Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vfZnvJsFUV4UUCu9jDIpA9TlB4Q.roa
File: vfZnvJsFUV4UUCu9jDIpA9TlB4Q.roa (raw, json)
Hash identifier: 9FwVrUGWH+u0HVYvrPXWOtg+IIYbuplnLn1m0l6Zyrk=
Subject key identifier: BD:F6:67:BC:9B:05:51:5E:14:50:2B:BD:8C:32:29:03:D4:E5:07:84
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019739268F614B84A6AAA7C10AA59AE61945
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vfZnvJsFUV4UUCu9jDIpA9TlB4Q.roa
Signing time: Wed 04 Jun 2025 04:15:17 +0000
ROA not before: Wed 04 Jun 2025 04:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 04 Jun 2025 05:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:26:8f:61:4b:84:a6:aa:a7:c1:0a:a5:9a:e6:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 4 04:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdf667bc9b05515e14502bbd8c322903d4e50784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:5d:66:a8:e1:19:c6:1e:43:68:8f:5a:67:
52:c1:46:d5:c7:06:d5:9a:99:0e:46:64:ad:cb:46:
28:d9:73:0d:bf:36:2e:22:b0:eb:46:9e:5f:71:6a:
d8:b0:1b:c9:22:29:7e:6d:29:8b:00:8e:c7:ac:3a:
9f:1a:17:72:d5:0a:9a:61:14:96:ac:71:ba:45:af:
cd:b3:44:95:9b:f7:cd:65:1e:5a:82:8e:f3:49:db:
0a:9c:00:bf:fd:bb:e7:08:17:8f:c6:14:8c:a0:2c:
31:ab:d1:5e:3d:63:55:73:b5:79:cb:25:ee:f2:37:
8b:0f:ab:24:cf:ca:66:1f:cc:ed:53:80:4d:7e:95:
1a:4f:57:1f:22:a2:ca:ad:fa:d2:61:e7:a8:9f:04:
9c:a8:9c:7d:60:0d:d0:17:9b:bc:36:97:18:43:e1:
36:08:90:bb:e3:96:69:fe:91:a0:17:87:ea:5c:53:
da:bb:57:19:52:f5:75:7e:5c:06:6d:71:d8:42:82:
48:7d:2f:27:ba:8d:66:15:08:d4:6e:c2:0d:1d:65:
53:5f:06:65:c4:40:4b:3b:ee:9e:c4:56:26:9a:cc:
47:0f:4e:ce:e7:9e:74:af:e5:1f:19:d4:b9:5e:f7:
e3:e8:3e:c8:1c:1d:1f:e1:ea:88:c0:96:27:a3:af:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:67:BC:9B:05:51:5E:14:50:2B:BD:8C:32:29:03:D4:E5:07:84
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vfZnvJsFUV4UUCu9jDIpA9TlB4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
bc:29:58:ff:ab:49:f9:d1:f6:61:bc:12:8f:54:9e:18:ec:93:
21:b4:87:02:55:1a:cc:d6:9d:74:be:25:50:f5:d3:cb:03:94:
49:5b:31:d0:3c:f3:0e:61:9b:4e:f0:2a:f0:ed:a7:1f:07:d7:
1b:39:81:95:ae:1b:a0:6e:d6:48:46:2f:1a:ae:57:68:99:87:
11:85:e6:86:99:b6:66:9e:a1:36:23:e0:0f:a4:a2:c9:e6:57:
4c:09:b1:a9:e2:97:ba:36:b9:9a:f0:ae:3a:33:b9:bd:53:2a:
d5:81:cd:bb:e5:45:e5:74:38:06:04:fb:01:c5:b9:61:2e:5f:
e2:7b:7f:de:0e:74:0a:d3:83:eb:13:f8:6d:9c:ad:36:1d:de:
22:7c:4b:b7:73:d1:d3:68:17:d5:a2:b5:9f:d5:c1:8f:03:35:
df:d9:fb:cb:9b:f0:56:88:3f:c9:4d:f4:56:af:5e:ba:df:af:
24:70:45:e9:da:07:ad:12:b4:86:ee:1f:2a:e6:78:80:8a:39:
fa:ae:00:81:29:a5:a6:e7:1d:59:ac:60:56:95:fd:25:bc:d4:
a6:47:fe:1e:d8:05:e0:22:40:fa:3d:08:0b:72:6b:f4:e9:6f:
ee:ca:23:ea:3d:d8:b8:1f:14:7a:d6:ec:2f:49:a9:fd:e2:6f:
5b:01:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:49 2025 by rpki-client