Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/2ta9pzvrLl_pPNjHAmSTfTGMz6M.roa
File: 2ta9pzvrLl_pPNjHAmSTfTGMz6M.roa (raw, json)
Hash identifier: q1w9FyEZ91ZquNyDCaysQ5sR93FoD068xpPM6coixto=
Subject key identifier: DA:D6:BD:A7:3B:EB:2E:5F:E9:3C:D8:C7:02:64:93:7D:31:8C:CF:A3
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A4DA023A3B5D04B51ACA5093D2CDEBAF
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/2ta9pzvrLl_pPNjHAmSTfTGMz6M.roa
Signing time: Wed 25 Jun 2025 02:10:40 +0000
ROA not before: Wed 25 Jun 2025 02:10:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 03:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a4:da:02:3a:3b:5d:04:b5:1a:ca:50:93:d2:cd:eb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 02:10:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad6bda73beb2e5fe93cd8c70264937d318ccfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:a0:6b:77:cb:4f:aa:a3:e0:9f:e2:5d:3a:
2f:1e:b4:ce:dd:e4:87:c7:6a:b1:91:cf:86:71:4d:
7d:0b:b5:1d:2a:37:7a:b9:86:da:cb:54:c4:93:a7:
f4:b4:47:33:b1:f5:e7:17:db:97:42:a9:64:cc:7d:
8b:8a:47:82:09:39:21:ef:1b:39:d8:d3:d3:9e:7b:
74:55:e7:98:54:82:7f:27:84:90:4d:b9:38:c1:70:
7c:b5:85:99:1e:5a:f8:b0:a2:89:6f:c1:62:f3:3a:
68:0f:0c:a6:af:6b:05:ce:d2:4d:d8:53:ea:f8:ed:
1a:04:43:d2:fc:61:38:c7:a7:3c:f2:90:0c:2a:4f:
da:dd:0a:14:89:9b:ae:f0:d1:ba:81:33:de:21:72:
89:50:3f:1f:2d:24:27:57:2d:dc:e4:63:f6:32:14:
88:5a:04:71:f5:00:4d:25:d8:53:20:e6:d8:60:f8:
15:d6:99:5e:cc:70:47:0a:85:52:c9:ac:32:3b:0b:
59:cb:f8:5f:d6:5f:90:86:21:9e:cc:55:d7:16:60:
d6:f0:16:8d:94:78:0b:66:ba:36:65:6f:3d:3c:43:
69:50:1d:94:25:c0:dc:32:b7:0c:b8:b1:bf:9c:bc:
9b:b1:c4:7c:4f:06:b1:a0:9b:5b:4d:87:f3:10:86:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:BD:A7:3B:EB:2E:5F:E9:3C:D8:C7:02:64:93:7D:31:8C:CF:A3
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/2ta9pzvrLl_pPNjHAmSTfTGMz6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
73:be:dc:de:06:8f:9f:c9:ef:76:f2:24:b0:40:e6:cf:57:cf:
fa:0b:37:9c:dc:fd:e5:c3:78:c6:c3:f6:75:1f:d2:37:3e:31:
f6:6f:b6:6c:ea:38:f7:2b:92:2b:a2:ec:91:8c:5a:a7:e1:1f:
de:38:7e:10:93:1f:17:ae:cc:2d:70:ca:42:3e:c0:86:13:00:
db:6c:17:46:2c:87:0c:29:6a:7e:e6:91:43:e0:a3:42:72:8a:
b9:48:ee:5d:20:a9:78:a3:57:6e:1d:84:c9:e8:68:19:a5:7e:
20:42:3d:26:59:b0:c1:02:71:64:83:8a:e8:47:40:61:47:3f:
46:84:a5:e2:82:08:4d:0c:5e:e6:1b:43:da:ef:aa:74:ea:50:
53:ed:ce:08:8c:16:a1:0e:ca:65:ca:78:5e:a4:c5:c0:83:be:
e4:be:3e:53:4e:16:68:8c:2e:6c:91:41:b2:8b:32:09:3c:d6:
74:69:5e:56:ee:fc:97:a4:f8:b8:f2:58:b6:01:97:30:72:0a:
0c:ff:9e:da:4e:69:e7:26:23:d9:d0:06:0d:f6:a6:55:e1:c9:
91:ed:f8:0e:76:26:66:82:2e:a2:76:1f:5b:2b:a1:23:fc:eb:
57:a8:b7:0f:7c:b3:1b:6e:bc:0d:18:1f:67:81:bd:49:a4:f2:
e0:c3:b2:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:06:52 2025 by rpki-client