Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z70Pv_80w4k0NRjwpcPsJIVFDwc.roa
File: z70Pv_80w4k0NRjwpcPsJIVFDwc.roa (raw, json)
Hash identifier: SqJBIkewouy8oL//pGC+clVB9P35pMWxko2GC15w+To=
Subject key identifier: CF:BD:0F:BF:FF:34:C3:89:34:35:18:F0:A5:C3:EC:24:85:45:0F:07
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F8561D81377D50072D32D032FB6EEC8A
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z70Pv_80w4k0NRjwpcPsJIVFDwc.roa
Signing time: Thu 22 May 2025 14:11:55 +0000
ROA not before: Thu 22 May 2025 14:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 May 2025 15:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:56:1d:81:37:7d:50:07:2d:32:d0:32:fb:6e:ec:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 22 14:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfbd0fbfff34c389343518f0a5c3ec2485450f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:c7:5e:67:ed:8f:dd:fa:62:4c:a7:45:60:
00:cd:aa:bf:de:63:42:f2:ec:de:72:f8:0e:fe:4e:
d3:65:f3:c7:2e:d8:49:64:64:e4:a3:3f:df:47:5a:
bb:10:bf:17:29:63:77:b6:62:67:73:77:fe:bb:5e:
89:88:40:70:63:05:85:49:ef:67:34:d3:c9:85:24:
90:e8:6f:54:a3:16:2e:b0:32:7f:ab:8e:2c:1e:fa:
2d:8e:67:73:ca:56:31:95:f7:67:6b:cd:5d:c4:0d:
ee:45:18:05:66:96:06:04:a2:8d:20:ea:b0:fb:2b:
41:63:c5:f8:5d:fa:07:1f:2d:67:d8:1c:ec:28:2c:
2b:97:fb:c8:fd:44:70:98:5f:96:b8:7b:ec:6f:90:
65:b6:ae:b6:17:86:c3:9d:66:f9:d4:42:dc:0a:b9:
dd:85:36:35:48:4c:ec:e9:63:0d:4a:3c:25:9d:f3:
17:07:7a:7d:71:9d:c2:0f:44:c0:6d:ae:fa:24:19:
e6:3b:bd:e8:a2:96:d1:09:5a:79:85:4d:c0:2b:e5:
93:9f:8c:96:d2:5d:cb:9b:0a:53:ec:de:e3:f8:d5:
ae:b0:ad:2d:a8:33:e0:09:c6:ce:3c:01:4a:b6:92:
18:da:00:37:2e:f9:53:b4:66:ed:4b:41:5b:92:ff:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:0F:BF:FF:34:C3:89:34:35:18:F0:A5:C3:EC:24:85:45:0F:07
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/z70Pv_80w4k0NRjwpcPsJIVFDwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
65:d7:f8:6e:a8:8f:cf:2b:fe:bb:32:f7:f2:4f:c4:d5:6f:d0:
5a:b1:9f:87:1b:6e:0a:e5:1f:8a:81:c3:ae:7b:4f:44:9f:17:
53:d9:a9:b0:e7:20:63:5e:b5:98:89:c5:80:04:1d:00:66:21:
09:cc:54:06:d3:60:a3:95:75:dc:b0:48:b0:f3:36:98:32:bc:
cb:91:7a:29:46:44:aa:5b:81:72:da:7e:93:25:ea:af:68:d6:
62:69:b5:29:90:84:1b:5c:45:c0:a5:0c:01:f7:b4:ab:12:69:
0b:14:f7:d6:98:b5:a8:e4:51:d1:d2:ca:d1:0c:9a:c4:7a:e8:
20:28:17:72:c6:5e:f1:68:77:f1:03:54:a0:74:e5:61:e9:7e:
56:63:32:42:05:ea:d5:58:98:07:57:a9:35:21:13:d0:cd:01:
11:a3:c7:04:98:50:30:44:3e:fa:e0:d2:26:52:b8:53:dd:cd:
bb:bf:b9:07:b3:68:7f:b2:2a:7b:a5:ce:b5:a3:ad:af:7d:cf:
bc:fc:c2:c4:5d:d3:de:90:91:01:70:ed:47:90:86:46:c7:fb:
69:10:d0:6e:38:7c:e6:78:14:f9:71:37:53:d9:37:f1:0d:21:
63:63:df:a8:85:65:07:d2:dd:46:74:ca:f3:75:49:7a:c7:47:
bf:90:4b:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:49 2025 by rpki-client