Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pv93yrzmEg0zIR1OyIDUdVNK18c.roa
File: pv93yrzmEg0zIR1OyIDUdVNK18c.roa (raw, json)
Hash identifier: gFqe4DUAdxQgYw5HSSiREkAxu2N2Ema+2ZUPYsy7+Ds=
Subject key identifier: A6:FF:77:CA:BC:E6:12:0D:33:21:1D:4E:C8:80:D4:75:53:4A:D7:C7
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197290B9767CA7B04941B956460C2A4331E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pv93yrzmEg0zIR1OyIDUdVNK18c.roa
Signing time: Sun 01 Jun 2025 01:11:54 +0000
ROA not before: Sun 01 Jun 2025 01:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Jun 2025 02:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:29:0b:97:67:ca:7b:04:94:1b:95:64:60:c2:a4:33:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 01:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6ff77cabce6120d33211d4ec880d475534ad7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:0b:7b:c1:5b:d2:8c:40:41:5e:c6:62:3f:
6c:8d:64:71:b7:fc:f9:29:10:65:f9:d3:47:eb:92:
02:14:d4:aa:bd:76:82:13:bf:e4:28:5a:19:85:a8:
7c:67:67:11:d6:2a:bd:69:e4:ae:b5:b2:ad:e7:b5:
e9:6f:81:cc:76:ef:38:be:9b:6f:7b:c6:c8:21:6e:
56:62:75:53:0d:4e:35:ab:19:40:27:28:e3:9e:ec:
02:61:9c:06:5d:b7:c6:cb:27:73:b6:2f:03:32:53:
5a:7b:74:1c:35:90:60:ff:44:39:1d:f6:4f:eb:29:
0c:4b:06:50:4b:9b:dd:3e:62:e3:a1:53:6f:13:ff:
f0:b9:82:a3:0b:07:af:03:2e:6e:c0:76:b7:20:e1:
67:ff:5a:9e:61:76:f1:41:ab:e6:03:2e:36:4b:9c:
74:38:c4:09:fb:95:16:93:79:5a:e8:8d:60:dd:b7:
f1:15:c7:02:6a:16:48:40:c8:0b:cd:39:be:ba:8a:
a6:54:cd:86:bf:b3:b8:47:34:99:cb:1f:ec:bc:db:
c8:35:8a:ba:fb:38:45:47:ed:fb:bb:48:49:9a:f2:
71:7b:1a:b2:a1:d2:35:9c:92:38:cf:74:eb:70:a0:
31:64:82:13:84:3e:99:33:72:8a:99:bd:a1:47:ac:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:77:CA:BC:E6:12:0D:33:21:1D:4E:C8:80:D4:75:53:4A:D7:C7
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/pv93yrzmEg0zIR1OyIDUdVNK18c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
11:53:2d:62:aa:40:bf:7d:20:3b:10:58:9c:83:f6:20:8d:47:
86:4f:d8:c2:99:ac:c0:05:85:aa:39:7c:5d:b4:67:b9:9b:0c:
f3:46:6b:4c:f7:65:42:20:a5:aa:b9:33:e4:5f:68:87:7f:3e:
b1:a9:c4:bc:0f:40:b1:34:14:1e:fe:a7:ea:47:7e:4a:31:22:
6d:b4:1b:8d:40:73:ae:5a:2f:69:88:41:d0:8d:70:d9:89:22:
2c:78:bc:6c:6d:ef:16:e4:23:99:e7:68:e4:19:e8:0a:7f:65:
d2:09:69:cf:a8:67:0e:40:cc:79:71:7f:31:66:26:73:92:67:
b8:a9:8f:b6:c8:7c:f4:da:06:e6:1e:7a:6f:e9:2c:44:4a:9a:
02:fc:c1:0c:c7:cb:9f:3e:e8:83:cb:0f:49:94:f6:64:54:4d:
66:d4:b2:9d:6c:3f:4b:0b:02:3e:3a:d5:e2:27:87:6f:c4:fe:
29:07:8d:27:1a:28:01:77:cb:5a:70:a0:aa:12:ed:86:10:d9:
f8:76:2b:6b:2f:8d:c3:52:36:35:6b:2a:2f:0c:f4:f3:69:74:
fa:aa:a1:8b:55:23:b2:d1:f4:31:c7:3d:1e:7c:5c:6e:5b:c2:
1d:84:74:1c:5d:21:f9:f0:43:b4:7a:42:74:fe:96:3b:e4:f9:
bd:0e:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:55 2025 by rpki-client