Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sl7-x0gZVjaWvUfFntgtWzpY3N4.roa
File: sl7-x0gZVjaWvUfFntgtWzpY3N4.roa (raw, json)
Hash identifier: Wl3K6+g4AZ9bRo3aXeLjtfn5WzlyepH7kW/hwFPJvBU=
Subject key identifier: B2:5E:FE:C7:48:19:56:36:96:BD:47:C5:9E:D8:2D:5B:3A:58:DC:DE
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196DF3404927A38B494376703F9FA62FB17
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sl7-x0gZVjaWvUfFntgtWzpY3N4.roa
Signing time: Sat 17 May 2025 17:04:10 +0000
ROA not before: Sat 17 May 2025 17:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:df33:fe84/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 17 May 2025 17:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:df:34:04:92:7a:38:b4:94:37:67:03:f9:fa:62:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 17 17:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b25efec74819563696bd47c59ed82d5b3a58dcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:7d:b8:0c:b9:ac:3d:e7:fa:1f:99:db:31:
4e:4b:ca:d1:cc:3f:42:83:10:92:24:5b:66:62:f7:
ae:8f:07:f5:6d:36:20:7d:b8:f7:79:da:5b:16:ac:
3b:a0:25:72:bb:76:f9:90:8b:83:23:7a:f1:03:b2:
b8:7d:bb:be:f3:b9:aa:0e:88:44:20:35:a7:2c:69:
6b:a5:44:22:03:62:cc:28:58:8e:70:41:6b:b4:69:
b5:b5:ad:ee:e0:8a:de:a3:66:bc:c8:aa:58:72:fc:
ed:96:4c:70:2f:f0:48:ff:63:d3:15:e8:f8:60:f7:
9d:bd:34:1b:a0:ae:2f:cb:54:f3:d3:9a:8a:59:ed:
4c:90:10:83:25:2d:db:95:29:55:a8:09:c3:e5:7c:
ac:95:5d:e9:65:33:71:bb:97:d0:cd:a5:b3:65:e9:
a7:cd:dd:db:90:6b:5b:fe:1c:29:3a:96:07:d0:6b:
cd:69:4c:42:36:bd:51:4f:94:40:01:c5:89:70:da:
39:d3:7c:22:be:a9:39:0e:d3:dd:aa:e1:4a:30:f1:
dc:ea:23:f3:71:4d:fe:40:5c:6e:b6:e6:a5:26:df:
19:da:65:75:d6:ee:6d:9c:e8:fb:ef:f5:9b:94:b8:
9a:53:9c:08:eb:f7:42:36:67:79:a9:59:30:e8:c6:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:FE:C7:48:19:56:36:96:BD:47:C5:9E:D8:2D:5B:3A:58:DC:DE
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/sl7-x0gZVjaWvUfFntgtWzpY3N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:df33:fe84/128
Signature Algorithm: sha256WithRSAEncryption
50:d3:c7:a5:ee:12:9b:61:d7:cf:24:9e:8f:64:59:ea:ec:91:
e8:55:a5:bd:b1:63:65:e3:aa:24:96:9e:af:e2:6d:34:a3:46:
0e:c6:0f:1f:52:68:89:25:28:de:c1:f7:cb:d7:4a:22:57:eb:
07:dd:2a:1b:28:bd:e2:c2:19:1f:d8:24:f6:f1:d2:17:ce:e2:
d9:16:3f:29:30:5a:c6:0c:24:27:ed:29:da:76:9a:b2:e3:a7:
91:e0:48:24:db:13:93:d3:c1:93:60:1a:dd:bc:01:a9:83:e5:
2c:97:f3:df:4f:87:95:0c:39:08:7d:11:1e:ba:65:45:1b:1e:
0e:5a:28:e6:31:af:5b:92:5f:3f:87:fa:18:3f:25:d8:91:58:
aa:0b:d7:6f:8b:3e:f6:38:d3:76:86:16:79:11:18:04:ec:d7:
6c:38:f8:cf:da:f2:ec:0f:62:a1:1b:a6:a4:d3:47:3d:59:4e:
4d:58:1e:c9:e2:17:f6:b0:af:e2:2c:51:d8:80:c9:c8:5d:75:
d5:c6:48:88:3d:3e:47:31:ea:48:3b:92:0c:96:fd:bc:4b:33:
bf:04:86:10:30:08:d6:bf:b4:91:e0:50:e0:bb:23:de:04:1d:
40:98:a5:16:ba:e6:a6:65:b0:d4:b3:f6:26:4b:27:a5:9e:82:
3f:8d:67:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:03 2025 by rpki-client