Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zR5pcyckYRheC2o4BJ4loJ4SRVU.roa
File: zR5pcyckYRheC2o4BJ4loJ4SRVU.roa (raw, json)
Hash identifier: WS5G1cUk2u83PdBy6tsriOMP81Gn0/XFoonWJoLytqw=
Subject key identifier: CD:1E:69:73:27:24:61:18:5E:0B:6A:38:04:9E:25:A0:9E:12:45:55
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196989C6CA664C99C41ACA9B6D08BB2CFC9
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zR5pcyckYRheC2o4BJ4loJ4SRVU.roa
Signing time: Sun 04 May 2025 00:05:10 +0000
ROA not before: Sun 04 May 2025 00:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:989b:ca69/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 04 May 2025 00:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:9c:6c:a6:64:c9:9c:41:ac:a9:b6:d0:8b:b2:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 4 00:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd1e6973272461185e0b6a38049e25a09e124555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:58:3a:37:50:36:13:61:df:c6:63:20:f8:
5e:e6:1e:7b:3b:d2:78:57:ac:6b:e7:a1:34:38:d4:
6d:20:15:52:df:cc:64:a8:04:a5:91:aa:05:c4:d9:
77:41:88:d6:e1:c6:f8:ac:fe:16:9a:24:cf:d5:c0:
da:d7:96:d8:10:2b:ce:d6:05:f8:93:6c:41:dc:76:
9b:a1:c3:d9:af:fe:da:1a:33:95:80:5f:b5:82:41:
0c:c9:18:ce:9d:74:12:cd:c0:1a:bb:bd:82:18:f2:
c8:ed:99:b5:54:8a:09:6d:bc:2c:dd:be:47:b2:07:
ff:ac:18:da:d4:67:bc:e0:99:36:14:e5:c9:03:f6:
4e:c3:01:e9:85:6b:8f:1b:35:f9:75:f6:6b:be:1c:
cd:40:18:66:3c:c9:eb:99:ab:a3:29:96:c3:aa:5d:
17:b0:dc:cc:fe:d2:25:d3:95:74:96:da:47:00:79:
3a:2f:b2:f8:d2:54:ce:f1:3c:a2:52:d0:c4:96:d1:
19:ca:46:21:15:db:5d:f7:da:e1:8b:e1:26:c4:43:
f8:a7:36:d4:73:b0:b2:0a:34:20:58:32:bb:72:5b:
52:a6:01:a2:55:cd:a0:ac:f2:f6:c2:7f:c1:ce:79:
f9:80:ab:3d:b2:99:f5:e4:02:43:68:f7:00:8a:2b:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1E:69:73:27:24:61:18:5E:0B:6A:38:04:9E:25:A0:9E:12:45:55
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zR5pcyckYRheC2o4BJ4loJ4SRVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:989b:ca69/128
Signature Algorithm: sha256WithRSAEncryption
3a:fe:0a:24:bf:5f:74:b9:81:3f:b5:23:f7:14:5e:ef:60:d7:
3b:dc:e5:84:5f:fe:68:8e:94:c7:8a:80:60:91:b9:0c:df:07:
03:7c:e1:ee:24:55:91:02:31:31:1e:18:af:66:a3:76:76:73:
22:b5:aa:ed:5e:20:31:05:ca:fe:62:49:a5:e5:88:b3:bd:61:
41:cd:c4:9a:29:4d:a4:23:31:40:00:60:cb:24:97:6a:72:90:
97:c3:b7:a0:43:89:cd:7f:fd:c8:e4:43:f6:ec:33:67:88:2e:
8d:58:65:54:df:45:90:fc:af:9a:c9:62:61:5e:91:e5:4a:2c:
ac:14:80:d4:b6:c4:03:a7:33:a1:56:59:02:2f:1a:06:49:c3:
ac:b8:2a:85:d1:2c:f3:81:87:57:14:8c:18:d0:40:a5:50:27:
8b:f8:a1:b6:15:43:aa:c5:66:6f:d8:41:04:36:4a:69:79:56:
05:d8:73:fa:6d:aa:33:bd:67:1e:40:8d:72:5d:43:a4:ce:36:
0d:a6:ed:d1:7e:83:55:4a:36:08:67:57:25:c2:ce:8c:1f:83:
51:e6:7b:a0:fd:2d:65:cb:cd:b8:0f:22:8d:a1:3d:fa:5f:eb:
c4:d4:77:8e:89:a2:29:ca:13:e3:f5:b4:89:c6:39:bc:6b:8e:
d2:48:34:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:36 2025 by rpki-client