Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/tuwnNdrfJMf8WvZ_o-vdQfDer7Y.roa
File: tuwnNdrfJMf8WvZ_o-vdQfDer7Y.roa (raw, json)
Hash identifier: kwM9xJ7e2XBk6iDnHtgnwr/ibADlKCTIpGh+AMVmlsQ=
Subject key identifier: B6:EC:27:35:DA:DF:24:C7:FC:5A:F6:7F:A3:EB:DD:41:F0:DE:AF:B6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197102C18B5AF272779AB545E13A92A3B4E
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/tuwnNdrfJMf8WvZ_o-vdQfDer7Y.roa
Signing time: Tue 27 May 2025 05:16:54 +0000
ROA not before: Tue 27 May 2025 05:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 May 2025 06:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:2c:18:b5:af:27:27:79:ab:54:5e:13:a9:2a:3b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 27 05:16:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6ec2735dadf24c7fc5af67fa3ebdd41f0deafb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:32:77:48:1b:c4:87:86:3b:c5:0d:7c:fd:
c9:e1:6c:3f:aa:9a:87:73:c3:b2:53:7d:d2:06:c0:
01:98:c6:ab:c3:9a:72:9b:89:69:da:dc:f0:32:4e:
32:81:29:b2:15:71:e9:9d:b3:1d:ef:34:ef:79:97:
62:0d:d5:ce:38:66:a1:86:41:52:9f:28:80:93:30:
eb:33:e7:fb:85:53:ad:4b:6d:fd:74:ad:6d:f2:57:
18:cc:f8:4f:27:2a:62:30:07:02:c8:f6:a7:20:b7:
7e:2e:87:ee:99:cf:32:f6:46:68:31:2a:60:07:30:
75:7b:99:5d:35:4b:58:b3:a4:04:cb:2f:9e:32:fc:
79:dd:76:0e:9d:f5:7a:75:bc:98:9a:1d:6f:32:f5:
3f:c1:8b:ee:1a:a2:82:27:ad:a2:47:40:a4:a2:1f:
71:59:1f:d3:ee:45:d8:f2:49:4e:ab:bf:7c:dd:c9:
2a:30:a6:ee:5b:a1:b0:d2:12:ce:ad:f1:fc:c3:c7:
e6:a9:9b:10:3b:95:1f:66:59:c0:d3:07:04:e3:40:
f7:39:3d:41:df:03:de:3b:c7:08:a4:fd:65:81:7c:
12:98:98:b7:83:5a:36:98:da:05:4e:ce:a9:07:6e:
a5:ba:34:65:84:ac:20:af:3d:25:14:fe:b4:b7:27:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EC:27:35:DA:DF:24:C7:FC:5A:F6:7F:A3:EB:DD:41:F0:DE:AF:B6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/tuwnNdrfJMf8WvZ_o-vdQfDer7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
76:5c:78:ba:90:4e:45:1a:61:4d:8c:90:eb:ad:7f:ee:42:d7:
d4:fc:79:42:4d:14:2f:8d:83:15:aa:46:aa:4d:b4:13:ae:99:
a0:d1:d4:b8:67:88:ee:ee:60:6d:27:bc:9c:3e:cd:04:6b:2c:
ac:d1:6c:d6:f9:ee:da:94:de:69:a9:10:6a:dd:45:51:f2:35:
15:46:b8:ec:ba:38:8f:78:3b:d8:33:f9:a6:ca:41:c7:66:f4:
c4:61:9c:2b:4a:f0:a8:8e:d7:31:7e:d9:72:f9:87:98:7f:3b:
03:7a:9e:c0:ad:79:e9:39:9e:c4:2d:ac:0f:03:bf:85:89:45:
85:fa:b1:2a:5b:54:b8:7a:4e:31:b4:23:79:7f:88:41:d8:11:
42:31:f6:95:6e:84:08:18:bd:cc:22:b3:67:a9:c4:af:74:31:
0e:0d:37:fc:60:1a:ed:92:71:76:fd:96:1c:fb:99:8d:b8:08:
0a:92:09:0b:d0:90:a4:df:3e:e5:7b:b7:23:d0:25:c5:47:01:
c4:a4:81:d9:a0:de:5b:b4:a5:f1:89:3b:ce:77:01:bf:aa:a9:
17:10:8c:07:ce:40:5e:66:24:f4:de:e3:6c:92:dc:1a:76:98:
18:9a:c9:05:ec:f5:09:c2:9b:9c:6e:19:c3:c9:bd:48:f9:29:
aa:7d:47:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:59 2025 by rpki-client