Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/w47dVn3wqHOGvakfeTq_u4yoBR8.roa
File: w47dVn3wqHOGvakfeTq_u4yoBR8.roa (raw, json)
Hash identifier: Ng+a+q6aHIu32dl0eEtKsN9GMlGcL8RyiV8MvUhqoxA=
Subject key identifier: C3:8E:DD:56:7D:F0:A8:73:86:BD:A9:1F:79:3A:BF:BB:8C:A8:05:1F
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01974971B40A4594490CC532D547B012C756
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/w47dVn3wqHOGvakfeTq_u4yoBR8.roa
Signing time: Sat 07 Jun 2025 08:11:17 +0000
ROA not before: Sat 07 Jun 2025 08:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 07 Jun 2025 09:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:71:b4:0a:45:94:49:0c:c5:32:d5:47:b0:12:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 7 08:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c38edd567df0a87386bda91f793abfbb8ca8051f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:26:2b:c7:20:e4:4f:04:98:15:64:7d:8c:
15:73:89:cf:12:b9:9d:ac:90:e4:47:fa:0b:ab:7d:
3f:ff:21:28:88:1a:89:4a:ed:da:4e:04:a3:81:6b:
1e:06:8d:a1:60:ed:42:3b:a6:81:2f:47:7e:03:68:
4f:60:f8:85:29:54:77:20:27:8d:b1:af:0c:01:7c:
04:23:66:01:6d:14:9d:0b:02:ee:c2:ab:cd:06:f6:
70:cc:98:24:62:57:c7:e4:5a:55:c8:03:f1:9e:72:
3c:8b:c5:b8:5a:ed:c3:06:89:91:8c:d5:51:eb:99:
8d:1b:25:ba:b5:c7:ba:ff:9e:7f:0d:03:34:6c:36:
73:b1:e3:87:69:fe:f9:0a:82:0a:11:16:01:a2:d8:
8f:1d:f9:fd:ae:c2:02:9a:0a:d0:1d:29:67:eb:8c:
08:4a:b0:a9:4f:88:0b:76:b9:50:8c:00:16:7e:32:
76:20:28:5c:17:e0:77:30:c2:1f:04:d7:5c:5f:f4:
9b:e1:81:50:04:19:7e:50:9b:40:21:d6:1b:e7:b6:
de:ee:9a:8a:eb:a3:59:69:e5:55:5e:c4:05:0a:a7:
9a:dd:4f:9e:bc:82:48:74:62:c4:98:16:3a:db:d8:
47:2f:88:74:ca:b4:ee:ef:e2:c0:c2:8d:51:ae:b5:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:DD:56:7D:F0:A8:73:86:BD:A9:1F:79:3A:BF:BB:8C:A8:05:1F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/w47dVn3wqHOGvakfeTq_u4yoBR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
72:01:3a:6f:5e:f7:96:ca:7d:80:ed:b1:ad:c0:86:37:65:bf:
e1:45:29:aa:1f:19:dc:dd:d0:4a:0e:15:88:0c:d6:ad:e1:6b:
2e:57:55:2d:dd:52:94:fd:f6:b8:ce:f0:de:bf:25:51:9c:be:
34:81:0e:ef:8b:ad:ad:a4:ef:96:93:f7:6f:7d:a3:7b:7c:db:
c8:31:50:d3:26:44:b3:85:f5:fa:35:c5:e6:28:7c:9d:05:28:
24:de:00:a1:3e:ee:58:d2:db:95:43:70:cc:3b:03:f1:25:10:
bd:7b:c5:03:99:50:7b:c5:e2:f1:c2:9f:76:46:c8:6c:6a:ad:
23:9f:10:c3:93:14:30:d1:29:26:ef:6e:63:31:06:e3:88:61:
f0:58:25:84:3a:41:b2:1f:44:35:79:63:7e:3c:f0:51:5d:f3:
0b:f7:61:3c:b8:31:82:47:e7:b4:6b:e1:c3:34:08:72:9f:4e:
95:b6:0c:ee:de:8d:f1:28:17:fc:28:fa:90:4b:ee:18:09:eb:
6c:22:d5:6f:2d:a0:49:46:16:03:cd:c6:f9:45:17:b1:7f:8e:
76:f3:d5:23:62:59:2a:5b:b9:28:99:0c:01:96:d8:48:b8:55:
8b:60:d3:8a:1d:c4:55:ab:c2:c6:e2:3e:9a:c8:62:d5:17:1f:
82:81:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:14 2025 by rpki-client