Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/q8HkaTgZcEO1nSukOgA4kQ3ZeRM.roa
File: q8HkaTgZcEO1nSukOgA4kQ3ZeRM.roa (raw, json)
Hash identifier: ES/N/T9ENXE0q5tW9tgP+acMTEvTb3K6elX3pNUMT/w=
Subject key identifier: AB:C1:E4:69:38:19:70:43:B5:9D:2B:A4:3A:00:38:91:0D:D9:79:13
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F7EBE838D837E4CC0D064454ADC7EB52
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/q8HkaTgZcEO1nSukOgA4kQ3ZeRM.roa
Signing time: Thu 22 May 2025 12:15:54 +0000
ROA not before: Thu 22 May 2025 12:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 13:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:eb:e8:38:d8:37:e4:cc:0d:06:44:54:ad:c7:eb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 12:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abc1e46938197043b59d2ba43a0038910dd97913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:f1:ac:f4:6b:0d:51:d4:f3:18:c1:32:1a:
23:92:8d:27:1a:7a:60:72:36:c5:31:98:a6:00:4b:
5f:1d:54:bc:8d:1b:37:a9:25:28:83:ca:d6:c4:41:
73:21:dd:f8:c8:7f:cd:ab:cb:3b:84:0f:c4:2b:78:
67:4b:89:f0:5b:9f:dd:39:42:a4:18:26:a2:d2:24:
90:a6:7d:10:c6:75:54:f5:6e:8a:7e:bb:1a:3e:13:
36:6e:02:04:17:e2:f3:81:92:4e:10:17:5c:6b:c8:
8f:bb:b5:cf:34:90:a0:e6:cf:30:f1:67:16:07:a3:
58:6e:ff:f1:f6:61:f7:a7:a1:95:b3:be:56:b1:32:
61:d0:f2:15:10:12:78:83:11:b8:24:38:b1:c2:87:
06:da:65:ac:f0:f5:c9:b3:cd:d0:4e:f1:d9:f4:e0:
6c:20:25:5d:36:39:f4:cb:7e:e2:46:ee:5a:99:f4:
42:61:be:e9:be:fe:1f:fc:f4:c4:4f:45:9e:25:be:
74:59:da:f4:eb:8f:6f:78:5f:93:38:12:b2:48:05:
85:e9:84:bd:c6:87:10:81:e4:44:e3:48:9f:f7:70:
a1:c1:6a:25:01:69:dd:49:60:4d:28:3b:1f:ec:04:
a4:95:e4:14:0a:f0:7d:e8:63:9f:71:67:51:41:cc:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:E4:69:38:19:70:43:B5:9D:2B:A4:3A:00:38:91:0D:D9:79:13
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/q8HkaTgZcEO1nSukOgA4kQ3ZeRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
96:e1:e5:a0:98:94:04:51:5f:5f:3f:e5:46:9a:df:06:46:a2:
8f:81:b8:5d:f9:22:b5:e8:98:16:6c:47:a3:63:92:90:cf:bd:
b2:b6:aa:2d:0f:3f:0e:fb:8c:00:a6:2f:96:7d:4f:85:bd:78:
02:f9:d7:05:07:27:90:0f:7e:d3:88:d2:48:46:f5:be:70:a5:
82:52:e9:e6:e2:1a:55:58:0f:84:58:e4:c8:30:d2:ef:7d:75:
bc:e9:26:ef:c7:80:13:60:24:01:38:81:1e:ed:40:08:c9:d8:
57:d2:a0:5d:c4:ca:30:57:17:c0:33:b1:9d:c9:ae:af:24:39:
17:10:77:eb:87:04:78:18:cb:3a:ce:13:71:3d:c9:50:a4:e7:
d3:ec:22:8c:2a:50:e4:4a:3d:a0:f7:c9:12:bb:f0:40:e5:3d:
9b:ad:80:6f:78:66:68:e5:46:ea:12:df:5d:4c:ac:1b:ce:87:
41:ba:54:c0:1c:d2:36:87:67:16:12:94:97:22:d3:5f:ac:ca:
cc:f7:8e:2a:f3:8d:b7:d3:10:1f:64:40:3c:5c:6b:e9:67:04:
b3:b3:6e:5d:7b:cc:d3:35:d1:71:25:31:99:3a:74:6b:e8:fa:
ee:f2:c9:48:45:81:9b:91:3e:e5:1c:c0:46:67:b2:83:5d:89:
52:b4:c3:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:05:01 2025 by rpki-client