Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mLiySMKU06QIHbA2YFpDGOzZ11A.roa
File: mLiySMKU06QIHbA2YFpDGOzZ11A.roa (raw, json)
Hash identifier: gPcbo0DGDuuhda80IbWYPXi8WV6Hnzvdk+4rtdCqcsI=
Subject key identifier: 98:B8:B2:48:C2:94:D3:A4:08:1D:B0:36:60:5A:43:18:EC:D9:D7:50
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196BB5F59B25CC151DBC3087CCBFD115E3D
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mLiySMKU06QIHbA2YFpDGOzZ11A.roa
Signing time: Sat 10 May 2025 18:05:10 +0000
ROA not before: Sat 10 May 2025 18:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:bb5e:8749/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 10 May 2025 18:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5f:59:b2:5c:c1:51:db:c3:08:7c:cb:fd:11:5e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 10 18:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98b8b248c294d3a4081db036605a4318ecd9d750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:d5:0c:89:2d:94:05:15:aa:d5:44:ad:f7:
60:f2:14:21:18:28:cb:8f:73:93:cd:5d:d1:47:7b:
30:f8:4a:6b:a4:60:a5:07:52:84:b7:a5:d0:26:e8:
22:32:e9:b3:98:3d:d8:f9:b0:41:17:6c:fc:7e:b5:
eb:e9:02:e8:52:65:f4:0b:f9:41:22:bd:d0:e3:b3:
ba:c9:17:40:02:38:ba:ad:c3:34:62:f6:17:47:90:
58:06:fd:b9:ed:99:b0:fb:d7:4f:c9:b9:b5:2a:0a:
36:6b:69:05:72:ea:ad:1f:8c:cc:cb:cb:74:4e:c1:
71:c9:52:59:c9:47:db:fc:9e:9e:ad:b9:f4:13:b9:
76:8d:44:83:31:94:de:9e:5a:0c:f3:df:18:ee:42:
1b:89:02:57:a6:09:7a:e6:5e:18:35:72:0e:17:4d:
f4:1e:9f:d1:68:de:9b:b6:a7:98:ca:a6:26:13:3b:
ec:a3:fd:76:71:d5:04:44:c3:9c:32:15:d5:53:8b:
f6:ec:97:b3:99:fe:af:67:be:03:d8:d4:04:58:6a:
1d:2c:ed:28:fb:3e:d2:23:d1:15:48:20:8b:10:31:
8e:27:8f:26:cc:f4:c2:6a:2d:e3:e8:10:42:2e:e3:
c1:28:17:59:f2:d8:ed:75:71:c1:0c:cf:49:2e:d5:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:B2:48:C2:94:D3:A4:08:1D:B0:36:60:5A:43:18:EC:D9:D7:50
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mLiySMKU06QIHbA2YFpDGOzZ11A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:bb5e:8749/128
Signature Algorithm: sha256WithRSAEncryption
43:f5:3a:89:49:fa:70:07:8e:94:a8:78:ff:26:af:77:05:3f:
2b:73:2e:d6:81:4b:39:d8:a3:20:27:52:0f:90:58:b5:80:e6:
56:f9:cb:5e:5c:bc:2c:58:d6:11:1e:56:11:69:ed:9b:b5:19:
a0:d2:fb:da:f2:6a:a9:e9:e9:f9:e3:98:51:0a:47:e4:47:ed:
9d:fa:64:ac:0f:5b:67:18:cf:16:24:7e:a9:83:20:ef:b8:53:
98:65:f8:e8:8e:4d:58:3a:9c:6c:7b:d8:25:7a:b2:14:44:d1:
f8:9c:3b:f6:97:f1:77:9b:db:fd:8e:98:e0:69:31:63:8b:30:
35:5f:25:8a:76:ea:d3:c7:e8:70:bb:42:39:7a:55:6f:90:f6:
d0:98:c4:7b:5a:43:2f:43:81:7e:16:6e:2b:8d:3b:a1:12:c8:
3b:f5:7b:ce:97:06:d3:7e:14:3a:b6:64:45:be:e8:4e:e8:5b:
8f:f1:00:5f:01:3b:95:02:94:84:29:a3:08:cc:b2:e7:d0:74:
54:e7:7b:c6:f1:ab:52:45:61:68:ce:4a:59:e2:a0:73:1b:b8:
93:b0:87:77:f1:b6:af:51:04:a1:98:19:9b:83:1f:ae:9c:66:
0e:9f:67:68:e0:a9:36:7f:08:30:c6:57:50:b2:19:bd:53:3e:
fe:50:66:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:42 2025 by rpki-client