Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/4t6XAbbSJXcdlKJyj-LWZ_13DBA.roa
File: 4t6XAbbSJXcdlKJyj-LWZ_13DBA.roa (raw, json)
Hash identifier: LkPKVy20LRq1JyDAD+4vdGvaY+1I5tqjOHD7LAFef4w=
Subject key identifier: E2:DE:97:01:B6:D2:25:77:1D:94:A2:72:8F:E2:D6:67:FD:77:0C:10
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197786FBB15CA2963C0FC9E400FA121F16A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/4t6XAbbSJXcdlKJyj-LWZ_13DBA.roa
Signing time: Mon 16 Jun 2025 11:11:17 +0000
ROA not before: Mon 16 Jun 2025 11:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 12:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:6f:bb:15:ca:29:63:c0:fc:9e:40:0f:a1:21:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 11:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2de9701b6d225771d94a2728fe2d667fd770c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:29:62:7f:9b:95:0c:76:1b:df:b9:8b:b5:
74:90:3f:82:35:be:9b:a7:04:4e:9c:d0:8b:58:5c:
1a:f6:f7:d4:48:c5:d7:49:e4:1c:98:62:f3:51:fa:
32:44:cc:7e:9c:91:83:90:38:05:d5:60:89:ea:88:
47:14:b5:df:ea:a0:08:d1:04:b6:74:94:ff:62:78:
e8:44:57:76:81:e2:fa:3f:de:6a:fa:21:7d:e8:fc:
1b:67:b3:8e:48:d7:1f:5d:23:7c:bf:3a:84:76:52:
fb:0f:e1:6f:a7:42:22:a5:23:3a:35:56:40:9f:03:
a5:f9:aa:4d:de:c0:ef:a6:fa:80:52:43:fc:b3:f9:
99:a1:72:da:7b:9a:16:d0:5f:7e:13:1d:9f:bd:59:
d8:1e:61:aa:1f:2f:1a:37:5c:e9:ae:91:04:98:f7:
6f:84:0a:70:84:6c:69:ea:ed:bf:75:e5:47:f5:a4:
6c:b4:bd:0d:16:62:c2:3b:0a:22:2e:20:4e:44:7b:
7e:ba:c1:3f:a1:43:63:cd:72:32:dc:09:1d:06:ad:
d4:ff:ea:e6:9e:1e:1d:38:d2:13:e8:85:06:46:ce:
0f:43:88:f4:d9:fc:84:82:3a:07:4c:67:e6:85:0a:
20:85:c0:0d:87:6a:8a:e3:fd:1a:32:59:7b:b3:3d:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:97:01:B6:D2:25:77:1D:94:A2:72:8F:E2:D6:67:FD:77:0C:10
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/4t6XAbbSJXcdlKJyj-LWZ_13DBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
8a:7b:2f:ca:d3:5b:40:e1:5d:c1:1e:45:03:90:aa:30:e0:fe:
83:66:8e:e5:c4:4e:a1:52:8c:bb:0e:a7:e5:f0:47:1c:51:a9:
cb:fc:9a:d3:91:c3:61:d5:60:49:68:ce:fc:4b:e9:0b:b7:8e:
36:ad:20:ba:79:7c:37:4d:21:56:af:1c:2e:93:b0:1f:c3:42:
b3:3b:cb:2a:af:de:ae:8f:2b:45:e9:e6:64:9a:56:53:b5:8b:
e7:8e:50:e8:53:0b:4a:94:b6:39:cd:04:be:d9:e9:2c:a9:8c:
ed:6a:93:10:ab:bc:00:53:9e:ae:a4:88:1e:b4:13:60:ad:61:
67:fa:e8:48:37:a6:eb:8c:24:67:20:98:58:3f:5c:e2:83:0b:
43:33:4a:df:27:1c:0e:cc:e6:f0:41:02:75:dc:f9:0d:77:6e:
0c:0e:b6:c6:59:44:3a:ce:64:c5:29:b7:18:0d:52:4d:95:8b:
9c:d8:e2:a2:3c:69:1b:ba:2c:5f:fe:c3:d3:03:aa:3a:2e:b7:
c5:b3:f6:c0:b2:9b:33:85:99:39:e3:65:a6:0c:9c:8f:84:68:
8a:62:50:d3:40:be:83:52:2b:8a:45:8c:1c:3d:35:7f:69:d0:
50:84:3c:c0:dd:c0:23:eb:70:c0:6a:4b:44:66:56:d8:5a:2e:
a9:19:34:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:42:16 2025 by rpki-client