Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ksJNeEReQlnxVvtutZ-lBIAYOjA.roa
File: ksJNeEReQlnxVvtutZ-lBIAYOjA.roa (raw, json)
Hash identifier: sYw9FBjGp/OH0Ag/S15ZxvOgpN7agjARE13MCqGOxCg=
Subject key identifier: 92:C2:4D:78:44:5E:42:59:F1:56:FB:6E:B5:9F:A5:04:80:18:3A:30
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970DCC308773EDCB918D8BEA31D26C45F5
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ksJNeEReQlnxVvtutZ-lBIAYOjA.roa
Signing time: Mon 26 May 2025 18:12:54 +0000
ROA not before: Mon 26 May 2025 18:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 19:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:cc:30:87:73:ed:cb:91:8d:8b:ea:31:d2:6c:45:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 18:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c24d78445e4259f156fb6eb59fa50480183a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:9c:1b:9f:2e:66:c7:85:6e:75:07:6b:d1:
8f:1d:82:25:47:68:2f:68:6f:eb:94:d4:b3:0c:ba:
d1:ab:a0:41:ca:91:44:af:b4:ad:60:26:c5:d9:3a:
11:7d:ca:8b:c4:c7:52:2a:61:aa:e4:36:4b:59:11:
04:45:07:e5:21:78:89:de:67:61:8a:dd:21:0d:a9:
90:b9:fe:b0:46:53:1f:09:d8:36:d3:de:3e:c8:06:
47:36:da:ee:e2:d5:4d:a0:46:5c:7d:0f:69:bf:ad:
2e:9a:8b:86:d6:3c:05:52:7c:5b:53:0a:ae:bd:5b:
4b:3b:93:c4:55:5e:52:d0:04:fa:5d:e4:92:37:ef:
a9:a8:cb:51:20:76:75:3c:13:53:cc:ff:b7:b8:4d:
6d:51:6b:b6:e1:c6:2e:80:57:e0:ad:77:bf:b2:76:
8b:06:46:1f:cf:f2:51:ad:03:ab:6a:fe:bc:35:02:
19:65:15:7c:d0:e7:ac:89:72:f0:43:7c:46:a6:10:
18:e5:ca:45:e4:61:ab:e7:72:18:2b:87:eb:dd:2a:
b1:cb:80:52:52:ad:e1:db:8f:bb:e8:4e:a2:cf:cc:
4a:cb:02:6e:2f:db:4b:f4:b3:f1:03:cf:81:7d:26:
be:4d:2f:77:21:5f:82:6c:55:aa:d2:13:c9:b9:b1:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:4D:78:44:5E:42:59:F1:56:FB:6E:B5:9F:A5:04:80:18:3A:30
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ksJNeEReQlnxVvtutZ-lBIAYOjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
67:1f:d2:49:f1:9c:87:38:e5:96:13:7e:e8:4b:d4:29:99:7f:
0d:9d:29:5f:5d:5d:48:45:fc:94:12:93:8c:04:c1:f2:33:35:
b2:4b:8c:c1:44:be:f3:63:9f:7e:9e:61:57:36:a5:76:d4:30:
0c:36:ca:3d:e6:f8:5b:c2:b3:1f:9b:96:0d:6f:fc:70:8a:a7:
35:55:15:59:07:87:f5:de:6d:e1:9b:02:dc:4b:c5:d8:c0:65:
80:0e:a3:50:35:63:31:a0:f7:e4:b7:56:05:d9:90:ff:9e:f9:
6d:d0:8e:96:9b:f0:6c:7c:5e:07:30:b3:1e:1e:40:a4:49:4a:
18:a4:9f:ca:29:7c:8c:35:91:f6:47:d9:2a:b1:86:53:d1:6c:
21:69:63:ca:e1:c5:32:8f:79:8a:a7:c5:69:dd:06:74:bc:9f:
94:84:83:68:88:63:2f:4a:66:5a:76:d0:02:ab:32:28:b2:d0:
8b:64:ab:d6:86:c4:68:8b:96:fa:fe:cb:8a:aa:bd:17:08:78:
cb:da:c3:d8:d7:1c:b3:2a:68:2a:cd:cd:82:1a:89:37:4c:09:
8a:2f:62:39:16:68:8e:27:2c:60:a8:67:c0:c6:01:fb:ce:b6:
a1:6a:58:32:aa:d1:b9:f0:60:b5:8e:e0:9b:c8:eb:1a:d7:9a:
43:c1:6f:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:25 2025 by rpki-client