Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/56IpwTFLP9FEZhVd36VKXjAROWA.roa
File: 56IpwTFLP9FEZhVd36VKXjAROWA.roa (raw, json)
Hash identifier: nHOKhoJ14cT3XH264mTC8JmNPzo55bR72unfViiMhMM=
Subject key identifier: E7:A2:29:C1:31:4B:3F:D1:44:66:15:5D:DF:A5:4A:5E:30:11:39:60
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BFB029E8F222645E1282EA3676AAC2CC
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/56IpwTFLP9FEZhVd36VKXjAROWA.roa
Signing time: Mon 30 Jun 2025 07:14:42 +0000
ROA not before: Mon 30 Jun 2025 07:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 30 Jun 2025 08:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:b0:29:e8:f2:22:64:5e:12:82:ea:36:76:aa:c2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 30 07:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7a229c1314b3fd14466155ddfa54a5e30113960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:cf:17:33:f1:9d:e8:55:d9:a6:b8:7f:9c:
64:16:11:0c:68:16:2f:c5:79:fc:0d:f7:f0:27:9d:
f1:84:76:2e:eb:a9:c5:56:21:8a:c3:e0:f9:69:0b:
4f:b3:78:00:e7:71:65:4c:85:30:2e:f8:7b:ef:b3:
5c:72:1a:b4:9f:bd:4e:93:4f:ec:3a:d6:00:4b:4a:
82:d4:44:4e:9e:27:70:49:04:9b:ff:5b:08:70:cd:
de:b1:f9:7b:12:fe:89:a9:77:b6:17:a3:33:65:8a:
c7:9a:06:bf:08:55:8b:c2:53:83:6f:50:e6:cc:7b:
ba:41:ae:a4:05:0a:29:a7:9a:4c:88:2a:23:ca:24:
b4:bd:78:8d:e9:00:92:c2:31:30:92:71:95:20:e6:
d2:36:b6:51:f8:55:7e:b6:d1:20:01:b6:0f:b0:46:
a8:b9:e4:e9:71:59:fd:9d:48:c6:c1:3c:8b:e3:ec:
e7:55:3c:f2:32:fe:d2:63:c6:7c:20:fb:c0:03:f5:
40:73:67:6f:d2:bb:95:bb:f6:c5:7f:6c:62:fc:f8:
31:f4:65:a5:8c:18:33:f0:48:c4:d1:11:40:46:92:
e1:7a:0d:da:12:08:b3:d4:49:ae:75:3d:7f:1c:bf:
4c:57:a5:e0:17:92:d5:25:00:21:18:12:80:f2:e8:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A2:29:C1:31:4B:3F:D1:44:66:15:5D:DF:A5:4A:5E:30:11:39:60
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/56IpwTFLP9FEZhVd36VKXjAROWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
02:46:5f:76:bf:31:aa:8a:d5:79:26:00:28:11:6e:b0:34:c8:
bc:0e:62:5a:30:07:49:1a:00:12:62:e8:31:62:1d:ea:4c:64:
34:1c:62:e0:9e:26:07:86:76:1f:65:74:bf:5e:62:c1:93:0c:
89:4e:ef:9a:57:c8:eb:3c:c0:ca:e1:1a:da:30:69:32:76:33:
10:c3:87:3a:1c:9f:40:35:30:67:94:55:02:24:54:f8:bc:61:
a3:db:84:5c:05:18:e0:2f:0c:6a:29:c9:09:41:fb:4c:64:76:
94:d5:b0:73:dc:ca:73:c1:a0:1a:b9:e7:53:91:27:40:f1:d7:
65:89:82:38:72:aa:1d:4d:24:6f:0c:59:23:03:0c:ee:80:09:
57:a5:a7:d2:9a:7d:8c:08:72:75:18:59:47:4c:d1:a6:19:49:
a0:e8:0c:38:4e:c4:fa:6f:67:69:f2:bf:e7:cc:2f:1c:14:02:
88:9c:6c:6c:1a:f3:e8:20:7f:e2:55:10:c4:b2:3c:55:78:df:
29:89:21:09:a5:8c:1f:79:1a:00:ad:c2:9a:3b:98:80:28:8c:
c0:50:b4:6d:88:54:ee:d9:64:52:6a:2c:cc:ac:cc:a3:94:b2:
0f:09:22:02:01:a2:7f:c2:d0:11:72:3d:f8:0a:63:00:9e:64:
d5:d6:6e:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:21:37 2025 by rpki-client