Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3Gxd3mBrU7yyQCT2mP8gtPDtINE.roa
File: 3Gxd3mBrU7yyQCT2mP8gtPDtINE.roa (raw, json)
Hash identifier: bYQpMl1Tvn+rcSlRoVpUO9q324CiSMpDtTAOt+d5yJY=
Subject key identifier: DC:6C:5D:DE:60:6B:53:BC:B2:40:24:F6:98:FF:20:B4:F0:ED:20:D1
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BB2DAEE0D872C153E57339EC73E16933
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3Gxd3mBrU7yyQCT2mP8gtPDtINE.roa
Signing time: Sun 29 Jun 2025 10:13:42 +0000
ROA not before: Sun 29 Jun 2025 10:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 11:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:2d:ae:e0:d8:72:c1:53:e5:73:39:ec:73:e1:69:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 10:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc6c5dde606b53bcb24024f698ff20b4f0ed20d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:5c:10:6c:f2:95:b1:e7:02:f2:39:b8:b7:
b6:f8:5f:85:28:b6:57:e4:ac:ad:c1:a5:3a:40:0b:
07:69:a7:0d:be:28:03:e4:c5:d2:67:b5:aa:2d:1d:
f4:b4:32:2f:c5:eb:23:78:5f:2f:0f:0f:83:28:d0:
2f:a3:b4:37:d7:4b:af:5d:d9:b1:f7:7f:5a:81:61:
a0:df:25:c6:74:e0:06:1d:7e:d7:63:40:94:a3:4e:
92:2f:85:2f:ad:8d:32:d1:85:9f:c8:3d:f6:c5:a3:
81:bb:77:5a:88:de:8e:db:4d:82:d6:3b:3c:41:df:
19:5f:99:e2:1c:6a:85:b0:06:49:34:a8:a1:c2:dd:
65:77:95:84:c8:e0:f4:c6:66:2a:5c:43:9e:b3:95:
3e:8c:4d:03:a5:0f:28:52:7f:f4:08:4d:b6:e8:9e:
51:86:2e:e8:c5:04:99:15:fd:f3:bb:f3:9e:02:36:
5d:2d:2c:5e:ef:21:d9:34:93:99:90:f3:87:fe:78:
c2:cf:f5:6a:e6:66:7e:1c:fe:1a:98:4e:03:d9:e4:
a2:53:98:e4:95:f9:0e:f8:5a:f2:d4:ca:a5:0b:ac:
b9:05:91:26:7d:93:2b:59:9b:f8:15:aa:62:f7:3c:
e2:1f:b8:c6:ca:c6:02:27:be:6c:0c:42:ec:2f:4b:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6C:5D:DE:60:6B:53:BC:B2:40:24:F6:98:FF:20:B4:F0:ED:20:D1
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3Gxd3mBrU7yyQCT2mP8gtPDtINE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
81:6d:6d:82:57:cf:82:e5:ca:16:7c:46:41:99:b6:7e:f1:34:
c8:36:c8:78:1f:e5:e3:79:d9:60:63:62:f6:56:36:f2:cd:ab:
09:d6:25:d6:ce:a2:70:62:da:2e:3e:9b:92:ad:ea:77:e7:b5:
e3:36:d4:61:42:da:39:58:0c:dd:19:69:c0:f3:10:9f:9d:21:
ff:9e:f4:ec:02:31:67:04:d5:5c:f3:13:ad:73:d1:05:03:37:
93:c3:15:06:10:91:e5:ee:62:8e:77:76:25:59:f7:f7:69:98:
d4:d0:d3:dd:fe:f0:13:a4:9c:c5:f7:82:06:85:4a:e6:d9:58:
f2:02:8b:2c:da:dd:a6:b0:43:9e:30:84:fe:c2:4f:9f:1c:76:
f4:39:f8:b7:b7:07:f3:56:b8:29:35:18:92:9a:59:9c:9b:7e:
e7:98:12:0f:36:cc:d3:29:46:89:f1:df:b0:69:3e:1d:67:98:
d8:bc:17:4f:77:09:3a:86:f7:08:c9:16:c1:40:0c:28:07:8f:
47:4a:d8:8d:7b:0c:64:a9:da:6d:d5:4e:82:fd:29:3a:f4:0a:
f0:0d:f8:f2:91:8c:cc:27:c6:fd:3f:b4:6f:8c:22:69:b8:10:
ac:60:b6:77:22:08:48:cf:f5:2f:27:5f:66:29:5e:64:30:a9:
f5:12:38:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:40:32 2025 by rpki-client