Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ooDyjqzm9XJiqR3K96Ulbw1AXLw.roa
File: ooDyjqzm9XJiqR3K96Ulbw1AXLw.roa (raw, json)
Hash identifier: agZt5vc4JxXuK8Br4Rdx8onNt4cA9SBkindqtoArod4=
Subject key identifier: A2:80:F2:8E:AC:E6:F5:72:62:A9:1D:CA:F7:A5:25:6F:0D:40:5C:BC
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F144DDE90504AAA7B87ADA2BBEDA7292
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ooDyjqzm9XJiqR3K96Ulbw1AXLw.roa
Signing time: Wed 21 May 2025 05:15:44 +0000
ROA not before: Wed 21 May 2025 05:15:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 06:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:44:dd:e9:05:04:aa:a7:b8:7a:da:2b:be:da:72:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 05:15:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a280f28eace6f57262a91dcaf7a5256f0d405cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:61:b4:66:e2:57:9e:47:58:5b:46:69:3e:
25:89:ea:6f:50:81:9d:ff:74:b8:fd:1d:84:7c:e9:
51:ed:83:c4:8a:88:e1:a6:8d:d0:02:42:5f:77:a4:
1d:12:af:1d:d1:b8:b1:a3:a3:4a:e5:34:af:68:f2:
38:61:fd:b5:f2:a0:ec:70:aa:d5:43:a8:ed:3b:9b:
d1:47:cb:cc:45:17:85:d4:3c:85:38:8d:ac:20:ab:
79:fa:c1:64:f5:34:92:36:54:de:6c:52:9b:8e:83:
ba:d5:f8:c1:ed:64:98:84:28:9c:a7:99:86:4e:65:
fc:4f:dc:04:93:c0:64:4f:be:7a:2b:75:c1:d4:25:
b8:f3:ab:14:3c:15:17:43:08:5d:a9:2a:f1:b2:0e:
0f:ef:da:8a:69:7f:b8:bd:5f:70:2a:25:7f:e3:58:
1c:0f:46:17:0f:26:57:d0:0e:1b:7f:a5:97:82:36:
da:25:07:d8:df:40:c3:f6:1c:d9:79:4a:93:ff:64:
f8:20:f3:60:70:90:0d:d6:b5:93:e2:ee:b2:87:fa:
61:e8:c5:df:2a:10:9a:b0:14:80:62:b9:04:be:84:
53:51:ee:16:68:e3:5a:7b:0c:1b:05:72:ed:06:df:
77:f5:d9:a8:0a:bf:27:95:7d:7b:8d:a2:6d:43:0e:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:F2:8E:AC:E6:F5:72:62:A9:1D:CA:F7:A5:25:6F:0D:40:5C:BC
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ooDyjqzm9XJiqR3K96Ulbw1AXLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
2b:dd:ec:be:d1:54:c6:47:29:79:25:78:79:90:33:da:0b:a8:
76:d6:18:df:85:bc:e0:fe:1f:99:77:6a:80:5d:73:56:ee:4f:
ee:6c:28:c0:00:c5:57:54:fe:3d:7e:15:8e:10:2c:fb:d3:e5:
06:27:00:f5:7d:4a:04:62:69:95:5c:87:18:97:af:c9:1f:58:
74:1d:bc:c7:6a:8d:bf:97:a1:a1:9a:08:08:79:4c:36:c5:9f:
87:e3:52:96:6a:d9:51:3f:ca:4e:1f:ef:26:bd:0d:8d:40:6a:
09:48:83:a9:75:d5:e9:85:d4:aa:ea:9d:af:ea:16:07:94:84:
2c:73:2d:36:63:0e:1f:4e:9f:53:3d:e5:75:d3:23:9e:56:40:
cd:f2:20:b6:5b:00:60:69:da:9a:f9:c5:e9:9b:c3:61:fa:80:
17:ed:de:56:52:18:2e:f1:e8:bf:58:8e:97:12:41:53:23:56:
14:ff:32:e3:b2:63:84:01:e0:64:9d:3f:3f:16:16:90:09:0a:
5e:3a:d6:ee:6e:5e:5f:1b:8b:59:cf:f3:5d:69:fc:d1:23:a2:
a7:7d:23:4a:a7:7c:db:cd:59:83:0b:1d:3e:53:90:41:a9:5a:
30:40:86:bb:9f:4b:b6:18:7f:a3:4b:b8:ca:06:4c:5c:5d:31:
36:ed:c1:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:04 2025 by rpki-client