
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/48qzsDxaV21vbulblL5cxT8fP7g.roa
File: 48qzsDxaV21vbulblL5cxT8fP7g.roa (raw, json)
Hash identifier: cvh3YkhdzwgfvVTAszwL+Qj65100Lz+E7e3aIoIN+Is=
Subject key identifier: E3:CA:B3:B0:3C:5A:57:6D:6F:6E:E9:5B:94:BE:5C:C5:3F:1F:3F:B8
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B03A562B9B21435E17EC9AE5FFB42435
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/48qzsDxaV21vbulblL5cxT8fP7g.roa
Signing time: Fri 27 Jun 2025 07:11:42 +0000
ROA not before: Fri 27 Jun 2025 07:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:3a:56:2b:9b:21:43:5e:17:ec:9a:e5:ff:b4:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 07:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3cab3b03c5a576d6f6ee95b94be5cc53f1f3fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:a4:c6:7f:5b:c9:0c:5f:ad:dd:46:9c:3f:
91:95:0f:1d:e1:1a:c9:cb:dd:b0:aa:e5:fc:67:38:
d7:b6:05:22:fe:99:b2:4a:9c:a8:83:69:e0:5b:4a:
02:fc:99:99:80:0f:b6:d7:3c:78:67:40:1a:fe:fd:
1a:ec:1e:cb:94:30:b9:1e:e8:38:c8:0e:56:90:c1:
05:c4:ec:22:af:16:0c:f8:8e:a2:c2:69:54:c1:86:
24:25:e4:d7:bf:e4:49:01:4c:5e:c5:ce:8f:47:83:
64:f9:1f:9b:e2:65:76:1d:c3:10:21:65:f5:bf:5e:
2e:5b:48:76:63:fe:a7:a3:a3:c8:6d:6b:b0:72:49:
c6:90:aa:75:fa:f5:22:4f:7c:5c:c5:17:23:be:d5:
da:b2:27:46:7e:0a:99:0a:5c:42:1c:fb:9f:64:70:
c0:16:6c:4e:02:91:9f:76:e7:b8:dd:d9:4b:b0:5e:
d3:9f:c0:27:86:ca:a8:e0:4d:67:5d:59:c7:7a:b6:
94:83:a7:09:a3:ab:04:a5:6d:e2:ab:94:68:47:56:
a5:a6:39:bd:12:66:b5:39:85:fc:d8:4f:31:c9:86:
b8:39:02:a8:9d:39:b4:19:0a:38:a5:a7:7c:b7:4e:
ad:aa:f5:ae:a5:d0:7b:14:c8:2a:c7:35:08:f0:04:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CA:B3:B0:3C:5A:57:6D:6F:6E:E9:5B:94:BE:5C:C5:3F:1F:3F:B8
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/48qzsDxaV21vbulblL5cxT8fP7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
07:12:2b:94:5b:a3:b3:e4:68:df:63:2e:6e:04:0b:bf:8f:39:
0b:f2:4b:cd:e9:3c:55:38:59:c5:d9:7c:4d:72:69:79:50:04:
a9:f0:b1:29:67:cc:4d:4e:16:4a:8e:cf:10:8b:7d:6d:73:11:
a1:47:04:f6:f3:8f:60:84:08:83:95:bb:c7:58:fb:4e:a1:1d:
f0:12:bc:58:e6:0f:8c:1d:87:9c:bc:0a:49:68:c3:df:f9:99:
8e:23:e2:01:6c:d0:f8:d3:53:73:21:ed:dc:e1:c6:55:13:d5:
23:cc:50:b8:87:fa:d9:fa:97:10:be:f0:29:a5:4e:ec:8c:a0:
13:9a:83:ab:fb:34:5a:b6:2f:8c:81:d7:fd:e4:42:22:8a:70:
51:1b:4a:9d:db:92:61:c9:cf:e6:ef:04:24:7a:6e:f9:91:80:
87:20:cb:ea:07:b8:da:53:49:ce:5a:2d:2d:47:1c:23:da:93:
dd:e9:9c:33:e6:bb:c3:5e:6f:87:62:78:c1:8c:4f:d0:0f:bd:
70:40:ea:f2:ac:d9:5e:e7:c0:1d:a8:12:cc:96:96:83:0c:13:
b2:78:31:be:99:59:90:ff:10:39:ab:ed:8e:f9:6d:d1:09:13:
77:92:33:6f:27:67:ad:4b:33:44:b9:3f:86:cf:72:15:d1:8c:
19:e2:3c:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:45:21 2025 by rpki-client