Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/19a7sJRCJOPVrDhfi5W3wRBET8c.roa
File: 19a7sJRCJOPVrDhfi5W3wRBET8c.roa (raw, json)
Hash identifier: KTB0YQDPgYMJ8JI0cdsvWS8ZnyHGouBZwhHh03UWelc=
Subject key identifier: D7:D6:BB:B0:94:42:24:E3:D5:AC:38:5F:8B:95:B7:C1:10:44:4F:C7
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019790B188E2F3D0BCB22167DD580D9ED619
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/19a7sJRCJOPVrDhfi5W3wRBET8c.roa
Signing time: Sat 21 Jun 2025 04:14:03 +0000
ROA not before: Sat 21 Jun 2025 04:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Jun 2025 05:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:b1:88:e2:f3:d0:bc:b2:21:67:dd:58:0d:9e:d6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 21 04:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7d6bbb0944224e3d5ac385f8b95b7c110444fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:26:82:6c:5d:29:4f:82:82:99:00:1e:e4:
e5:c1:a5:36:38:66:c4:24:ec:3d:11:b8:8c:bf:37:
d3:cb:02:a4:18:34:4e:56:e8:40:eb:8a:2d:ec:84:
88:d7:c6:c4:be:8a:7f:ed:79:fc:3a:7e:84:47:61:
46:c4:3d:a0:f4:c9:a5:a2:8b:b3:65:51:d7:0e:da:
e8:67:3c:a4:fc:62:94:b8:25:cf:ab:9a:a7:42:bc:
51:7e:9e:24:32:89:18:f5:fd:49:0a:b5:35:dd:01:
21:af:27:87:9a:1c:d6:33:8f:06:b2:b2:9c:90:de:
35:8d:81:c4:1e:90:93:32:38:52:10:08:3e:4a:87:
04:c4:7d:71:b1:d0:52:e2:e1:74:1e:6c:b5:cd:82:
02:24:30:40:9c:06:bb:b8:40:dc:69:96:0c:1a:0b:
d1:64:74:3c:d0:c7:10:bf:c5:12:c5:13:40:da:1e:
80:0d:d4:97:a8:a3:af:ed:01:17:d6:9d:32:a7:a9:
4a:78:0e:ab:a2:d3:27:23:4c:a6:9e:71:51:7c:2e:
95:ff:e1:54:6a:b5:17:45:64:fe:7f:23:d2:a7:af:
63:8a:34:b8:76:8c:bc:2d:3b:6d:4a:57:8b:f0:de:
5a:33:94:60:98:3e:4f:fd:86:10:18:de:fe:d6:08:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D6:BB:B0:94:42:24:E3:D5:AC:38:5F:8B:95:B7:C1:10:44:4F:C7
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/19a7sJRCJOPVrDhfi5W3wRBET8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
51:47:0c:b6:7e:eb:c8:0b:49:0b:7b:c4:58:37:b7:bf:fb:9b:
e8:53:da:9a:7d:1f:7d:f6:69:18:b8:af:d0:6e:5a:6a:8a:bc:
45:7f:98:0f:66:a1:81:40:bc:42:22:da:2a:eb:a7:7b:67:8b:
ca:e8:3b:37:4d:1d:a1:37:88:81:c8:c1:fd:c1:69:73:02:f8:
f0:87:67:0d:99:7c:25:8c:2f:a5:d1:9d:23:fa:b9:e3:d2:0e:
7a:fa:c2:c9:d0:1a:47:8c:32:e4:d8:8e:1c:85:e9:69:02:cf:
c2:eb:20:c4:ce:26:ae:04:db:41:48:c9:25:c2:a0:04:07:6d:
2b:4e:6e:bd:c9:32:72:54:a2:17:97:ec:5e:33:ff:64:a2:f2:
ed:c3:02:d1:db:04:09:09:55:f5:81:fd:3e:b5:63:0d:5c:a1:
1a:61:86:41:1b:5c:cf:05:1e:f4:52:3d:6c:a0:d1:18:7e:c3:
87:f1:f3:78:40:ba:c1:fd:41:ff:f5:01:3b:0a:44:29:88:f7:
2a:61:fa:28:cf:70:4d:33:b0:b6:6f:7e:57:90:bf:11:7a:49:
32:1d:fe:1e:a4:3f:83:68:95:f0:b3:60:3a:7b:35:6d:33:18:
53:8f:4f:d1:83:3b:6e:69:4c:37:e3:be:b9:4b:70:03:48:49:
6d:f9:dd:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:19:17 2025 by rpki-client