Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vjT9jeyUuEbr0CkuwckHKXKrls4.roa
File: vjT9jeyUuEbr0CkuwckHKXKrls4.roa (raw, json)
Hash identifier: xwD5UX73lbCzCrGIm0mli3csWPNOfKAh0YSIWtj/jIA=
Subject key identifier: BE:34:FD:8D:EC:94:B8:46:EB:D0:29:2E:C1:C9:07:29:72:AB:96:CE
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970ACCFA8A474BE7473CC58156778E6B85
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vjT9jeyUuEbr0CkuwckHKXKrls4.roa
Signing time: Mon 26 May 2025 04:14:54 +0000
ROA not before: Mon 26 May 2025 04:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 05:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0a:cc:fa:8a:47:4b:e7:47:3c:c5:81:56:77:8e:6b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 04:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be34fd8dec94b846ebd0292ec1c9072972ab96ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:78:26:15:da:71:92:63:e5:58:cc:46:9c:
d1:71:fd:f6:e0:d3:57:5c:14:3d:9d:ec:70:e4:e4:
78:86:cb:ab:fd:bb:c8:74:8d:a1:7e:cc:56:51:78:
b7:2d:60:6f:2e:a4:d6:bf:17:f9:90:59:ee:6b:2f:
13:cd:97:61:89:75:c6:9e:df:45:71:f2:36:11:69:
f7:f1:df:b6:84:e9:ff:38:4c:f3:5d:e2:60:8b:67:
c8:d1:80:ff:dc:70:b3:7b:81:8d:8b:19:cd:50:0d:
1e:5d:d3:fa:fc:e8:30:d3:a2:61:63:f3:0c:e4:f0:
d2:97:4e:98:91:30:94:d1:89:c3:24:5a:a2:46:36:
49:70:88:6d:ee:3e:20:f8:a9:89:18:e8:5c:2e:3a:
6b:4f:22:da:b1:e1:be:a2:1c:96:b5:a2:e9:99:33:
74:d2:3e:d2:45:da:65:cf:54:3b:5c:ad:15:99:06:
96:c7:cb:bc:e9:a1:7e:12:1c:7d:db:7a:5c:ab:ad:
a0:96:83:50:c3:22:b3:ca:dc:73:69:1b:eb:ba:5e:
d5:cd:f4:3f:d9:5b:9c:b6:0d:30:53:45:45:7f:71:
0d:50:73:cc:aa:31:c1:7e:77:a2:b2:6b:a7:9a:89:
8e:b6:24:5d:a1:b0:fb:4f:02:c0:14:93:52:92:eb:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:34:FD:8D:EC:94:B8:46:EB:D0:29:2E:C1:C9:07:29:72:AB:96:CE
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/vjT9jeyUuEbr0CkuwckHKXKrls4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
bf:e4:b9:f5:de:a1:57:14:22:ba:bb:58:53:f2:68:90:cf:51:
38:70:57:ac:c4:5e:1e:f6:b9:58:12:99:48:4d:f3:34:81:2a:
4c:89:f0:f7:36:e8:17:da:0f:e2:e1:64:a7:7b:f4:57:db:32:
aa:c1:c5:fc:33:c5:62:17:51:97:43:73:b7:15:98:a4:ff:46:
8d:53:8e:f7:8b:20:7e:72:bc:6d:90:29:c7:88:71:8c:8d:64:
2a:bb:6a:89:a4:8c:fd:0a:13:e5:f8:cb:e2:85:67:0a:29:d9:
38:6e:45:75:40:ea:bb:f8:c6:5f:1e:29:87:5a:33:62:cf:42:
b6:a8:87:4b:6b:d3:47:ad:e7:cf:26:95:88:e1:8e:79:00:ad:
18:72:be:51:91:60:67:cc:cc:e8:31:8a:40:c7:65:48:2f:2d:
09:2e:22:60:66:e1:99:a7:5c:56:c5:55:00:2d:9d:eb:65:11:
4d:f6:f4:ff:df:ed:33:11:52:a8:a3:54:a0:d8:d0:c5:e1:2c:
a9:c7:d6:90:e2:54:2a:2b:9d:a7:c1:72:0b:79:22:d7:e4:bd:
df:ac:86:5a:72:ed:6b:d7:aa:1d:5e:4e:f1:d0:5a:91:be:f8:
83:47:f6:b8:8d:2d:23:77:28:e2:52:75:9f:94:9b:fa:89:4b:
4a:bf:b6:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:28:56 2025 by rpki-client