Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mzc2paPzWmqJxhHK6t_DVxrXkdM.roa
File: mzc2paPzWmqJxhHK6t_DVxrXkdM.roa (raw, json)
Hash identifier: r1X50rk7YaHTPYNe7lbvOfyRJdWo6kjlsFtoYEYoMH8=
Subject key identifier: 9B:37:36:A5:A3:F3:5A:6A:89:C6:11:CA:EA:DF:C3:57:1A:D7:91:D3
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F820173E2F4417674E950E8ADB557ECB
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mzc2paPzWmqJxhHK6t_DVxrXkdM.roa
Signing time: Thu 22 May 2025 13:12:54 +0000
ROA not before: Thu 22 May 2025 13:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 14:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:20:17:3e:2f:44:17:67:4e:95:0e:8a:db:55:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 13:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b3736a5a3f35a6a89c611caeadfc3571ad791d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:4b:40:5f:38:c1:d0:d7:a0:24:e8:20:9e:
c4:33:8a:2a:6d:7b:a2:8a:4c:7a:92:51:45:67:0d:
01:b7:24:9b:ed:82:6f:55:b4:64:86:b9:16:c3:1b:
4c:e3:2b:5e:7d:5d:db:cd:75:66:c7:ba:23:57:cc:
60:34:d2:24:18:db:2c:6f:d8:6a:9a:0f:68:13:43:
b2:6f:22:88:6e:26:8c:d2:2b:f0:75:e7:37:d9:f2:
62:50:c2:80:81:e4:c7:88:1b:19:b9:58:13:ad:8e:
a0:17:30:44:47:f6:8b:5f:03:32:e5:6d:5f:10:1b:
11:83:b3:23:bf:33:3e:ca:a6:53:6b:95:fc:14:99:
03:b8:c5:f5:48:cf:54:45:a6:78:89:48:6a:c6:5a:
98:62:8e:75:5d:5b:08:7d:02:57:47:5c:75:15:59:
7b:82:2c:51:aa:8f:6e:63:af:c6:b5:d6:68:a8:79:
c1:44:f6:ab:9c:65:ea:dc:ea:6a:cb:d5:5a:e0:7d:
a2:6c:b4:c7:99:c2:9f:79:0b:e5:e1:b0:8d:3e:05:
46:a7:77:d5:ce:86:5d:f5:e1:f0:f2:a8:f7:a9:69:
14:76:29:56:de:20:16:70:7f:73:2d:a3:85:87:d6:
03:cd:af:f7:d8:f4:0d:96:2c:d1:ca:9a:66:bd:b1:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:36:A5:A3:F3:5A:6A:89:C6:11:CA:EA:DF:C3:57:1A:D7:91:D3
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/mzc2paPzWmqJxhHK6t_DVxrXkdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
10:8e:c9:7b:6d:7a:61:a3:c6:9f:a4:6a:4a:c2:e9:75:e9:19:
a3:7b:56:58:d6:29:50:83:1e:98:a8:14:da:c8:6d:89:0d:43:
b7:ab:56:18:55:d9:47:ba:57:81:71:6d:f4:56:b5:47:5a:26:
c8:8b:bf:54:26:30:39:c3:58:e5:11:59:d9:92:d1:ee:3c:2d:
0b:75:c7:3c:59:40:9e:70:25:7f:96:6b:2e:11:59:e8:41:82:
8a:c1:9f:22:74:46:c3:50:69:c5:18:58:29:02:73:29:99:04:
e4:ae:6f:33:37:e8:20:8f:9a:4c:c6:5c:cc:e3:9e:10:d0:5f:
6d:f1:65:b0:d7:68:76:c3:a0:83:84:df:d9:53:f1:85:28:31:
7f:4d:10:06:e0:ef:24:13:37:9b:f9:0c:9e:57:8c:cd:a2:ed:
90:88:e3:ac:7f:78:81:72:63:a9:1d:c2:69:a4:52:1d:f7:01:
af:da:2e:60:0f:44:db:04:21:f0:5c:ae:ef:d6:bd:a6:e6:c3:
da:64:b8:fe:52:34:1c:82:ad:90:38:50:64:dc:b8:86:fc:07:
a6:7b:e2:f3:1b:76:6a:4a:d1:9c:51:03:68:61:1a:53:61:cf:
c1:f7:08:6e:be:83:d5:68:2c:bf:b6:10:7b:64:27:9d:98:be:
71:8a:5a:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:05:56 2025 by rpki-client