Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/qzNQr1JfMYtViFo2vvO78-a4BGY.roa
File: qzNQr1JfMYtViFo2vvO78-a4BGY.roa (raw, json)
Hash identifier: Opf2QwlYHBVWj381gvzS/m5Tj/PnPmORPIzk8XfroZQ=
Subject key identifier: AB:33:50:AF:52:5F:31:8B:55:88:5A:36:BE:F3:BB:F3:E6:B8:04:66
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196466D9B8D9D766C0CB7F2B68F007FCD1E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/qzNQr1JfMYtViFo2vvO78-a4BGY.roa
Signing time: Fri 18 Apr 2025 01:05:10 +0000
ROA not before: Fri 18 Apr 2025 01:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:466c:d68e/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 18 Apr 2025 01:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:6d:9b:8d:9d:76:6c:0c:b7:f2:b6:8f:00:7f:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 18 01:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab3350af525f318b55885a36bef3bbf3e6b80466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:d3:a5:84:1f:bd:cf:1a:36:d4:3b:65:6b:
ea:86:9b:7f:bc:07:5e:ba:e4:52:a1:be:a3:37:fc:
4a:e5:4b:fa:ca:cf:0a:79:ac:20:e0:6d:97:e4:89:
0d:eb:cb:b9:bc:bb:ff:ca:26:20:5c:cd:8b:a1:98:
b7:6a:37:da:e0:2d:2c:f7:59:a1:6a:ff:25:92:f9:
8f:27:61:3b:0f:64:d5:45:b2:1d:d7:c4:d3:95:94:
b9:ed:1a:dc:ec:8f:b5:55:47:f9:99:b6:b1:d8:d4:
f1:a8:78:d6:d8:00:0c:5b:64:49:ea:a4:fe:60:ee:
1a:4c:19:5d:00:05:53:07:f7:b0:99:8f:f3:a2:a3:
91:eb:09:9b:fc:52:44:21:96:ea:f7:48:55:d8:4c:
8f:80:c9:bb:17:5d:74:9e:0a:58:00:0c:b1:2b:b9:
cf:51:4e:74:1f:cc:e5:bf:46:d5:d9:82:9d:95:7d:
be:f6:b2:d8:86:28:49:4a:2c:8f:43:90:b7:15:ab:
c8:3b:6c:18:81:28:86:78:11:84:b0:47:6d:79:3c:
11:78:9e:7a:fb:a9:63:5a:6d:68:d2:64:d5:d6:40:
37:32:ec:ab:5b:0b:c0:10:11:19:2d:8f:b0:00:50:
8d:3e:59:f9:0e:7c:ca:dd:9b:65:12:eb:56:15:be:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:33:50:AF:52:5F:31:8B:55:88:5A:36:BE:F3:BB:F3:E6:B8:04:66
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/qzNQr1JfMYtViFo2vvO78-a4BGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:466c:d68e/128
Signature Algorithm: sha256WithRSAEncryption
78:0f:22:82:51:91:39:2d:30:44:d7:9c:7a:34:b9:62:83:51:
53:99:e4:9c:7f:d0:e3:4a:d4:a5:11:6c:14:15:01:39:7a:68:
dd:61:09:f4:4e:51:14:2c:49:35:16:7a:f2:28:6c:28:1d:f8:
ed:78:0e:b2:f0:a2:e5:1a:95:ca:b4:98:b9:84:5e:b0:9c:99:
3d:97:3b:b8:c7:1f:72:ac:92:24:b2:a8:18:05:48:b5:b6:4f:
ef:ec:08:78:03:8a:0c:67:82:91:8c:44:8c:5c:b5:2e:7e:6d:
a7:1c:04:ae:7f:8f:d2:56:aa:4a:3c:e4:81:48:0d:80:9e:9a:
0d:e6:d7:a7:d7:11:7e:71:e9:81:65:7a:cc:d5:4f:50:3b:4e:
a2:67:1c:ae:20:da:07:73:89:16:f9:1e:80:81:d9:07:2f:47:
70:95:95:56:9a:40:af:92:63:58:71:56:17:7f:81:f7:eb:96:
4d:76:03:cc:33:b8:04:f5:b1:c1:ad:ca:b6:e1:b4:04:77:45:
43:27:15:f5:ee:b7:99:11:c9:5a:25:db:f8:e0:e1:55:bc:ad:
eb:f2:42:9e:6a:c1:7d:a0:4b:be:dc:66:7c:e3:2f:60:7a:0c:
33:04:5f:8f:06:03:52:2a:6c:05:89:e6:6a:7f:0d:2f:bd:44:
11:ae:39:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:49 2025 by rpki-client