Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-eXyY_nE9F9mKXCz9Daltl5tRBA.roa
File: 1-eXyY_nE9F9mKXCz9Daltl5tRBA.roa (raw, json)
Hash identifier: o7QEgEeIktiCLFJLY9i+XIWOePNKJN/tUzVN6hQq4nY=
Subject key identifier: F9:E5:F2:63:F9:C4:F4:5F:66:29:70:B3:F4:36:A5:B6:5E:6D:44:10
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B6E22232BBFB7E8C84510E9E402084B1
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-eXyY_nE9F9mKXCz9Daltl5tRBA.roa
Signing time: Sat 28 Jun 2025 14:12:42 +0000
ROA not before: Sat 28 Jun 2025 14:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 15:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:e2:22:32:bb:fb:7e:8c:84:51:0e:9e:40:20:84:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 14:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9e5f263f9c4f45f662970b3f436a5b65e6d4410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:41:a6:ba:9d:c6:67:66:7e:92:0a:43:b3:
61:7b:ea:e3:d9:f5:1c:58:3d:3d:e1:5d:14:f3:ef:
e4:72:ab:5c:30:54:c9:7b:47:4c:e6:31:61:1d:a8:
06:66:15:15:d0:32:1f:d3:77:e6:8c:b2:89:34:eb:
a0:d4:da:a8:de:e3:17:de:4e:2a:db:0d:5f:81:fb:
fa:be:44:1b:54:c1:e1:5b:b2:98:54:65:f9:5e:01:
46:15:9b:65:26:7b:76:3b:d1:4c:e6:3a:18:ee:e0:
37:fe:25:e1:14:6f:13:31:63:31:59:59:14:d8:c7:
99:6c:7c:2e:1e:5b:7a:6a:da:46:37:38:c6:87:da:
70:3a:67:2c:1e:b2:b4:5d:4c:43:c7:9c:bb:d2:22:
55:0a:d0:22:98:eb:6a:4b:10:bc:a8:1d:53:57:a0:
e4:ec:ad:36:c3:8e:21:e8:14:b7:f0:e0:4a:cb:1b:
3c:b6:0c:05:f4:8a:4d:23:21:1f:0e:91:2f:5d:47:
95:ee:61:f1:46:d5:27:6d:5a:56:eb:59:a7:8a:10:
b8:d5:c2:4a:2a:93:ec:ad:2a:18:99:b3:08:18:cb:
72:97:c0:07:cf:ca:b0:be:b6:ec:7d:aa:06:01:1d:
83:4c:b0:2f:b8:a9:86:01:1b:ce:94:25:1b:2b:8b:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E5:F2:63:F9:C4:F4:5F:66:29:70:B3:F4:36:A5:B6:5E:6D:44:10
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1-eXyY_nE9F9mKXCz9Daltl5tRBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5f:03:59:5a:5a:9c:7e:25:19:81:3d:3a:b7:0a:9b:58:54:d2:
b8:23:5d:e8:dc:1d:5c:bf:69:ac:98:46:59:ce:18:9e:f4:d4:
a3:21:d2:dd:01:92:9d:d7:6f:9c:da:1a:3e:54:ba:83:d1:f5:
db:4f:1d:46:7d:69:2a:e4:6f:f9:90:48:36:33:0a:ec:04:fd:
4b:5a:44:f9:79:72:ea:c6:39:da:30:7d:3d:6d:bf:49:4f:27:
3b:1c:a6:c4:6e:60:58:51:14:fc:15:ba:85:12:6b:31:6f:eb:
a9:a2:cb:96:43:e4:dc:c8:ef:dd:01:6d:6b:43:e2:c5:7e:d4:
6b:11:1c:5a:55:a8:0a:19:8d:87:b0:c1:05:e1:6a:08:36:4e:
81:01:66:4e:80:dc:10:42:c8:b2:75:9a:ca:d2:d8:14:f4:d9:
bd:be:0e:94:31:81:f0:ab:71:c8:02:c5:bc:e6:4d:f6:74:28:
b8:8f:5a:05:e4:92:3f:41:44:c7:05:b3:54:a3:e4:73:4a:06:
ce:80:ff:da:d4:cf:4d:85:72:38:87:a2:04:3a:9b:ba:5e:4c:
04:02:91:1f:e2:bd:2f:f8:af:5a:2a:ff:1c:b8:f2:9a:1d:96:
d2:8f:c6:a7:40:95:dc:1d:a7:c3:7b:79:b5:28:9b:ef:e3:21:
26:a0:2d:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:13:41 2025 by rpki-client