Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3jZy1MYr8tt9U6SjaimsRzJZOCk.roa
File: 3jZy1MYr8tt9U6SjaimsRzJZOCk.roa (raw, json)
Hash identifier: ssPB79Ji5zEX+0PBFmJ5+ziytmYqxxqCuP32c0Qixnk=
Subject key identifier: DE:36:72:D4:C6:2B:F2:DB:7D:53:A4:A3:6A:29:AC:47:32:59:38:29
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B750E9666355431215A8A0D40D0A1B31
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3jZy1MYr8tt9U6SjaimsRzJZOCk.roa
Signing time: Sat 28 Jun 2025 16:13:42 +0000
ROA not before: Sat 28 Jun 2025 16:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 17:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:50:e9:66:63:55:43:12:15:a8:a0:d4:0d:0a:1b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 16:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de3672d4c62bf2db7d53a4a36a29ac4732593829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:95:21:68:21:e6:6f:fe:f5:39:dc:35:29:
e9:b4:1b:03:ae:91:0b:2e:cd:42:ee:15:ce:05:d6:
c4:51:4c:61:c7:22:2a:45:73:48:34:ed:9e:98:74:
09:23:a9:7d:31:7b:11:44:52:80:9c:33:d0:e0:a6:
33:c3:f4:15:c7:b3:a9:b9:99:f5:78:9a:50:93:8c:
3b:b7:22:bc:6b:ed:e6:6f:a6:82:dc:92:c2:82:7d:
33:35:03:f0:7d:4f:e4:1e:db:15:19:70:64:3f:5e:
6d:60:83:eb:70:ed:b8:cc:4c:f7:02:e8:41:3a:60:
01:0e:10:b2:27:22:f4:0f:e1:7d:c2:5f:03:4c:70:
22:eb:3a:70:83:03:7e:22:c5:f6:c5:72:89:d2:a2:
4b:40:fb:a6:86:3d:d8:34:e1:de:0e:7d:2d:ed:73:
ce:c8:ff:eb:4b:c7:69:5b:2e:07:2d:15:5f:d4:24:
2c:c3:bc:ec:3c:2f:04:46:1c:7a:7b:b2:1a:e4:91:
4d:37:4c:f5:97:19:91:d0:6b:b0:24:f6:b8:ef:53:
86:81:0a:11:c1:ea:44:2b:ee:0e:37:84:d7:6a:9a:
a4:85:23:d5:3c:7f:79:8a:22:8e:9c:9c:53:2c:32:
da:d6:97:5c:d6:c2:63:f0:d4:56:b4:76:3b:69:1b:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:72:D4:C6:2B:F2:DB:7D:53:A4:A3:6A:29:AC:47:32:59:38:29
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/3jZy1MYr8tt9U6SjaimsRzJZOCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
46:11:03:59:fa:3c:27:7c:fa:fe:0d:b3:74:8f:8f:83:2a:ec:
ba:c8:e5:21:b7:9f:fb:5d:eb:62:ac:18:f0:b8:2e:b6:63:19:
b5:20:94:11:d2:fb:9e:fd:d3:51:d4:e9:55:8b:cd:0e:72:23:
bf:76:94:69:78:9f:c5:0a:83:f7:07:69:47:8b:9a:77:99:8d:
85:4e:07:57:45:28:c6:a2:65:00:54:4d:d2:06:a4:e8:cc:be:
3b:c4:3a:fe:7f:08:91:24:5d:c4:6f:0a:7e:0c:7a:54:e3:6f:
b7:bc:43:bc:87:40:b3:4a:46:b6:54:05:18:7a:a4:78:21:1d:
e7:57:66:46:a2:e6:b9:19:b4:37:5c:31:5c:d5:13:46:46:2f:
ba:72:0a:36:7a:22:3f:7e:95:dc:00:8a:56:4b:bb:10:68:3b:
1e:c7:da:d8:e7:70:d8:56:09:e0:5e:ab:e3:33:ba:32:1c:b1:
a5:11:91:fe:26:02:86:e9:3a:6b:ba:74:76:8d:79:cd:a1:97:
9b:d7:05:4f:5d:44:67:58:a3:cb:26:c5:91:7d:3b:03:f5:de:
37:6f:8c:81:d4:a1:2e:b8:f5:b9:a5:8f:77:7e:ff:45:65:7d:
52:85:12:1c:e5:32:14:9c:a8:99:01:58:b9:ed:3b:94:51:54:
06:7f:13:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:33:10 2025 by rpki-client