Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/xPDnVXvKTcFVze_zPtppUHl_hKY.roa
File: xPDnVXvKTcFVze_zPtppUHl_hKY.roa (raw, json)
Hash identifier: gXl9gpwmI5HBIPIGMgIFhuFTP7t6wXuAKy3pv3JDsgw=
Subject key identifier: C4:F0:E7:55:7B:CA:4D:C1:55:CD:EF:F3:3E:DA:69:50:79:7F:84:A6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019729E9266C46590642661492FE8A5A47AE
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/xPDnVXvKTcFVze_zPtppUHl_hKY.roa
Signing time: Sun 01 Jun 2025 05:13:54 +0000
ROA not before: Sun 01 Jun 2025 05:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Jun 2025 06:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:29:e9:26:6c:46:59:06:42:66:14:92:fe:8a:5a:47:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 1 05:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f0e7557bca4dc155cdeff33eda6950797f84a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:0c:5b:b8:c8:c1:2a:f9:af:f7:3c:8b:90:
8a:81:ed:54:82:e1:b9:a3:56:0d:62:ac:c1:03:77:
f4:68:8f:c9:7c:d9:65:47:12:21:4f:7f:b9:3b:87:
21:a8:dd:74:d5:39:55:3a:c1:e9:20:f5:31:5c:1f:
ca:56:3c:59:88:ff:05:7a:ff:21:51:2e:fe:9a:ff:
95:f3:58:52:8f:e7:28:70:38:92:d6:f9:bf:ef:8d:
27:db:55:42:93:93:fb:90:37:6b:00:f1:cc:b9:01:
36:23:8f:5b:b1:12:35:3a:29:9d:fb:ea:e8:14:8b:
f8:d7:a9:23:a3:bb:f2:1d:2a:ee:ce:f6:c1:e4:f7:
cc:90:6b:3f:a1:0d:f6:20:c9:54:68:d3:a5:cd:bd:
c4:14:92:51:0b:e2:40:aa:1a:9c:45:2f:12:b7:33:
4f:59:91:30:81:d8:1d:a7:66:6a:7f:6a:f6:3a:ba:
92:67:c2:58:b3:8c:32:26:9d:02:fb:a0:14:dd:00:
a0:8d:ce:fd:a6:ab:61:b8:14:c5:dc:e6:3b:1d:42:
88:aa:0d:2d:52:1a:af:b9:aa:86:3e:ed:7d:36:3b:
43:63:e9:58:c0:2f:c4:81:07:fb:20:34:6f:23:66:
78:98:52:0b:0a:7f:56:b9:7c:b2:2d:79:92:82:73:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:E7:55:7B:CA:4D:C1:55:CD:EF:F3:3E:DA:69:50:79:7F:84:A6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/xPDnVXvKTcFVze_zPtppUHl_hKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
Signature Algorithm: sha256WithRSAEncryption
30:53:25:2c:19:3d:85:3c:43:53:1a:db:9d:22:66:f9:49:b5:
1d:d4:f1:85:49:06:10:10:f9:cd:aa:4d:d1:c2:2a:da:63:c9:
17:40:95:65:81:43:f3:9c:dd:f7:48:fa:dd:07:61:cc:e6:8a:
bb:ea:e0:ed:52:83:56:73:5e:48:60:0a:e9:cf:5e:a8:11:a7:
87:9c:b4:30:90:90:54:ff:58:bd:36:02:e4:b0:e3:b7:e6:c4:
73:09:c1:30:60:82:23:ca:36:b1:79:bf:fb:ae:ca:e9:25:36:
f2:45:48:8e:bd:23:9b:a2:09:d4:56:b8:26:f0:92:74:4b:18:
7d:4b:38:60:89:dc:99:2f:18:73:45:d1:5c:d2:3a:1c:08:fd:
5a:c7:e0:72:05:88:92:97:13:b4:7c:8c:56:59:92:0a:6e:56:
41:e4:a5:25:67:61:ba:f6:7d:e3:d1:19:77:7f:28:69:84:15:
3c:8c:a2:ad:cc:f4:9f:e5:3c:4f:d9:21:65:ff:ec:b9:55:59:
40:c3:2d:58:68:e5:73:75:0e:44:9d:37:c7:43:04:b6:4e:66:
25:06:c4:2e:e5:f6:dd:a6:8b:cd:b8:30:04:de:31:d7:6e:ea:
bf:b1:3c:c7:c2:3c:72:43:e4:73:1b:d0:a7:cf:68:30:f6:c5:
2f:ff:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:15:22 2025 by rpki-client