Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/4pnzq2g8493kOL4T5eBluO8pOOY.roa
File: 4pnzq2g8493kOL4T5eBluO8pOOY.roa (raw, json)
Hash identifier: M37lJ2sNrWeixK9LwUX6yOsS7/oKeTQNSHJWT9PzXZo=
Subject key identifier: E2:99:F3:AB:68:3C:E3:DD:E4:38:BE:13:E5:E0:65:B8:EF:29:38:E6
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BF793AABCD3BD9E117D40EB29813B6D6
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/4pnzq2g8493kOL4T5eBluO8pOOY.roa
Signing time: Mon 30 Jun 2025 06:14:42 +0000
ROA not before: Mon 30 Jun 2025 06:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 30 Jun 2025 07:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:79:3a:ab:cd:3b:d9:e1:17:d4:0e:b2:98:13:b6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 30 06:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e299f3ab683ce3dde438be13e5e065b8ef2938e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:90:81:3f:f5:fb:65:4f:c0:02:7f:7b:43:
41:fa:47:9e:08:a7:b6:81:cd:40:08:73:4a:04:72:
bf:cf:90:86:af:ef:80:9a:8f:95:4f:3d:dc:94:48:
1f:61:7e:0c:29:ab:e8:48:e0:1b:84:7a:a1:65:a5:
a5:69:1e:a7:c6:d7:8a:34:97:f6:a0:2a:75:40:22:
23:21:53:c5:89:70:a8:9f:1f:31:62:f2:1e:40:ef:
01:6f:64:32:ee:e3:58:3a:f8:90:5f:a1:69:f0:2e:
35:89:48:68:2e:be:a0:ab:02:32:fc:a6:0e:b0:00:
a5:6b:f1:df:3f:82:91:0b:f6:b6:99:60:cd:f1:6b:
ae:d5:fc:4d:fe:71:74:b0:eb:76:f4:15:da:e1:9d:
9a:a9:c3:37:7a:73:b7:a5:20:e8:09:0c:e5:c5:3a:
5a:7d:bd:65:64:ec:04:45:6c:c7:ad:de:47:5a:d5:
97:2a:28:58:a4:40:db:95:69:ad:c5:28:51:42:a5:
f7:0f:41:53:fd:9e:d9:ee:ec:ca:d4:1d:0f:fc:73:
ab:81:3b:5a:4d:9f:15:58:d6:b5:f5:ce:dc:e7:21:
e3:e3:f0:d2:a5:0b:e4:ff:bc:54:dc:ea:bc:5b:ba:
f6:bd:b0:70:09:33:bf:54:c1:b1:6b:6b:b4:5c:0a:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:F3:AB:68:3C:E3:DD:E4:38:BE:13:E5:E0:65:B8:EF:29:38:E6
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/4pnzq2g8493kOL4T5eBluO8pOOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
21:f8:70:f5:d2:8f:4a:15:6c:d0:a4:56:e2:d2:5b:c1:e2:35:
b6:36:8a:cf:10:29:eb:ca:22:6d:6b:eb:e7:30:3a:8a:6a:d2:
dc:e3:35:3c:90:65:7f:40:f6:75:c3:03:8d:38:49:29:e6:8f:
0b:f0:25:4d:ec:32:2d:cd:9d:22:8d:77:89:e8:8e:21:fe:bd:
06:f6:2f:4d:a9:a3:38:a7:61:5f:01:a1:c9:fa:63:a4:d2:43:
3a:54:00:aa:f8:72:d0:37:06:f4:94:fd:44:cf:f6:0b:70:c7:
8a:88:1a:4f:30:b2:b7:a0:6a:c4:7e:49:5c:67:67:2a:a1:07:
b0:48:95:21:42:1c:c8:d5:55:87:04:44:73:70:c0:8b:d5:9d:
2e:65:78:4b:fe:6a:0b:8b:1a:4e:a8:37:8d:c2:f3:53:ba:6b:
08:6f:ce:9b:12:18:8e:05:a3:ad:ec:1f:5c:f9:91:59:c1:83:
9c:e3:a3:de:8e:f8:5f:a6:3d:5a:82:61:f4:c4:14:16:8d:8c:
4b:98:6f:f7:1a:2c:28:bc:e3:0e:5b:3e:8d:a5:a3:81:2a:a2:
8b:30:9b:c1:99:e5:19:40:9d:45:3a:65:2a:75:63:fd:4e:fb:
5f:7e:04:e4:1b:b2:49:2d:b1:91:6d:bb:9b:9a:71:76:b6:05:
90:4c:7f:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:31:36 2025 by rpki-client