Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/oYrnV9ep74UqV50g6uq1fwfBtrI.roa
File: oYrnV9ep74UqV50g6uq1fwfBtrI.roa (raw, json)
Hash identifier: OxdmBfMamfAVknhl58XkBxFn9tbCPi7JdKYpMQJJv0o=
Subject key identifier: A1:8A:E7:57:D7:A9:EF:85:2A:57:9D:20:EA:EA:B5:7F:07:C1:B6:B2
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01971E1AFE20217E39561FFB9D0D362FE830
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/oYrnV9ep74UqV50g6uq1fwfBtrI.roa
Signing time: Thu 29 May 2025 22:12:54 +0000
ROA not before: Thu 29 May 2025 22:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 May 2025 23:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1e:1a:fe:20:21:7e:39:56:1f:fb:9d:0d:36:2f:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 29 22:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a18ae757d7a9ef852a579d20eaeab57f07c1b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:85:f1:61:43:71:07:b7:5c:23:15:e4:63:
f2:cf:df:a2:9d:03:7c:b4:bd:fe:98:57:4a:85:84:
35:33:88:54:8b:5d:c7:d7:5c:b6:e1:9b:8b:d0:6e:
8c:99:dd:7e:b7:3c:73:2c:c2:f9:78:5a:0c:7f:ef:
e1:df:fd:71:b8:f1:6c:13:89:53:d5:21:22:45:94:
73:e3:bc:a1:17:a5:dc:05:38:bc:72:5d:03:7b:a1:
5b:09:e3:cd:56:af:16:ca:d9:64:40:89:de:7d:0b:
30:e3:0d:7e:ca:19:37:18:ce:ec:88:5a:7c:b0:af:
49:50:4c:82:26:cc:87:9a:4f:65:6a:62:37:2c:77:
ac:d9:9e:40:99:81:d7:ed:6b:02:6a:01:b7:f0:76:
cf:bd:3a:e5:57:b5:5d:d5:b9:69:b2:df:2a:51:c3:
69:60:6d:78:c8:64:7a:87:e4:64:68:94:2c:82:48:
32:20:e1:ee:2c:fe:ba:7c:d1:c2:31:76:9c:0e:a5:
22:5d:79:8e:1e:56:12:cc:df:bf:8f:5d:4b:4c:bd:
28:58:17:12:e6:12:2c:17:7f:25:5f:08:79:8a:e4:
a7:ed:a5:98:d0:12:70:c3:8b:26:63:3f:f2:2b:19:
56:6c:7d:62:6c:ca:2d:e6:2e:1f:22:06:75:f4:aa:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:E7:57:D7:A9:EF:85:2A:57:9D:20:EA:EA:B5:7F:07:C1:B6:B2
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/oYrnV9ep74UqV50g6uq1fwfBtrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
b9:4e:6f:94:b4:b7:04:61:7d:84:64:64:b2:7e:65:18:40:f2:
79:f4:d2:ea:47:58:8f:64:1e:00:59:22:d9:bb:e3:0f:ef:4a:
59:19:a0:17:00:47:eb:f8:6d:bd:f9:25:78:94:3e:ee:ee:3c:
84:93:f0:c5:fc:2f:6a:e4:b4:c5:11:53:2e:6d:f4:7e:9c:af:
51:ef:e5:8a:96:15:94:0c:42:12:93:92:46:ce:6e:18:ad:e0:
8f:5c:f5:e0:a7:13:cb:f6:1c:58:db:5b:d8:02:08:1b:b0:8b:
bb:d7:27:c3:f8:e9:9b:aa:50:cb:b8:20:73:b9:3d:1a:b8:40:
53:b3:fc:92:a1:82:8c:88:42:11:19:57:ba:59:3b:a9:e5:48:
8a:4a:31:79:d2:32:b0:b0:da:f0:3a:e6:c3:ad:d8:44:7a:10:
93:60:e5:f7:5f:e7:51:e8:c7:ba:4c:c4:4b:ef:82:0c:8f:39:
1d:27:29:54:d9:35:84:97:a0:ef:bb:be:02:aa:ee:d8:bb:18:
c1:5d:f2:31:53:c8:72:d1:4b:a4:0f:f9:44:a7:56:f5:cc:02:
3d:2e:01:b0:91:9c:4b:17:fa:83:04:50:d2:34:d7:e5:45:f5:
42:a6:16:74:88:01:5c:67:18:2a:4a:6d:fc:8a:0f:b2:6d:e1:
45:fe:c0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:08 2025 by rpki-client