Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3-QWwRoWECpf1Ljyf-2YcBySCYs.roa
File: 3-QWwRoWECpf1Ljyf-2YcBySCYs.roa (raw, json)
Hash identifier: JuLvlRNtSVhyhkxLCt3FSe6FYjx1nsjdc/n9hc7yqcE=
Subject key identifier: DF:E4:16:C1:1A:16:10:2A:5F:D4:B8:F2:7F:ED:98:70:1C:92:09:8B
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197986BFD2E1BE37A2F8D75DF2E052B0574
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3-QWwRoWECpf1Ljyf-2YcBySCYs.roa
Signing time: Sun 22 Jun 2025 16:15:03 +0000
ROA not before: Sun 22 Jun 2025 16:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 22 Jun 2025 17:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:98:6b:fd:2e:1b:e3:7a:2f:8d:75:df:2e:05:2b:05:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 22 16:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfe416c11a16102a5fd4b8f27fed98701c92098b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:20:f7:c2:ac:45:97:1b:3e:2f:1d:75:7f:
56:73:4f:7d:1b:b3:16:cc:80:a8:ff:15:ca:a1:34:
da:c8:7e:89:f5:19:90:8e:99:37:a4:97:dc:dc:4a:
a7:98:30:a6:70:80:d3:d3:2d:d7:2f:ce:5a:30:ca:
5f:6a:76:5c:d1:8f:be:5b:a2:19:03:6e:5c:fd:99:
15:51:16:fa:d7:fc:3f:64:dd:56:bc:71:5a:d8:dc:
54:74:b5:39:41:d7:b2:1d:52:54:60:71:d6:92:fb:
b4:95:43:44:46:b0:7d:88:e1:c1:53:a2:91:f2:aa:
06:86:13:fc:1f:48:f3:ae:64:e8:b1:ba:22:83:db:
0d:5f:4c:e5:04:6e:52:40:f2:bf:d6:a3:b4:38:14:
7e:e2:b7:3a:98:ff:1c:0b:ff:27:46:ff:4c:7d:f8:
cd:4f:c1:e0:2b:56:32:0f:ad:93:5b:c4:0b:22:4a:
ef:e9:7b:79:71:48:03:ad:45:88:ff:90:4d:3e:f7:
32:dd:f2:8a:49:2e:8f:54:6d:31:cf:4f:fe:e1:01:
11:0b:1e:4e:fa:aa:1a:61:8b:58:15:17:33:04:59:
17:d2:ae:2f:44:f5:ef:86:07:0c:08:b9:5c:13:7c:
c2:ba:50:57:1a:9c:7f:50:7c:bf:06:dd:0d:bb:f6:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E4:16:C1:1A:16:10:2A:5F:D4:B8:F2:7F:ED:98:70:1C:92:09:8B
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3-QWwRoWECpf1Ljyf-2YcBySCYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
61:fe:f3:67:e6:73:1a:4e:04:92:ac:88:e9:ec:dd:01:d2:b5:
6f:eb:72:91:50:73:fe:07:3f:0b:9e:ed:9f:46:25:f6:d4:5a:
7d:18:a1:5c:46:4c:1f:2a:d4:c0:e4:8f:1a:44:c3:59:f5:e1:
11:c6:88:4e:bd:80:0b:be:62:be:7c:9d:64:b9:67:15:4c:c3:
de:9a:2e:b6:1c:cc:9a:22:6b:46:3b:8a:06:fa:61:77:6d:08:
cf:88:4e:5b:c6:b8:36:27:2b:db:5e:2a:8c:80:6f:4b:be:83:
b9:a5:12:4c:1c:68:94:10:84:ac:70:3d:4e:36:dc:6c:66:df:
84:9a:9d:1d:cf:28:3b:c7:7b:e5:c4:14:20:69:30:58:f1:b9:
0d:92:f5:df:bb:e2:d0:70:d8:d0:00:8f:89:c9:e7:a3:fa:07:
34:ef:43:e7:18:cc:64:e0:72:e7:9f:a4:de:a0:af:7d:44:c2:
bf:08:39:eb:a9:7b:62:0e:8f:c9:36:a1:10:e8:d4:93:bd:61:
5b:6c:59:a2:d0:e8:d1:0f:30:5e:35:bd:fd:ca:17:9e:cc:32:
f0:84:aa:bc:81:99:61:b7:70:80:f1:4c:5a:80:37:91:bc:e4:
ba:6b:99:a4:a8:74:df:8f:87:49:e0:fa:00:2d:13:2e:32:ee:
54:4a:f3:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:02:45 2025 by rpki-client