Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3fptMdnwYa09d_JYmnxU5O8_AkE.roa
File: 3fptMdnwYa09d_JYmnxU5O8_AkE.roa (raw, json)
Hash identifier: I0s3l0lHX2EqQy7/ENZ2SyS4OKzcoZVqiCbQ+3ij/ws=
Subject key identifier: DD:FA:6D:31:D9:F0:61:AD:3D:77:F2:58:9A:7C:54:E4:EF:3F:02:41
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BAC1A5EF4D4E06DAD524E60745ECB59A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3fptMdnwYa09d_JYmnxU5O8_AkE.roa
Signing time: Sun 29 Jun 2025 08:15:42 +0000
ROA not before: Sun 29 Jun 2025 08:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 09:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:c1:a5:ef:4d:4e:06:da:d5:24:e6:07:45:ec:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 08:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddfa6d31d9f061ad3d77f2589a7c54e4ef3f0241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:42:29:c2:8e:cd:67:3e:77:72:eb:f2:22:
ed:3a:80:20:7e:a9:48:7c:ec:0d:b8:66:75:4b:4e:
aa:7c:fd:32:14:81:37:9a:51:fc:1f:db:78:58:ee:
fd:51:8a:39:76:95:17:38:8a:bd:de:5f:b3:78:46:
43:70:8e:6f:30:45:19:76:f8:15:bd:e3:d5:68:58:
5d:a2:8e:31:40:35:d0:79:3d:6f:d4:e9:f9:29:56:
ac:a0:09:f2:99:87:47:22:79:a9:dc:ff:02:3e:32:
0f:8b:2c:94:2a:50:6b:5d:1f:5c:0c:c0:2b:01:6e:
44:8f:ad:2b:86:e3:ce:23:b6:fa:10:8b:a0:78:f5:
d8:a0:6d:bc:b5:92:26:1c:1b:c1:16:08:a1:3e:e7:
53:9c:5e:05:79:59:9e:ed:9b:b7:e8:68:bb:21:57:
17:86:95:5c:82:4d:7e:55:1b:ed:ed:00:07:a6:4d:
0b:f3:8e:14:96:d2:21:70:b1:d6:9f:1b:ea:e4:99:
d4:79:64:bd:e6:1a:de:fd:b2:bc:29:39:33:b7:49:
a9:82:86:3b:55:23:ff:22:fa:6b:3c:dd:b5:39:24:
e6:1d:eb:09:c5:49:d5:66:6b:92:2d:d1:99:a5:f6:
a0:fc:78:af:93:72:13:71:50:09:3f:33:b9:0c:a3:
d3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:6D:31:D9:F0:61:AD:3D:77:F2:58:9A:7C:54:E4:EF:3F:02:41
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3fptMdnwYa09d_JYmnxU5O8_AkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
31:c1:ad:34:5e:2d:9c:78:25:d7:a6:cc:1e:af:e8:c7:87:f6:
38:67:d4:c3:8d:71:93:ef:8a:a7:d6:40:51:35:b0:9f:ee:b1:
fe:3a:d6:86:11:07:32:1a:4b:26:16:17:29:03:0d:bf:ba:77:
04:53:84:6b:9d:4f:68:12:94:62:41:8f:cd:58:96:0e:78:85:
2f:9d:39:46:3f:e3:29:26:e0:c7:a8:ff:85:c4:1c:90:29:34:
85:af:12:4e:05:99:10:5e:be:35:0f:4e:8c:95:cd:90:0b:ae:
9d:dc:5e:38:af:29:d8:1f:25:65:f4:aa:83:a2:14:7d:e5:c6:
cc:6c:98:0d:42:5e:83:fe:d9:6a:86:9c:e4:35:38:84:b8:07:
df:a8:d9:24:90:c1:d3:84:d7:00:23:3b:c9:a7:3d:10:57:cf:
1f:0f:4f:e2:9e:83:46:b2:8e:30:76:78:48:8f:22:20:ae:52:
10:b5:ce:95:aa:0a:2d:50:79:98:23:84:0e:b6:86:3d:32:e3:
b8:46:4f:30:fe:31:2a:55:05:b1:94:b1:65:e2:f3:b2:71:ff:
ea:50:ff:c2:9e:d7:20:d6:39:d2:7a:e6:40:e6:21:ff:89:40:
9c:a3:22:07:19:97:99:e6:f1:4a:fa:64:82:09:6e:d6:5d:1e:
5f:f5:2e:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:25:32 2025 by rpki-client