Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lAJVDwRgE1c1tKiwOuJJNKqmJRE.roa
File: lAJVDwRgE1c1tKiwOuJJNKqmJRE.roa (raw, json)
Hash identifier: tQL52Q7B9DGdYYw4Ew37CdcIhvKVcudnJ+Iww2TFldU=
Subject key identifier: 94:02:55:0F:04:60:13:57:35:B4:A8:B0:3A:E2:49:34:AA:A6:25:11
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971217BC76C674D25657518FDEF39E7A9B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lAJVDwRgE1c1tKiwOuJJNKqmJRE.roa
Signing time: Tue 27 May 2025 14:13:54 +0000
ROA not before: Tue 27 May 2025 14:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 15:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:17:bc:76:c6:74:d2:56:57:51:8f:de:f3:9e:7a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 14:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9402550f0460135735b4a8b03ae24934aaa62511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:a5:5b:6d:09:6e:63:aa:12:c1:a5:79:9a:
ee:f0:d5:32:15:b9:db:41:e8:cc:71:1f:0c:aa:c4:
c9:40:d0:35:bb:b1:1a:93:b6:94:52:f0:4d:f9:54:
44:d2:8b:53:de:6a:7f:a1:b8:34:8e:a0:8d:89:32:
4e:d9:c7:b9:61:bd:d4:45:4f:91:da:53:28:5e:fd:
e1:64:08:96:6c:73:a5:3d:68:7e:9b:cc:6d:25:70:
09:ee:3c:28:5b:9b:67:57:2c:99:55:3d:a1:87:c2:
9e:ae:ef:51:85:10:88:7c:5f:3b:d7:bd:14:31:d2:
9f:0e:86:a3:4c:64:16:8a:e8:ce:a7:fc:f0:fa:2b:
aa:57:31:8c:a7:e1:26:7c:d2:1f:f8:61:ef:f2:60:
30:35:50:7a:ad:7b:b9:b6:3b:83:a9:13:6f:70:5c:
b2:05:22:3c:9d:59:1a:c3:a3:f5:f3:d4:3e:be:4e:
81:12:49:fc:71:94:60:f6:ea:80:ea:2e:24:5c:3d:
37:0d:3b:65:b1:4c:d4:3f:87:2f:8d:71:2f:7d:5e:
30:4f:cc:3c:6b:5e:3c:b6:b1:64:66:76:e0:3f:63:
f6:e1:9d:dd:79:a3:17:d7:a2:0d:8b:e1:ca:66:08:
5c:37:13:b4:3b:4d:b5:3c:13:cc:3f:21:d0:f9:1b:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:55:0F:04:60:13:57:35:B4:A8:B0:3A:E2:49:34:AA:A6:25:11
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lAJVDwRgE1c1tKiwOuJJNKqmJRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
Signature Algorithm: sha256WithRSAEncryption
84:5a:d1:9d:7d:b2:1d:03:99:a1:75:83:51:64:e9:46:bf:6c:
ac:e4:f0:dc:cd:35:cd:aa:e1:36:d5:70:f2:eb:5d:2e:3a:37:
62:d5:bb:f2:ff:12:c0:26:ae:07:3d:ee:3c:18:e3:a4:d7:36:
2e:a0:b9:8a:ff:c1:f8:e4:83:2e:6d:d2:34:c1:6a:88:57:66:
a5:ff:55:1b:b3:3f:d3:6a:89:5c:d7:9a:c2:2c:68:63:c3:9d:
14:67:10:b1:69:b5:0e:41:38:6e:ba:cc:69:b7:09:3c:cc:94:
45:29:19:97:da:45:cc:42:19:38:e8:a8:79:7b:a7:55:5a:a7:
38:d3:86:76:65:a0:66:48:b7:06:32:d3:9e:f6:10:a0:48:80:
5d:bb:25:59:db:9c:2e:bb:59:78:ba:41:ff:01:9d:94:52:c4:
15:26:f3:0e:18:73:8c:b8:82:64:c4:28:b5:6e:f6:9f:96:18:
32:94:a4:40:2a:0e:99:99:bf:3b:c7:04:52:e5:55:4f:06:8a:
77:75:3a:a0:9f:b4:52:29:f4:3c:45:aa:f9:ab:4a:60:8d:0f:
e9:b6:d3:7b:ba:eb:13:53:e1:09:60:c0:18:a5:f2:a7:6f:55:
ee:7f:4c:ff:2b:b2:c5:6d:b7:5a:6d:44:ae:48:13:da:70:69:
b4:8d:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:25 2025 by rpki-client