Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kBo9SPbk5xOP7qwizA6izvA8Kbg.roa
File: kBo9SPbk5xOP7qwizA6izvA8Kbg.roa (raw, json)
Hash identifier: 5D//gGdVUhuLfCiIYnRLxCSYkTBX94ASpGLd7UcvNSY=
Subject key identifier: 90:1A:3D:48:F6:E4:E7:13:8F:EE:AC:22:CC:0E:A2:CE:F0:3C:29:B8
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F88FC9637C379ACBC9F3C557FC8BFD0F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kBo9SPbk5xOP7qwizA6izvA8Kbg.roa
Signing time: Thu 22 May 2025 15:14:54 +0000
ROA not before: Thu 22 May 2025 15:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 16:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:8f:c9:63:7c:37:9a:cb:c9:f3:c5:57:fc:8b:fd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 15:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=901a3d48f6e4e7138feeac22cc0ea2cef03c29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:6a:76:66:a9:52:46:b8:c9:f9:2b:4f:8f:
12:f4:1f:3b:c9:b1:e7:4b:f7:59:ae:10:51:98:18:
1b:0f:0a:ef:d2:54:6a:8f:fa:0a:d7:9c:48:9d:c0:
a6:e7:b5:9d:06:2b:d6:07:3f:a8:68:e3:09:c8:99:
9a:b0:17:65:54:f8:bc:e5:ad:ea:c2:e1:c1:19:cf:
b9:77:35:a3:d6:e1:7a:6a:07:a9:a7:df:2b:db:48:
cf:54:cf:b8:eb:1a:3e:5d:09:ac:6f:c2:4d:95:92:
dc:93:a3:d6:9e:0b:0a:30:6c:ec:90:c6:60:8c:c1:
c7:0e:d8:60:0e:a4:65:fc:d3:b8:87:80:4b:7f:26:
17:83:c2:cd:6c:c9:9e:00:9b:67:70:11:96:3e:fc:
b8:57:37:f0:d0:f4:e4:4d:5d:63:d4:8a:ce:52:68:
5d:bc:49:9f:85:7a:99:84:24:5f:6e:39:6d:30:14:
a5:82:88:13:52:f0:33:09:5a:38:e4:b1:fa:78:6c:
98:1f:5e:e6:46:c7:4a:87:b0:22:f3:04:5b:40:f5:
f1:3f:02:d4:b8:2f:b7:0d:63:8e:02:0a:5e:02:97:
ec:79:c8:9e:45:c7:98:47:e7:f3:4b:64:f1:87:04:
04:e1:81:f8:1a:0e:c8:11:ac:a6:e6:9f:e6:e6:4b:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:3D:48:F6:E4:E7:13:8F:EE:AC:22:CC:0E:A2:CE:F0:3C:29:B8
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/kBo9SPbk5xOP7qwizA6izvA8Kbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
a1:4c:7d:7b:86:49:47:39:3b:d4:00:0a:cc:a0:27:7c:4c:7d:
3d:8b:a0:2e:37:0f:2c:5a:85:ae:3f:60:42:8c:5f:0e:e8:8c:
a4:0b:79:ec:28:a9:8f:45:62:6d:58:07:89:4c:8f:d2:b2:bc:
8f:80:3d:83:6a:59:4f:0f:7d:cb:83:70:6a:23:5b:76:e1:28:
03:61:47:a9:12:36:c8:46:2f:3f:33:3c:94:b7:de:be:a9:a5:
c7:bc:3d:3d:00:32:8c:37:96:b0:95:4d:83:aa:78:6f:a2:2a:
71:c9:17:fd:eb:30:d2:1e:f7:3a:44:96:6e:53:fe:58:6c:1c:
4d:59:5a:a4:2a:e0:cd:a6:94:1f:22:e7:a8:3e:eb:1a:cf:13:
94:03:ac:a3:b1:46:3e:c0:b5:55:e4:57:b5:8d:0c:c0:89:50:
5d:6a:51:c2:b8:5e:5f:30:e7:22:e4:e0:4f:b0:23:a4:0b:ef:
c8:91:44:23:2f:de:8f:ed:90:60:1c:1c:f0:2c:cd:84:f9:cb:
88:ce:9e:af:e7:cb:88:23:09:7b:52:c2:d0:72:8c:65:43:6f:
6e:c1:8d:60:ad:42:e5:53:e0:ba:f7:16:74:4a:48:16:b6:05:
a6:e2:16:59:63:8a:15:fb:87:d5:16:22:80:0c:fc:b8:cc:56:
3b:30:eb:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:01:23 2025 by rpki-client