Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pJUS6RvoZ8eHQNEvSMpqpb3_6i8.roa
File: pJUS6RvoZ8eHQNEvSMpqpb3_6i8.roa (raw, json)
Hash identifier: TXrCziqr1mG1FZ5OPKcqrObQuc5adgQySyCyO7Fr0eA=
Subject key identifier: A4:95:12:E9:1B:E8:67:C7:87:40:D1:2F:48:CA:6A:A5:BD:FF:EA:2F
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197108EF9D2F7885A25089A4A8E69FAEA24
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pJUS6RvoZ8eHQNEvSMpqpb3_6i8.roa
Signing time: Tue 27 May 2025 07:04:54 +0000
ROA not before: Tue 27 May 2025 07:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 08:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:8e:f9:d2:f7:88:5a:25:08:9a:4a:8e:69:fa:ea:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 07:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a49512e91be867c78740d12f48ca6aa5bdffea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:9c:6d:c7:0c:b2:dc:8a:1b:6b:47:24:6f:
84:4e:12:f0:0c:9d:24:00:29:9c:fa:8d:83:bf:5e:
79:30:a4:9b:55:4a:63:b4:7b:e4:de:97:1e:fa:85:
ea:ef:63:19:34:07:d8:61:dc:f6:35:c2:55:14:8c:
76:bd:ad:69:94:56:c6:e4:af:55:65:df:bd:15:a8:
8b:55:6c:54:49:0b:42:62:da:a9:69:68:97:89:e8:
32:51:34:c9:f3:6d:d2:89:70:d0:48:a6:1f:c3:a6:
8d:35:17:65:6d:5e:ff:84:1b:57:ee:ca:c6:ce:0a:
7f:5a:aa:65:4d:31:e2:b4:35:b0:53:88:06:b0:45:
d3:1a:5b:fc:6b:ee:cc:a3:51:64:9f:03:90:18:14:
39:15:a0:27:c4:7a:64:68:d3:8c:cb:fe:e1:1a:77:
18:93:1a:47:a3:41:87:28:fa:04:f2:a3:93:eb:86:
09:74:a0:07:70:c1:37:d9:c5:45:36:7b:0a:ee:2c:
f8:52:a5:78:10:47:b6:62:e2:36:89:7a:95:60:82:
e5:34:71:c6:24:84:81:82:4e:50:64:f6:ea:86:95:
f3:59:cb:02:fe:e3:e8:9f:ea:e1:8c:2b:95:9f:30:
a8:ea:72:48:70:aa:0d:3a:71:b6:63:4f:50:77:5e:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:12:E9:1B:E8:67:C7:87:40:D1:2F:48:CA:6A:A5:BD:FF:EA:2F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pJUS6RvoZ8eHQNEvSMpqpb3_6i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
Signature Algorithm: sha256WithRSAEncryption
01:75:15:80:5e:26:44:bf:67:2b:68:4a:27:f0:53:ed:73:be:
77:7c:10:57:13:bd:8d:23:56:99:80:61:2e:cd:b9:c4:f3:d5:
b4:26:ee:f8:d8:63:3b:32:f3:d0:90:23:2c:7e:cc:2e:6f:13:
9c:7f:a0:18:4c:27:7c:1a:22:c6:e7:f4:6b:51:4f:4a:54:a3:
fb:01:f7:78:b2:bb:14:f0:74:eb:ec:05:32:8f:c7:5d:29:87:
67:c4:9d:75:7f:c1:9d:e6:a6:66:59:94:e0:81:75:b3:1a:4c:
1a:34:62:d9:b4:c3:8b:58:9b:50:54:1e:d8:ee:2f:55:d9:4a:
38:9a:03:4e:f9:f1:7e:07:46:17:fe:5f:21:32:7d:2d:98:e4:
41:e1:1e:19:e3:4b:97:fb:8f:47:27:d2:be:9c:d4:a5:8f:37:
97:3f:8a:82:bf:fd:9a:9f:8e:6a:62:41:5d:4a:2a:f5:f5:8c:
83:87:fa:39:a0:5b:de:5f:5e:0f:11:ca:55:3f:4d:f6:c2:1c:
1f:61:0d:00:97:fb:88:4f:44:c8:c2:1c:31:f2:2e:df:66:6e:
29:08:4f:6a:6c:2a:3d:ed:f2:f9:9b:b4:ad:2e:19:b5:04:45:
10:0e:89:cd:3e:23:ac:f1:cb:46:3d:d9:c1:e2:03:f1:a4:8b:
14:35:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:31:29 2025 by rpki-client