Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/0e5SHzJ3Zufb09kJ9-RBJvCfJxw.roa
File: 0e5SHzJ3Zufb09kJ9-RBJvCfJxw.roa (raw, json)
Hash identifier: V5Dl33Jl7JZJd02ChGYPvBCSl29lP4FGTDDLprA9n50=
Subject key identifier: D1:EE:52:1F:32:77:66:E7:DB:D3:D9:09:F7:E4:41:26:F0:9F:27:1C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979F7EE6F4D862DB41AEE2DA6539EB7EAC
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/0e5SHzJ3Zufb09kJ9-RBJvCfJxw.roa
Signing time: Tue 24 Jun 2025 01:13:03 +0000
ROA not before: Tue 24 Jun 2025 01:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 02:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9f:7e:e6:f4:d8:62:db:41:ae:e2:da:65:39:eb:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 24 01:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1ee521f327766e7dbd3d909f7e44126f09f271c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:d5:d6:c2:34:61:d9:0f:fe:36:ba:27:f1:
5d:c9:7c:59:ad:0b:5c:dd:28:0d:80:a9:88:7a:54:
72:26:ac:35:19:38:0f:42:61:d9:fe:62:5e:7f:ed:
a9:01:10:4a:fa:b5:11:9f:51:24:15:4d:af:bb:c6:
d5:27:65:be:e6:7f:aa:11:46:a0:3d:16:4f:c6:50:
6a:da:89:74:0b:89:21:13:8d:ba:7b:fc:df:91:19:
ee:3c:58:7c:35:f2:05:54:e7:22:72:15:16:34:47:
7f:45:f7:ea:6b:ea:99:6e:48:0d:44:f5:87:19:65:
62:bb:35:4e:da:8b:8c:36:61:e8:96:2f:9d:e8:c0:
e4:f5:68:c9:4f:16:bc:23:39:4d:41:4f:8f:d6:3a:
e7:da:36:2c:4b:67:f0:4f:f3:06:7e:2c:1f:05:cf:
fd:48:d8:c8:46:63:10:3b:4f:35:19:39:32:c9:6b:
ce:6d:d6:a8:f9:44:fa:56:0b:14:2f:20:d9:d7:0e:
ed:2b:ad:31:98:b1:b4:2b:3d:ba:bb:e3:f5:89:9a:
7b:8c:58:e9:03:3f:7b:e6:ef:f4:2a:17:05:3e:34:
be:ad:16:a3:ac:d0:60:9f:4d:96:e6:89:27:6b:1d:
74:b7:e1:c6:c7:a2:0d:e7:b2:30:9e:1f:d1:39:1e:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:52:1F:32:77:66:E7:DB:D3:D9:09:F7:E4:41:26:F0:9F:27:1C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/0e5SHzJ3Zufb09kJ9-RBJvCfJxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3f:d2:9b:ed:46:55:84:a6:c4:3d:e9:b2:80:a9:36:1c:0d:97:
4e:79:33:f9:df:8e:55:ad:56:7d:a5:0a:62:d9:7a:52:c9:ae:
40:25:b7:8a:12:60:c2:96:28:93:46:fe:1d:2a:6c:30:89:d2:
1e:cf:b4:70:44:8d:b0:0a:bf:3e:45:57:98:34:cb:86:44:75:
8f:0f:8b:de:d8:17:f0:3b:ce:e3:bd:14:7a:74:6e:b3:a3:be:
c7:ab:a3:bf:92:9f:b8:35:89:23:31:96:b8:a1:58:5a:28:ab:
38:d0:ec:78:f2:f9:16:5e:2c:f7:5e:48:77:03:ec:93:1c:23:
12:88:f3:e7:d0:b6:21:a7:57:1d:3a:ab:40:ac:c9:80:81:af:
ea:1e:a9:07:d9:22:7f:ee:32:ac:40:24:87:ac:ce:27:52:09:
84:10:87:ed:83:cf:69:d2:b9:39:1a:ce:55:63:7e:e9:a7:79:
00:ea:51:de:3e:32:9c:96:f9:e5:92:ca:03:80:4b:d8:71:93:
18:28:0a:bb:02:e3:cd:cc:02:ec:60:d2:4d:71:07:c1:b8:c9:
3f:f2:45:bc:c5:0d:97:e1:f0:7d:f6:14:34:ff:05:4b:02:25:
8d:2f:d7:d8:e8:56:3e:03:6e:70:f5:bb:9f:6e:4a:e4:ae:df:
53:bf:d3:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:06:51 2025 by rpki-client