Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/0kYdezPmX1qT6H6fE4aFeX9dU9g.roa
File: 0kYdezPmX1qT6H6fE4aFeX9dU9g.roa (raw, json)
Hash identifier: QhLyy9pFPPu4SpjaDAsAl6APe6Cb+6ae9LhnxYpP3TM=
Subject key identifier: D2:46:1D:7B:33:E6:5F:5A:93:E8:7E:9F:13:86:85:79:7F:5D:53:D8
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019786D2AD45D2D2D1E4C57CC5FE80FEAA77
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/0kYdezPmX1qT6H6fE4aFeX9dU9g.roa
Signing time: Thu 19 Jun 2025 06:14:03 +0000
ROA not before: Thu 19 Jun 2025 06:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 07:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:d2:ad:45:d2:d2:d1:e4:c5:7c:c5:fe:80:fe:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 06:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2461d7b33e65f5a93e87e9f138685797f5d53d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:b1:6f:73:c4:f9:2c:b2:1c:fb:d3:ad:5e:
a1:2f:21:d5:49:d9:b0:e5:55:5d:75:e5:95:d0:15:
e9:9c:22:52:09:f7:00:3c:6f:7b:d7:d0:2e:f5:9d:
b1:cd:98:49:bf:c9:79:5d:1c:b2:37:46:b7:ba:27:
05:55:5f:a4:72:71:72:81:fa:7d:20:2f:83:c1:dd:
5b:ab:40:03:d3:f0:3e:31:f0:2f:22:4a:28:93:b4:
59:44:02:9d:4d:84:92:fe:35:39:87:e4:fe:a9:57:
d2:1d:cb:f6:41:e1:ff:80:2e:19:55:44:4c:da:d6:
ef:a4:3e:3d:b3:bf:e6:d0:45:bf:fa:e8:c5:9d:76:
e4:b9:19:40:6c:81:3f:9b:ee:f1:0a:17:4b:63:a4:
90:24:41:89:cc:95:e0:4e:49:cd:ed:53:dc:16:2b:
b3:84:59:72:a2:e9:c1:02:e5:d0:85:b1:be:74:0d:
61:14:89:64:7a:2a:1e:7c:28:b3:c3:35:a0:ed:12:
83:72:7a:48:65:26:73:1a:63:f1:ef:c7:7c:6d:d3:
79:80:00:dd:21:f5:cb:be:d0:35:23:0d:a4:e7:e9:
10:9d:20:4c:82:bf:8f:a1:de:74:49:3a:06:26:88:
a6:36:b3:f3:35:c7:ad:b6:e0:1f:11:b8:fa:d6:ef:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:1D:7B:33:E6:5F:5A:93:E8:7E:9F:13:86:85:79:7F:5D:53:D8
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/0kYdezPmX1qT6H6fE4aFeX9dU9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
50:45:10:2c:1e:29:63:94:6a:a3:7d:88:fc:30:c7:9f:15:d2:
c4:9b:cc:06:aa:9b:d8:2e:a9:9e:2e:a0:bd:2d:94:10:34:b6:
fb:5a:aa:da:ff:0f:fd:ce:f2:6a:6a:a2:20:a0:6c:9b:06:6b:
57:08:99:5e:42:60:e4:8f:99:f7:65:88:8b:8a:30:d2:77:40:
37:cb:06:f4:b0:f4:2c:c2:51:fc:b4:06:86:c6:7f:70:3a:12:
96:7d:a4:44:e6:58:ea:15:eb:17:1b:20:e1:44:c0:ba:99:26:
70:a3:77:07:4d:99:41:a5:3e:dc:65:4b:51:a7:7a:55:77:44:
a3:92:a5:19:f7:90:3a:b2:e2:e9:2a:52:3f:07:85:4e:c8:2c:
6d:58:8e:f6:fb:80:8d:9c:59:ea:04:52:2b:64:8e:3e:02:da:
00:49:7c:9e:c6:0e:b3:cf:ef:b6:05:97:be:09:f8:76:2f:8b:
04:7f:0f:f5:67:75:7f:a3:41:f9:3d:3f:21:c0:66:25:8f:ae:
27:b7:52:ac:25:f7:1b:6c:3e:f3:75:dd:3e:10:83:c6:19:84:
5c:75:05:b3:72:af:4c:9e:c8:be:8c:bd:f1:18:78:a8:32:a7:
ba:18:bb:20:e0:80:30:40:60:35:fc:01:67:17:5b:0a:a5:b4:
5d:a4:ee:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:18:45 2025 by rpki-client