Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/me_VOHRwMoRijfVvVGRNYfFzY3I.roa
File: me_VOHRwMoRijfVvVGRNYfFzY3I.roa (raw, json)
Hash identifier: 4PfOLka/5yDqVUu0aLvpCE1nxLMyCrv3oqlWXQmDSJw=
Subject key identifier: 99:EF:D5:38:74:70:32:84:62:8D:F5:6F:54:64:4D:61:F1:73:63:72
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971107D2F489CEFC843B81E7BFF7A7E41E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/me_VOHRwMoRijfVvVGRNYfFzY3I.roa
Signing time: Tue 27 May 2025 09:16:54 +0000
ROA not before: Tue 27 May 2025 09:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 10:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:07:d2:f4:89:ce:fc:84:3b:81:e7:bf:f7:a7:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 09:16:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99efd53874703284628df56f54644d61f1736372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:4c:3a:c4:19:04:6f:4e:20:bc:16:f5:3d:
71:74:ca:37:f7:8f:76:b6:c4:c9:46:4f:c7:0f:ef:
94:c0:d5:28:be:e0:31:99:cf:7a:18:94:35:e1:03:
93:1e:43:fc:60:a9:00:9d:b4:04:54:d6:c8:24:45:
15:c1:19:48:8f:56:9a:88:0a:3b:03:cf:d3:5a:58:
b6:c5:16:d6:0a:8b:a5:cb:d1:8d:23:fe:7a:1f:d9:
b1:8e:1e:03:79:a9:b2:ad:e7:9d:17:cd:23:15:6a:
96:bb:e6:97:84:14:43:47:1f:cf:89:78:d3:29:36:
6b:c9:ee:d1:66:97:b3:5d:06:8d:9d:c5:d4:4e:52:
e3:f5:6f:9e:c5:d1:46:2b:46:d8:9f:c0:a7:ed:61:
1f:39:b9:e2:7f:d1:99:e1:74:e6:37:24:7e:f1:95:
7e:87:ce:78:3c:20:8c:04:f4:fc:09:b1:2b:0f:d4:
7d:62:9b:26:dd:f5:3f:96:60:d2:86:42:4f:3e:6f:
77:51:70:ff:21:46:44:cb:3e:39:8d:66:13:1b:b7:
1e:e1:f2:10:91:49:c3:d8:a7:1e:0a:4d:df:3b:51:
76:b9:52:8d:3d:2e:a0:87:33:69:78:d8:44:f8:d3:
6b:3d:08:f7:f9:dc:b6:e0:63:85:d6:74:6a:9f:95:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:D5:38:74:70:32:84:62:8D:F5:6F:54:64:4D:61:F1:73:63:72
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/me_VOHRwMoRijfVvVGRNYfFzY3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
Signature Algorithm: sha256WithRSAEncryption
a5:b1:65:e5:ce:b4:ea:3f:b9:f8:44:4b:35:ae:89:b9:bd:8e:
22:1f:1b:a9:5a:0e:1e:04:ee:e0:ee:d3:dc:87:85:a6:40:94:
82:72:10:95:db:aa:ee:e1:fc:67:e9:aa:b6:4e:fb:09:76:f8:
79:ee:76:12:4e:fc:10:22:df:3a:5e:c2:65:f7:b6:69:55:f3:
7c:84:f5:15:5f:b3:a9:8a:a8:8b:26:29:c1:35:67:63:6b:d8:
8f:8b:e2:a4:01:f6:96:e1:6e:dc:37:f1:c9:38:e0:54:73:70:
12:33:64:35:94:bf:68:10:40:fe:9c:72:78:e7:d6:f6:35:b1:
c5:cd:55:89:ce:9c:fb:6b:f5:04:93:1b:7f:e4:94:62:22:46:
62:fd:00:4f:c8:e1:69:78:a7:77:02:71:43:68:a5:ac:22:e8:
16:52:8d:08:47:ce:75:bb:7c:75:5f:f4:cb:ae:9d:a2:5c:3c:
e1:51:c8:f7:b1:0c:c6:7e:89:c0:6c:4a:13:00:65:aa:d3:92:
1a:1c:6f:90:9a:20:db:29:4c:66:11:8a:a9:15:08:0e:0b:02:
d0:98:d7:f2:d6:61:29:5c:6a:02:28:2f:58:d4:43:e0:4c:5f:
67:d7:bb:5d:67:00:f8:43:58:26:dd:40:70:64:1b:b5:31:87:
ff:60:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:15:49 2025 by rpki-client