Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wEqc-3QV3BqHSIznT_Cz3VdSxDI.roa
File: wEqc-3QV3BqHSIznT_Cz3VdSxDI.roa (raw, json)
Hash identifier: Mw46teeVRHdoOeqM+Xm5fB1XciRFN5M2F5afbq9XuJs=
Subject key identifier: C0:4A:9C:FB:74:15:DC:1A:87:48:8C:E7:4F:F0:B3:DD:57:52:C4:32
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0197079240D06A1AAFEA8CB29CD78288A7F7
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wEqc-3QV3BqHSIznT_Cz3VdSxDI.roa
Signing time: Sun 25 May 2025 13:11:54 +0000
ROA not before: Sun 25 May 2025 13:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 14:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:07:92:40:d0:6a:1a:af:ea:8c:b2:9c:d7:82:88:a7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 13:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c04a9cfb7415dc1a87488ce74ff0b3dd5752c432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:aa:e4:a2:f3:f8:a0:eb:6f:c7:d5:ed:aa:
c7:08:b0:aa:3b:c2:92:ab:e1:1e:2f:57:6f:1e:73:
f5:b9:f2:40:8a:16:38:88:de:51:d1:61:df:9a:ec:
b8:84:fd:8d:76:59:3b:92:dd:fc:c2:67:2b:80:bc:
18:1c:2f:c3:6b:89:23:4d:0f:c0:a3:08:ee:04:77:
17:7c:1e:64:fa:10:98:63:1a:3f:88:b1:4e:49:c7:
8c:36:9f:57:2b:6b:26:18:5d:ee:7f:1f:1f:d1:b5:
3c:ac:b5:c8:eb:0c:a7:02:53:81:1b:3e:41:2b:d1:
c2:18:b9:48:db:47:2b:fd:02:48:86:47:82:a4:d1:
60:07:27:4f:44:0e:5a:b6:f7:c1:78:df:88:df:09:
03:a6:08:65:de:30:1f:cd:5a:bc:fe:30:b2:2f:b7:
9c:1b:83:d8:f6:69:72:fe:45:8f:80:68:2f:10:99:
55:68:23:67:3e:11:f4:44:da:69:80:1a:96:c4:15:
24:d6:51:4e:31:99:c0:83:ed:f7:e3:67:f9:88:65:
c3:a9:4e:8c:f9:bf:a7:10:8e:33:72:50:7d:8f:18:
5f:2a:34:9f:0a:1d:e4:67:07:ea:87:8e:8e:26:3a:
08:30:05:6e:ea:63:ee:e3:a7:4f:01:60:8a:8a:fe:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:9C:FB:74:15:DC:1A:87:48:8C:E7:4F:F0:B3:DD:57:52:C4:32
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wEqc-3QV3BqHSIznT_Cz3VdSxDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
96:6d:bc:00:29:af:15:88:aa:28:4d:eb:84:a4:3b:79:75:d4:
2e:14:c2:3b:19:3c:68:ef:9a:d6:34:9d:41:e1:7b:c3:6d:02:
db:23:e2:c5:25:a5:a9:c9:d1:c4:09:94:1f:cf:29:e8:c7:bd:
35:15:21:2d:09:98:3a:3e:5b:29:66:8e:66:e3:16:02:86:f2:
87:eb:68:69:79:e5:2c:e1:44:d4:6e:ec:5b:1d:97:4a:0c:c6:
a7:5b:42:cf:bf:af:3a:8d:b7:ab:9e:fb:bb:66:ea:f9:65:6a:
08:8f:9f:c2:d0:a6:28:6c:5a:d6:f0:10:1f:a8:fe:38:f4:a0:
2e:e0:4b:9f:95:96:00:9a:b5:e8:1b:31:29:68:b3:95:77:91:
4c:9b:c6:6b:fb:53:bb:77:75:a7:17:58:91:3f:22:0e:d6:cf:
a3:88:59:86:b7:cc:5b:a9:15:17:f6:61:55:13:1c:d1:c4:fa:
35:3a:4e:bb:68:b3:83:bd:b0:21:ab:6c:9f:a9:56:cd:a7:be:
2f:28:93:f8:ad:c9:96:67:c0:b0:19:a4:ca:9b:9a:c1:4d:97:
2a:13:a7:c4:36:9e:8a:31:db:4a:f1:8e:68:7d:ce:92:ff:e7:
35:3c:38:e2:60:ed:0d:43:db:66:30:65:aa:b8:61:df:e9:20:
aa:ca:8f:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:47:31 2025 by rpki-client