Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/5A0NRd1c8sFWCdMXgalzC21caY4.roa
File: 5A0NRd1c8sFWCdMXgalzC21caY4.roa (raw, json)
Hash identifier: tnRbQwvd5PS/VH1icwRztH1OLWMOIEdJ3TUSABp9Mk8=
Subject key identifier: E4:0D:0D:45:DD:5C:F2:C1:56:09:D3:17:81:A9:73:0B:6D:5C:69:8E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019778A968FB4F428E274A8EF32183696BEE
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/5A0NRd1c8sFWCdMXgalzC21caY4.roa
Signing time: Mon 16 Jun 2025 12:14:17 +0000
ROA not before: Mon 16 Jun 2025 12:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 13:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:a9:68:fb:4f:42:8e:27:4a:8e:f3:21:83:69:6b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 12:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e40d0d45dd5cf2c15609d31781a9730b6d5c698e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:bd:56:a8:5a:50:0d:c6:cf:b1:af:09:f1:
19:b9:9b:9a:6a:03:5f:ce:f6:71:ba:46:73:9d:bd:
49:a8:1d:f9:20:96:16:53:e6:b7:30:da:46:11:17:
02:a6:b6:f3:9f:2f:33:5a:88:b6:35:4b:d1:29:96:
ca:eb:d6:57:ff:ea:00:13:8a:c4:f5:16:88:d9:1a:
0c:e0:81:4c:ca:b5:71:92:0c:d3:d8:b9:5d:bd:95:
b9:e8:21:0f:c5:f5:0a:3a:1c:3b:1c:14:2d:74:aa:
47:ee:b5:b9:65:5d:c3:2e:6f:3a:bb:84:8f:f1:14:
a3:17:26:35:83:99:1a:1f:6c:c8:c3:e3:41:96:51:
ae:4d:4c:c2:06:63:52:6d:68:90:af:b4:ef:7c:b9:
d9:a9:5a:cc:b1:b7:d2:e0:0a:06:f1:ba:6c:ff:a7:
16:9d:38:46:67:61:77:95:88:a8:86:11:40:ff:16:
40:a4:a4:42:98:56:82:69:60:36:34:38:38:d2:d0:
08:13:0c:d5:2c:ac:12:4f:1f:ba:f7:8f:85:70:11:
f2:a3:ac:fa:6e:73:aa:a6:c5:f2:eb:0a:8e:62:fa:
67:0a:f9:82:68:5e:46:8d:32:22:92:3c:bd:3f:b8:
97:0d:bc:9e:60:fa:61:5e:4a:e6:3e:0c:ea:40:f1:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:0D:45:DD:5C:F2:C1:56:09:D3:17:81:A9:73:0B:6D:5C:69:8E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/5A0NRd1c8sFWCdMXgalzC21caY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4f:9c:e3:9b:06:82:3f:13:58:1f:02:a2:8e:fa:4a:15:cf:f8:
c1:a0:94:a7:14:48:d1:b5:03:e2:b1:59:00:97:09:15:03:2d:
d5:7b:80:f9:af:41:84:fc:4f:05:50:c9:4d:b9:a9:c9:96:22:
1e:fc:59:a3:73:5e:ed:dc:bc:b5:b2:02:b2:80:24:9b:dc:ab:
b0:60:15:94:31:a3:d7:b0:9a:07:e0:30:62:6c:e2:c0:d6:14:
96:74:3c:6c:1b:b8:ce:46:ed:e5:89:ad:9b:9a:af:fe:8c:79:
5c:24:51:d2:d0:48:ac:43:53:a5:b3:57:df:a9:7d:d6:76:2d:
e6:4e:be:14:3d:dc:7b:e8:65:f4:56:06:04:84:79:d9:72:b8:
54:9a:a9:1c:c2:a8:60:c1:d5:78:86:23:a4:4a:2c:f1:29:47:
cc:a9:0c:d2:3f:a4:8f:d0:f0:04:fb:bb:ba:c6:9f:c3:73:ef:
78:35:66:53:e5:c9:0f:d1:10:26:ae:bf:ae:9f:28:c7:4c:57:
9f:3d:58:c2:97:0a:e9:6b:12:0b:80:90:34:00:6b:e9:2a:43:
3e:7e:15:99:e1:ae:8a:2d:83:d4:95:86:ca:98:da:a7:1e:db:
19:cd:cf:94:18:d0:21:67:97:8e:77:be:e6:c5:ec:0d:2c:84:
41:22:e3:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:01:11 2025 by rpki-client