ff:3f:8b:91:6c:06:
a2:b8:c2:29:f1:c7:fc:92:85:c4:91:12:b3:8e:d6:
f6:5c:98:39:13:8b:01:3a:5d:11:01:b8:b3:20:2e:
17:5b:aa:15:79:0f:be:ca:ea:bc:76:a3:54:b4:77:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C7:18:3D:25:54:A4:9C:26:2D:BB:B0:B0:BE:3A:36:94:02:09:7E
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jccYPSVUpJwmLbuwsL46NpQCCX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
07:e7:52:a6:1e:e2:24:61:f5:89:2b:f9:ed:a3:48:2b:79:4a:
9a:66:8f:12:90:35:7b:13:0b:77:8e:6e:bc:27:73:a5:ff:e8:
79:1f:48:1f:c7:e3:5b:88:e1:19:4e:a4:18:f0:8a:65:c5:08:
74:52:d5:b5:1a:1d:37:ea:a7:97:c1:d7:f6:ce:10:7f:c0:61:
3b:30:11:1d:ab:6a:72:fb:3c:fb:79:b3:1c:15:54:f2:0f:0f:
c4:70:0a:c8:65:49:dc:4c:21:e2:cb:f2:f9:1c:0f:ba:08:62:
52:b3:bd:05:0f:d9:03:fb:a1:67:6f:95:4e:9a:00:5f:92:91:
a4:f1:41:4b:10:82:af:0e:21:48:1a:34:d0:44:1f:69:8d:c3:
5b:bb:a6:36:c7:bb:bb:4f:95:70:2e:ac:a9:35:c8:ce:9f:1a:
ac:c9:5e:95:95:c1:c6:b6:00:8e:5a:4f:c9:2b:cc:7d:c8:5f:
23:9c:eb:bb:9c:3a:02:fa:73:5c:48:eb:04:14:f3:0d:20:9b:
af:9f:ed:6b:77:b4:5e:f9:f3:66:02:7b:96:63:8f:81:2f:59:
b8:29:1c:9d:d5:d3:e1:e2:a4:6c:dd:15:b4:73:ee:f7:7b:2f:
b9:c2:01:e8:1b:20:f3:0e:41:d2:6e:47:38:f5:58:55:1d:bc:
b8:6f:eb:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:46:56 2025 by rpki-client