Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zwFrfSEwcYJ30yuanEAad2mq6dE.roa
File: zwFrfSEwcYJ30yuanEAad2mq6dE.roa (raw, json)
Hash identifier: N20Wi9qX8bIQZHLuy+39mc1zHJYxzkKN+imieOhipGY=
Subject key identifier: CF:01:6B:7D:21:30:71:82:77:D3:2B:9A:9C:40:1A:77:69:AA:E9:D1
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196FDEB3F56126EEF9DE4917D26CDC7EB72
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zwFrfSEwcYJ30yuanEAad2mq6dE.roa
Signing time: Fri 23 May 2025 16:12:54 +0000
ROA not before: Fri 23 May 2025 16:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 23 May 2025 17:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:eb:3f:56:12:6e:ef:9d:e4:91:7d:26:cd:c7:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 23 16:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf016b7d2130718277d32b9a9c401a7769aae9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:92:22:be:21:59:6a:25:16:33:e7:5f:df:
d8:57:85:62:aa:f9:3e:02:94:5e:92:2c:fa:bf:42:
d4:9a:92:ed:bd:27:2b:fc:15:84:62:1f:31:c4:1b:
d9:12:0c:91:e1:14:16:ab:ef:07:47:91:88:7c:ee:
8b:fa:38:26:1e:1a:22:e0:e7:17:60:13:73:51:8c:
8a:b0:ca:3d:38:00:48:ba:9b:19:18:9f:90:a9:f6:
c4:fd:8c:48:f4:2b:18:0b:59:26:eb:d2:98:12:45:
78:be:51:ea:26:ae:82:98:f7:b9:ee:f9:80:96:0e:
3f:b1:e1:e3:e9:5f:ce:c8:83:23:f4:d6:7b:e3:38:
03:7f:d3:70:1e:5f:e7:7e:c7:4f:c8:ef:01:f9:81:
d5:84:60:28:47:d7:47:03:8e:28:13:34:63:10:dd:
41:e0:ea:e7:18:88:05:7e:e2:1c:eb:f3:63:95:a4:
a7:36:11:f4:62:b8:c2:e6:8c:77:be:82:01:da:af:
7f:fc:c4:12:68:95:2c:1c:db:88:e5:0f:72:db:36:
7a:8b:3c:c2:50:1d:97:18:b8:a0:70:01:3c:df:67:
0b:bc:e4:bd:62:63:33:5b:72:8f:f9:91:a8:d7:27:
95:dc:11:dd:a8:dd:31:ab:cb:45:ff:be:a0:7a:dd:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:6B:7D:21:30:71:82:77:D3:2B:9A:9C:40:1A:77:69:AA:E9:D1
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zwFrfSEwcYJ30yuanEAad2mq6dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
16:6b:82:5f:fe:bb:ef:b7:4e:91:6c:96:6d:c4:66:98:65:ed:
e2:77:35:8d:4a:d8:fd:cc:98:80:39:47:b2:4d:00:17:ec:4e:
f8:7f:e0:d6:90:3c:86:f7:5c:18:76:21:f1:2b:98:94:4d:77:
57:d8:4b:00:e6:8f:89:96:a8:c8:28:8c:93:b4:4a:ee:bb:71:
ec:76:a1:fe:f4:17:eb:d5:16:c4:4c:7c:3c:bb:6f:96:39:f4:
3b:cf:e6:8f:44:82:20:10:9b:8b:91:48:fe:a6:a1:6b:5c:d1:
29:7b:e0:0f:66:90:b5:d2:e0:4a:99:7f:70:13:6e:ab:06:83:
af:83:80:1a:f3:fd:ea:a9:c7:32:aa:67:ca:c7:cc:51:da:2c:
c1:da:81:c8:07:7a:6f:e1:ca:44:3f:ff:69:6e:34:48:b6:63:
80:6f:a1:20:31:e4:6c:ab:2b:b2:e8:c6:2d:74:58:b5:e4:dd:
42:7b:c8:98:7b:ee:d6:ee:3d:96:90:2d:8f:e9:fa:ad:82:d6:
d0:85:a0:71:e0:66:c9:ec:d9:b2:67:9a:48:15:14:87:02:9e:
aa:bd:64:63:cc:80:ab:e3:cf:95:5e:f6:cf:66:77:74:09:05:
6f:23:39:13:3f:68:4c:24:00:92:17:27:0b:41:12:9d:33:eb:
f2:40:e5:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:19 2025 by rpki-client