Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zu6x95W-K1sPvSJpV2rsQiWnC8Y.roa
File: zu6x95W-K1sPvSJpV2rsQiWnC8Y.roa (raw, json)
Hash identifier: IUdJNF9rrTh6HYzdt9GohhkHMnEoWfY7CAvxhvdl9Os=
Subject key identifier: CE:EE:B1:F7:95:BE:2B:5B:0F:BD:22:69:57:6A:EC:42:25:A7:0B:C6
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196F3D65C2F46EE34E75F43645F6D471D21
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zu6x95W-K1sPvSJpV2rsQiWnC8Y.roa
Signing time: Wed 21 May 2025 17:13:53 +0000
ROA not before: Wed 21 May 2025 17:13:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 21 May 2025 18:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:d6:5c:2f:46:ee:34:e7:5f:43:64:5f:6d:47:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 21 17:13:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceeeb1f795be2b5b0fbd2269576aec4225a70bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:e0:ac:17:d4:8d:8e:dd:2f:5c:5f:8e:ab:
db:c7:bb:8b:bf:af:88:9d:a2:74:eb:75:cc:66:82:
b4:44:6f:fb:86:54:6d:4b:f3:5f:c0:92:5c:b9:ca:
7e:6c:e1:e9:09:be:81:34:6d:8c:6f:71:2f:82:11:
32:27:99:b0:52:4e:5e:68:5f:92:a1:1d:4d:28:b6:
a7:c0:8b:19:23:48:3a:bb:94:f2:38:b5:02:85:18:
fa:50:0d:92:a7:0f:15:07:6d:f3:d8:33:25:18:54:
29:7e:54:fb:3c:6f:b9:6c:a4:94:a2:69:3c:37:58:
38:15:95:e1:fa:42:26:34:c1:42:42:40:f4:d7:55:
c8:7c:8a:ba:58:aa:3b:16:d4:b7:90:61:9d:22:ae:
30:b9:61:69:22:03:77:71:2e:6d:a4:dd:89:08:2a:
9e:78:6a:f9:f3:6b:1d:85:b0:01:9d:4c:d0:4e:51:
53:ee:93:c8:c7:58:cc:8d:00:35:6a:8a:36:38:7f:
7f:d0:a2:cd:a3:e6:d4:fe:38:e6:c2:59:61:11:90:
a4:a5:dc:48:c6:09:92:69:bc:a8:87:ad:22:86:af:
a7:13:35:8f:9b:42:3f:42:d2:10:31:e0:34:45:05:
f6:ce:1b:b5:33:e1:29:2f:1a:65:ed:fe:5e:ed:3d:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EE:B1:F7:95:BE:2B:5B:0F:BD:22:69:57:6A:EC:42:25:A7:0B:C6
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zu6x95W-K1sPvSJpV2rsQiWnC8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
67:86:ab:3b:50:ed:41:1c:90:ab:20:d5:4f:28:d1:c5:7f:86:
b2:c2:49:fc:6b:15:da:e9:b6:a0:a7:b5:f5:f9:38:5b:6b:bb:
71:83:ba:7d:4e:ae:d8:e1:81:15:71:56:e9:fd:39:fe:c9:07:
6a:41:96:1e:92:4f:fd:19:b3:0e:65:ff:ce:6e:07:ed:5d:e4:
bb:07:04:21:be:1e:75:6e:56:b4:df:e2:b2:86:4d:41:1c:1f:
62:c0:92:f0:7f:f2:09:f5:38:dd:6d:a0:0e:c8:a3:d0:90:9d:
5c:4f:86:84:e7:84:0a:38:fd:83:1b:f9:70:31:ce:8e:39:25:
fc:55:6f:1f:08:2e:ef:96:4c:38:50:d0:bf:f9:f0:4f:ab:a5:
8f:ad:f9:d1:23:1b:ba:cd:80:0a:d6:85:ef:d1:d3:88:15:fe:
96:08:8e:a6:92:d5:1b:67:cf:a3:15:da:60:48:8a:9e:58:0d:
45:c7:70:46:a1:7e:bd:8f:8a:09:f1:8c:ed:62:c0:45:54:c4:
ce:06:03:b6:d5:79:91:08:29:d4:33:6d:04:f6:d2:7c:9b:b4:
84:64:d4:c3:b1:15:e0:82:d9:39:c7:59:3e:12:c3:fc:de:07:
13:fb:b1:80:4c:25:36:62:86:63:08:93:d9:01:74:50:ff:6c:
e7:a1:ed:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:00:07 2025 by rpki-client