Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1tcdLmSO1ao6xFAd45yM2VzitVA.roa
File: 1tcdLmSO1ao6xFAd45yM2VzitVA.roa (raw, json)
Hash identifier: n205eSz6vVb33ApIUm6gAhnwQtOZLCZtmyq+prFHTAQ=
Subject key identifier: D6:D7:1D:2E:64:8E:D5:AA:3A:C4:50:1D:E3:9C:8C:D9:5C:E2:B5:50
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AAE19F0694F3F0F03C3A7EC6AF548D4A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1tcdLmSO1ao6xFAd45yM2VzitVA.roa
Signing time: Thu 26 Jun 2025 06:16:42 +0000
ROA not before: Thu 26 Jun 2025 06:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 07:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:aa:e1:9f:06:94:f3:f0:f0:3c:3a:7e:c6:af:54:8d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 06:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d71d2e648ed5aa3ac4501de39c8cd95ce2b550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:6b:bb:bd:6c:4d:68:14:eb:d5:0d:8d:f0:
65:38:bd:94:53:7b:3b:55:14:87:9c:7d:e4:b1:b1:
11:a6:56:0a:2c:da:b5:c3:34:63:60:36:85:a9:0c:
9c:d8:c4:ec:90:cb:98:f8:c7:aa:05:a5:e8:77:3d:
ec:5d:d0:7b:ee:56:6b:2b:3e:06:a0:29:6a:9e:64:
83:cc:3f:7c:b8:fb:b8:15:bb:53:bf:2d:b2:2a:de:
8e:72:29:dc:62:71:43:d1:c7:0a:14:2e:f5:59:49:
c8:3f:22:02:70:6e:26:12:d8:27:4e:56:76:b1:6b:
3d:df:04:d5:43:ef:68:f7:01:b0:ba:d5:b6:ca:ce:
df:cc:eb:76:81:66:b5:1d:e9:82:d7:2d:2f:3f:19:
28:e2:8d:f8:18:8e:b1:32:03:7e:99:5d:37:de:5f:
7d:37:b0:56:c9:71:13:8b:67:76:d6:9a:4f:ca:14:
5b:64:d7:61:68:49:fc:f8:36:c3:d4:62:fe:b5:d7:
97:7e:ad:6f:31:c4:0d:a6:af:cd:c5:73:ac:bd:47:
75:ee:74:10:9b:cc:54:2e:95:5b:31:a9:52:43:1c:
37:05:52:cf:63:f2:3e:d4:4d:cb:2d:ce:e0:95:17:
5f:2f:07:1a:28:a1:b4:5e:5a:50:8a:b8:4c:42:9f:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:1D:2E:64:8E:D5:AA:3A:C4:50:1D:E3:9C:8C:D9:5C:E2:B5:50
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/1tcdLmSO1ao6xFAd45yM2VzitVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
1d:cd:15:5a:2a:fb:2c:3e:83:40:a2:9b:29:9b:f0:92:37:69:
01:d9:aa:d9:2c:dc:26:b5:ff:09:bd:d5:53:0f:8f:dd:89:42:
22:c8:9d:e3:5a:ca:eb:74:fd:f6:9c:09:ef:d3:8e:58:bb:0f:
e5:c7:12:b0:0c:7b:14:0b:fb:23:d2:ba:2c:b0:ce:cf:5c:c2:
d2:3a:07:30:79:ee:af:40:33:40:8e:25:05:c0:6a:59:5f:b8:
12:75:dd:35:bf:5b:77:2c:ef:59:67:84:e3:85:42:94:e0:a4:
00:98:89:82:52:03:96:fc:a5:29:9a:fd:5a:18:67:72:19:98:
4d:c6:69:74:52:ad:a7:f5:b8:fc:f9:79:4d:bc:84:ce:43:88:
0f:0d:ff:ab:d2:b0:d0:63:9c:1f:34:82:67:08:cc:38:49:c3:
02:d7:71:0d:6a:97:d7:46:fb:3d:f5:93:95:0d:61:99:1d:bd:
86:01:ae:0b:0e:27:55:54:9d:6a:53:1c:86:e9:16:74:a3:14:
43:96:14:48:14:3c:39:fe:0d:28:d9:3e:ca:74:15:7a:1e:18:
73:ca:79:c2:41:03:bc:37:ef:83:0f:5f:5a:fd:76:8e:8e:4c:
28:24:56:cf:c1:9e:6c:58:a0:3b:65:af:b0:35:80:94:22:c3:
ed:33:31:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:00:25 2025 by rpki-client