Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wgEvglv7USmqaIlQ4v0UPsNpGmE.roa
File: wgEvglv7USmqaIlQ4v0UPsNpGmE.roa (raw, json)
Hash identifier: IQoj8Tb1EJA/+UE7OLJagUENMkeXyDPt7YQRMwDzHU0=
Subject key identifier: C2:01:2F:82:5B:FB:51:29:AA:68:89:50:E2:FD:14:3E:C3:69:1A:61
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01974A470503C00102DDE62E4A68A975F167
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wgEvglv7USmqaIlQ4v0UPsNpGmE.roa
Signing time: Sat 07 Jun 2025 12:04:17 +0000
ROA not before: Sat 07 Jun 2025 12:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
2001:67c:64:ffff:0:197:4a46:fc44/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 07 Jun 2025 12:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:47:05:03:c0:01:02:dd:e6:2e:4a:68:a9:75:f1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 7 12:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2012f825bfb5129aa688950e2fd143ec3691a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:f8:88:9d:ed:e1:18:3e:54:52:89:af:e3:
d5:d5:d6:39:55:60:f1:b3:34:75:53:49:4b:3e:09:
5c:1a:e5:8e:e7:5c:00:3a:95:b1:fb:3a:4e:d3:cc:
9c:99:41:b2:42:90:cb:b9:c5:89:f8:e1:6f:4f:80:
a3:e7:cb:bf:27:d9:2c:7e:10:19:aa:84:80:3f:3e:
0d:ee:b7:8c:52:ef:71:c1:4d:19:5a:11:21:05:f1:
fa:67:f5:d6:f7:ca:2a:36:89:b7:13:a7:9b:7e:d4:
64:e8:3c:b0:08:12:ff:64:eb:c3:85:4c:d6:23:c9:
5f:63:32:ca:3d:8c:ef:04:d6:1b:96:71:e2:74:4b:
32:cc:f2:ab:8b:e9:f6:43:aa:09:ed:73:75:b5:c7:
98:02:45:48:eb:47:87:ac:06:d5:41:65:e6:68:eb:
e7:0a:7d:36:2e:2a:12:47:f3:1d:fd:e9:46:a3:85:
25:3a:38:5a:32:19:c9:1b:a1:49:59:de:c3:c2:ee:
b3:a1:8e:44:7e:c3:e5:f3:b8:69:87:15:55:d5:d5:
42:48:9d:00:a4:7f:b0:5a:ee:b7:6a:69:1b:64:2f:
19:09:92:fc:fe:23:5a:19:c1:82:5f:54:3b:be:50:
e1:ce:ba:2d:16:b0:90:fb:e9:e9:7a:16:9c:8c:cb:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:01:2F:82:5B:FB:51:29:AA:68:89:50:E2:FD:14:3E:C3:69:1A:61
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/wgEvglv7USmqaIlQ4v0UPsNpGmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
2001:67c:64:ffff:0:197:4a46:fc44/128
Signature Algorithm: sha256WithRSAEncryption
91:b4:b3:52:c0:b8:40:90:cf:91:df:81:c7:30:ea:b4:04:2a:
03:39:17:6d:e6:11:a8:ae:68:01:ff:75:1b:48:f8:df:ce:9e:
9c:d1:0a:35:c4:42:ab:2a:c4:32:81:1e:12:53:69:fc:5c:30:
d6:67:a5:11:45:65:7a:21:e9:16:0f:8a:bc:93:2f:03:c7:9d:
dc:57:db:10:3d:18:e7:0b:cd:6b:cb:48:1e:23:c1:92:ac:bd:
92:a3:35:c6:78:84:41:b0:b9:f1:b2:20:5a:d8:ae:43:70:6d:
e5:ef:11:55:5f:63:8d:2a:8c:10:e8:c7:4b:8b:d6:49:52:ca:
2a:8b:ba:71:56:8e:92:3a:8d:82:53:df:3d:69:28:00:f3:2a:
ec:f3:41:2d:03:fe:ff:c4:4b:2a:44:c4:35:05:42:35:6e:95:
74:2d:bb:5d:e8:39:72:ef:60:85:ce:13:1f:85:55:e0:11:0f:
d9:3d:60:90:6f:67:7f:d2:f5:50:64:ae:c8:25:1e:0d:ed:0b:
5f:50:50:f2:0c:55:30:36:1a:07:91:24:7d:8f:4e:af:f8:66:
f9:92:d2:5a:08:7b:d3:e1:aa:2d:f7:18:c2:85:99:7c:10:dd:
44:08:d2:4e:b3:ab:a2:e9:31:69:0c:cf:8b:7a:c9:1b:f9:58:
3b:71:cb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:27:27 2025 by rpki-client