Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/19GFPKdgMN3HQKorF5xk9xCEZrA.roa
File: 19GFPKdgMN3HQKorF5xk9xCEZrA.roa (raw, json)
Hash identifier: bHWDUqjKJBnIUw/ISAxhJoCxMfmhle9Chfc7aOsclhQ=
Subject key identifier: D7:D1:85:3C:A7:60:30:DD:C7:40:AA:2B:17:9C:64:F7:10:84:66:B0
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979A25455DACF4CF33E7CAC47B653FE64E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/19GFPKdgMN3HQKorF5xk9xCEZrA.roa
Signing time: Mon 23 Jun 2025 00:17:03 +0000
ROA not before: Mon 23 Jun 2025 00:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 01:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9a:25:45:5d:ac:f4:cf:33:e7:ca:c4:7b:65:3f:e6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 00:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7d1853ca76030ddc740aa2b179c64f7108466b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:a3:39:6d:0d:18:22:b8:82:0a:a7:fd:c5:
e2:a3:a4:17:e9:19:a2:3b:ea:8a:65:8e:3c:57:fc:
9a:b9:91:7b:ed:b4:24:3f:f0:b1:e7:19:cd:a2:aa:
c7:32:a7:55:0f:fe:b3:2f:48:e3:bd:17:fb:09:82:
7f:01:99:8a:b8:98:da:19:c2:4a:4d:9e:46:98:8a:
92:28:67:95:52:6d:c5:88:97:31:02:5a:a1:54:58:
e4:79:33:0c:51:34:47:5e:77:41:c2:30:5f:26:f0:
e9:d7:0d:43:4f:5a:86:70:c0:45:56:db:1c:9a:8e:
ea:4e:27:97:79:6e:c3:16:0d:19:09:a0:e2:0f:dd:
ee:b9:65:6c:00:c7:6e:bb:a1:62:7b:36:49:be:44:
30:bc:b5:e2:3b:84:a0:6c:63:7f:88:3c:67:91:80:
69:a2:ed:1d:5d:08:6a:31:ab:2b:5d:cf:10:be:7c:
a4:2a:f9:f2:29:3e:f6:82:95:72:66:06:89:1c:62:
07:14:a2:cb:6f:35:54:82:73:c8:36:77:fc:c8:a9:
59:a4:5e:9b:62:6e:f7:97:fe:dc:fa:2a:ec:66:84:
26:ab:6d:80:91:f9:9c:ad:7a:ba:7f:67:2a:58:96:
25:fa:9f:4f:a0:22:ae:91:a9:be:24:06:f4:81:3d:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D1:85:3C:A7:60:30:DD:C7:40:AA:2B:17:9C:64:F7:10:84:66:B0
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/19GFPKdgMN3HQKorF5xk9xCEZrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2c:55:7f:1f:a2:a0:41:57:17:9c:c3:5a:33:ad:47:59:09:25:
c5:ca:41:c6:07:09:3d:05:be:b2:9e:3f:4e:60:a4:1e:31:3c:
7e:5c:d4:4e:e8:b6:71:87:0a:9a:6d:78:d6:58:ce:9a:1e:7a:
dd:f9:8d:9f:26:71:9f:0e:76:2d:b2:3b:2f:24:f3:a9:92:de:
41:c4:24:32:4d:38:5c:f6:4a:31:fe:69:bb:11:4d:85:4c:b0:
02:1e:1c:37:c7:95:0f:3c:85:bd:4b:d3:5f:4d:e8:c1:c9:e3:
86:72:3e:2b:f9:40:99:82:8c:f2:9a:7c:cc:8b:fe:47:89:32:
7f:99:4a:f0:e1:d3:84:65:2e:0c:a0:e3:e7:c0:b4:28:50:6a:
aa:90:f1:bd:4d:73:df:2c:f8:a7:12:d1:49:b2:c2:2b:ac:ef:
1a:65:07:31:fb:48:83:c9:d0:6a:54:8b:7b:5f:06:32:b2:6a:
b8:cb:d4:1f:6d:60:b0:47:36:37:08:68:47:3f:7d:4e:ae:d9:
92:20:75:6d:0e:97:4c:17:f5:b4:1b:d0:4c:22:d5:6a:f9:c5:
d8:8a:42:4b:5d:c9:dc:04:41:ab:fb:1c:02:e9:45:15:2e:7a:
40:0a:9a:e5:4f:e2:d7:11:53:c4:ba:7e:6f:ad:b5:65:86:d4:
d7:e1:50:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:26:01 2025 by rpki-client