Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jeNd0x_zmexJxCzHYkoNsv5w2Ug.roa
File: jeNd0x_zmexJxCzHYkoNsv5w2Ug.roa (raw, json)
Hash identifier: OJifk77+a+nWOC4Px86kPqLzp8TB2+JqQM7gz92NJhk=
Subject key identifier: 8D:E3:5D:D3:1F:F3:99:EC:49:C4:2C:C7:62:4A:0D:B2:FE:70:D9:48
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01962F77C25DFF1CB3B5175D62D07F2E547B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jeNd0x_zmexJxCzHYkoNsv5w2Ug.roa
Signing time: Sun 13 Apr 2025 14:04:59 +0000
ROA not before: Sun 13 Apr 2025 14:04:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:2f76:f703/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 13 Apr 2025 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:77:c2:5d:ff:1c:b3:b5:17:5d:62:d0:7f:2e:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 13 14:04:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8de35dd31ff399ec49c42cc7624a0db2fe70d948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:80:88:fc:dd:ce:4b:6e:72:0a:83:77:96:
29:a2:1a:60:1d:d3:79:00:e1:36:81:4f:8c:a4:c7:
e7:1c:cf:b3:38:a8:33:f5:31:2c:dc:eb:b8:75:00:
2d:16:c4:cb:55:dd:ff:19:c3:4f:40:d8:f2:04:60:
e4:be:a7:78:21:a7:fc:e2:e9:45:f7:15:93:db:81:
30:b2:a8:a3:a9:17:87:f3:b9:64:af:a8:2c:53:87:
3d:d7:34:87:e1:b0:17:04:e7:34:a7:1d:09:c1:15:
9a:ea:e6:e6:5a:09:f0:11:ac:6f:fe:e5:65:34:f2:
3c:6b:c9:b7:ed:9b:42:9d:0f:0a:3a:7f:6d:43:ca:
41:50:cd:61:1a:72:38:28:ea:c4:d7:4c:cc:96:39:
1b:4e:90:fc:b9:ca:52:32:c5:7a:40:54:57:19:90:
8c:81:17:47:fd:e1:6a:af:df:0a:d3:e9:8e:4e:8b:
e7:e5:33:7b:b8:ce:56:60:35:0a:95:0b:a4:dc:01:
4a:a6:3e:0c:cb:78:c6:b8:64:38:48:ca:9c:e2:d1:
fb:5a:64:ec:e0:a6:b9:2d:00:44:a7:a0:f5:74:c3:
37:9a:b0:91:6d:34:73:2a:06:0e:67:49:4e:65:21:
f3:97:d5:d9:89:a5:e1:dc:ab:ba:eb:9e:c2:44:2a:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:5D:D3:1F:F3:99:EC:49:C4:2C:C7:62:4A:0D:B2:FE:70:D9:48
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/jeNd0x_zmexJxCzHYkoNsv5w2Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:2f76:f703/128
Signature Algorithm: sha256WithRSAEncryption
90:aa:04:28:8c:70:1f:c4:b4:2c:42:cc:85:80:9f:b4:b9:dc:
87:f0:c1:be:7b:6f:26:18:eb:ea:6b:15:96:8e:d8:cf:52:f4:
f0:29:96:30:94:42:2b:d1:2a:ca:df:5c:f6:e7:a6:1b:17:72:
e0:17:c6:00:1e:71:9a:91:26:8a:a7:fa:6e:6e:df:53:fc:d0:
e9:1d:74:6e:90:80:a2:9e:21:d8:09:31:d4:ef:38:a0:57:4e:
be:c7:77:e7:f0:38:dd:29:35:94:74:52:a9:17:f7:26:5e:c5:
e1:e2:5c:92:7d:0c:3f:4e:ee:bc:ae:71:65:f1:5d:b3:58:d2:
7b:34:93:55:16:3c:6e:46:67:4a:0d:99:4d:12:2b:3d:db:70:
43:d3:10:83:f5:21:d2:17:35:54:d4:66:f2:13:22:43:c2:b2:
ab:25:b5:bb:39:25:0d:ac:ee:a6:8b:97:1f:fd:75:21:6d:f1:
59:ee:75:1b:0c:36:43:88:c1:1a:80:6d:ce:d7:b4:91:24:19:
9e:6a:31:00:03:2f:ef:e2:fc:e3:69:6b:c1:b9:1e:e2:a1:c2:
ca:81:5e:e5:5c:a4:c7:8e:a4:08:4e:a7:4f:46:62:d4:7e:d1:
43:e4:ed:b5:50:77:9d:9b:98:02:25:66:7c:a0:a6:a2:25:52:
4e:4c:59:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:50 2025 by rpki-client