Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zyZ5LnvXHAM6KHSPasyk3-ubscI.roa
File: zyZ5LnvXHAM6KHSPasyk3-ubscI.roa (raw, json)
Hash identifier: leIkLbH05UW2AJ9Qj/OMv1xFbC+qvLEVuQQWFmg/nh4=
Subject key identifier: CF:26:79:2E:7B:D7:1C:03:3A:28:74:8F:6A:CC:A4:DF:EB:9B:B1:C2
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 0196956472F57C3E15876D1B5D93CAA3C8E6
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zyZ5LnvXHAM6KHSPasyk3-ubscI.roa
Signing time: Sat 03 May 2025 09:05:10 +0000
ROA not before: Sat 03 May 2025 09:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:9563:8c0d/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 03 May 2025 09:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:64:72:f5:7c:3e:15:87:6d:1b:5d:93:ca:a3:c8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 3 09:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf26792e7bd71c033a28748f6acca4dfeb9bb1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:fc:3e:0e:43:c8:61:3b:16:8c:66:96:fa:
26:66:3a:b3:77:e2:33:51:96:76:7c:88:33:a5:e8:
b8:4d:d3:c6:25:ab:1e:8f:6b:e0:4c:29:6d:99:d3:
ad:09:d9:19:fe:d9:b5:88:f1:97:3e:82:01:bf:bd:
1d:a5:55:cf:90:5d:04:3a:8a:35:f8:79:74:3c:fd:
d5:0b:a6:ea:4a:32:97:d5:a9:8e:22:cc:57:22:cd:
29:8b:b3:c7:8d:f0:94:e0:2f:b4:38:63:85:d4:94:
98:fa:df:73:1a:69:d2:db:ac:c6:81:14:b3:be:c7:
21:1f:9a:fc:47:d6:d8:62:b4:4f:f1:cf:a7:6e:70:
23:81:6c:3b:be:03:ff:86:83:6d:7f:aa:95:8b:cc:
0f:7d:a8:40:72:d2:a6:a5:c8:64:e7:4b:3c:cb:66:
83:6f:3a:09:93:42:34:de:13:f4:d8:a2:e5:4d:c2:
b5:66:94:c4:67:d8:35:01:39:1e:c7:d9:4f:66:07:
f9:fb:b4:e4:07:5b:c6:f3:73:37:ca:3a:c1:62:14:
28:6d:53:77:a5:e3:13:b0:c7:d7:ba:fc:91:95:94:
ce:d7:ba:68:0d:36:08:39:0e:50:8c:20:39:f7:63:
14:ed:22:2b:a4:2a:e2:53:2d:a6:ef:74:bf:f6:3e:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:26:79:2E:7B:D7:1C:03:3A:28:74:8F:6A:CC:A4:DF:EB:9B:B1:C2
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/zyZ5LnvXHAM6KHSPasyk3-ubscI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:9563:8c0d/128
Signature Algorithm: sha256WithRSAEncryption
09:0c:9c:62:ee:78:30:69:a1:bf:99:de:3d:20:bf:cf:13:9b:
5e:2e:3c:40:24:a4:1b:2f:7a:f0:8e:85:27:80:37:d1:13:62:
6d:78:cc:2c:b9:4d:75:48:32:a5:c9:ed:43:bd:ed:68:98:4d:
a3:da:f4:cc:c1:f4:34:da:bf:cf:4a:c9:e3:10:c8:ae:ac:3a:
2c:d1:c1:77:de:5f:4f:34:5b:98:6a:e1:64:a3:4b:1f:f1:47:
c7:95:7c:a5:24:66:9b:f4:2b:26:8d:99:d0:ee:43:fd:96:a4:
4a:31:c0:7f:0e:40:cc:33:67:da:09:e5:2c:e1:dd:41:b7:b6:
3d:bb:3f:8f:e1:e7:db:c5:a7:53:ca:04:30:e5:5c:f3:03:58:
a2:82:7d:24:a1:e9:e7:10:39:65:08:60:fb:e9:2f:e4:7a:2c:
c2:38:36:a3:ed:46:44:3a:89:2c:76:90:ff:6f:b8:69:9f:39:
62:e7:83:ba:9e:51:54:ec:c4:dd:78:82:90:53:a5:ed:d0:43:
56:b0:76:32:24:c9:92:ea:bb:c4:2f:be:07:0b:df:ee:8a:a8:
80:85:31:80:92:55:25:22:61:ed:93:eb:c5:83:ae:da:af:9c:
c8:03:1e:64:72:32:ba:06:2a:8e:c1:8f:4d:90:a4:3e:3a:54:
85:dc:42:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:46:28 2025 by rpki-client