Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-H6UUjpsQuWcY_OCMe_Mbz9jdmY.roa
File: 1-H6UUjpsQuWcY_OCMe_Mbz9jdmY.roa (raw, json)
Hash identifier: f79tUy2jZg0lP7Zwp6yS47ff/NvA2OH/CrSyIO7x+48=
Subject key identifier: F8:7E:94:52:3A:6C:42:E5:9C:63:F3:82:31:EF:CC:6F:3F:63:76:66
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978C68BBDDB5914435ADF27F7C0E903DF7
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-H6UUjpsQuWcY_OCMe_Mbz9jdmY.roa
Signing time: Fri 20 Jun 2025 08:16:03 +0000
ROA not before: Fri 20 Jun 2025 08:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 20 Jun 2025 09:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:68:bb:dd:b5:91:44:35:ad:f2:7f:7c:0e:90:3d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 20 08:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f87e94523a6c42e59c63f38231efcc6f3f637666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:42:9a:36:89:95:f4:f5:6a:0f:de:fd:2d:
2d:b1:ff:26:7b:b6:f6:47:12:48:f1:be:ec:08:d6:
58:f4:61:d9:73:9b:ad:a4:fc:f2:5c:c9:fe:ae:85:
0b:63:79:2e:f7:c4:a4:46:61:53:24:f4:24:f2:b8:
1d:d4:da:4a:41:f5:f7:a0:24:05:b7:b3:75:aa:fe:
dd:f8:24:6e:76:a0:28:df:87:5d:a5:72:55:8b:73:
71:a7:51:d9:a0:32:bd:98:08:23:8b:6a:30:58:79:
65:86:75:7b:c1:82:5f:6a:b9:df:e6:17:2d:72:c6:
cb:a1:8a:8b:66:e2:38:22:c2:47:1c:e7:b4:5b:f1:
7e:7a:38:43:11:c7:d6:02:3f:28:f2:44:37:ee:38:
dc:52:87:d1:22:c5:73:cb:17:a7:c3:6b:cf:3a:07:
a6:20:e1:e3:d7:e8:ad:5f:3f:38:57:56:0e:b6:8e:
61:5c:92:df:a4:53:0b:bd:0e:ff:d2:04:a9:b0:07:
5c:df:e6:31:77:80:7a:81:18:53:1f:8e:8f:eb:a3:
77:23:e0:65:5f:d7:72:08:78:d8:fb:bf:ff:36:80:
54:5b:ad:8a:f4:7b:da:7a:12:af:5d:ac:f8:07:2d:
c9:88:99:5e:3a:14:af:0d:c5:0e:e7:4f:0a:2c:cc:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7E:94:52:3A:6C:42:E5:9C:63:F3:82:31:EF:CC:6F:3F:63:76:66
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-H6UUjpsQuWcY_OCMe_Mbz9jdmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5f:d1:7b:94:c4:ad:c6:15:08:41:25:72:97:2e:ae:91:bd:84:
ae:11:c7:d8:cf:9f:11:ee:9b:d4:ac:52:01:cd:54:86:3a:9f:
23:98:8c:a9:f9:a5:a1:a3:8c:56:39:92:8a:01:cc:e2:16:40:
b7:43:93:5b:18:46:c6:b0:07:17:1f:a2:16:42:4c:6c:d2:e5:
a4:f0:f6:fb:a9:0e:79:e5:2a:07:49:5b:55:97:b1:b2:cf:bc:
9a:14:35:3d:bc:59:0b:3d:0a:9c:24:25:7b:ec:b5:ad:cc:25:
56:72:83:ae:4f:bb:29:47:15:da:5c:cb:f8:6b:91:d6:95:99:
bc:84:f0:c8:68:b4:76:91:f8:23:b1:34:38:18:4c:65:ec:7d:
10:a2:87:0e:60:e2:60:16:50:1f:82:8b:ef:81:61:f3:40:f2:
6c:af:81:dd:da:d4:0c:f1:3e:66:f5:ad:ea:a6:6d:31:83:8d:
db:1d:c9:9c:50:5d:dd:d6:21:48:23:8e:0b:81:9e:e0:26:e7:
71:3f:d7:7d:50:e0:f4:55:18:44:37:09:11:8e:3c:c6:89:f2:
9e:f6:bf:cc:ca:72:cc:b6:9a:1d:fb:ef:7a:76:6a:85:ac:39:
ea:76:1e:0b:88:1f:99:23:4d:4e:04:dd:7f:ba:f3:31:15:a7:
bf:2c:e4:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:53:48 2025 by rpki-client