Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6FF2vNwGAGn0szZDqn0AmQjhLoQ.roa
File: 6FF2vNwGAGn0szZDqn0AmQjhLoQ.roa (raw, json)
Hash identifier: SHPejzTh5A3vSaSvtsIpeA8blF1GUuPePUWhX/Bgqko=
Subject key identifier: E8:51:76:BC:DC:06:00:69:F4:B3:36:43:AA:7D:00:99:08:E1:2E:84
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AF5F868D39963851E2531C491F66DF37
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6FF2vNwGAGn0szZDqn0AmQjhLoQ.roa
Signing time: Fri 27 Jun 2025 03:12:42 +0000
ROA not before: Fri 27 Jun 2025 03:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 04:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:af:5f:86:8d:39:96:38:51:e2:53:1c:49:1f:66:df:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 03:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e85176bcdc060069f4b33643aa7d009908e12e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:d3:7e:0c:90:72:62:31:42:38:bf:51:96:
7b:fd:0e:b9:89:c1:8c:c3:cb:ca:a1:c7:df:e3:8a:
39:fc:3b:86:35:f4:fa:a7:2e:3b:d0:dd:42:b1:41:
07:2c:b4:c5:39:58:7b:71:b1:fb:7c:b4:17:b4:04:
77:4d:08:01:53:a8:8e:0c:15:d6:eb:89:24:eb:16:
9f:88:7b:92:d4:9e:2f:d9:90:d7:a3:85:b0:12:8e:
b9:7c:a7:15:02:2e:20:47:ca:cf:98:98:3d:6c:78:
b6:31:6c:0d:83:e8:e2:7e:c8:24:e2:79:4f:96:cc:
44:77:7d:03:86:86:7b:67:c1:64:c7:ee:d5:72:9d:
d3:c5:6b:3a:ff:81:d4:d9:16:1d:65:45:f2:22:a4:
fc:a3:cb:5a:95:24:36:ef:ca:fa:7e:8e:b2:cc:54:
08:9f:2a:b5:8d:09:73:f3:11:66:91:95:c1:ab:25:
cd:21:3e:b1:e2:a2:c1:cd:32:2b:ed:cc:81:db:38:
2a:c7:89:ee:0a:01:c3:88:f5:95:d0:c1:8a:de:42:
97:5f:15:00:3c:e1:c7:b5:ea:48:a1:94:06:a0:fa:
6f:6b:9f:ff:ac:c3:13:be:41:cb:31:23:be:03:fd:
a4:6d:2d:31:d3:66:d3:bd:76:0e:dc:cf:98:57:b2:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:76:BC:DC:06:00:69:F4:B3:36:43:AA:7D:00:99:08:E1:2E:84
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6FF2vNwGAGn0szZDqn0AmQjhLoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4c:5d:b9:99:97:ad:71:0b:17:a4:cd:dd:62:89:61:2d:1e:73:
50:28:89:30:bb:22:b9:37:0d:a1:ea:c3:7b:88:d6:71:4a:3f:
13:a5:6c:dd:c1:14:a1:7b:2b:13:d9:74:cb:a4:0f:a0:72:be:
7c:3f:40:a8:a8:b0:d9:86:8a:10:27:f3:ac:b4:2a:fb:11:55:
4d:1f:99:91:9a:4e:66:e5:97:a8:36:e4:ad:6a:8e:24:63:76:
6d:25:93:a9:fe:da:da:8c:b4:d5:ac:15:49:c2:2b:88:ad:24:
31:a4:06:9a:91:68:8f:8a:ef:0e:1d:ab:44:d9:4b:df:c6:61:
94:15:18:37:19:98:e6:e5:d0:5b:a4:ac:2b:7b:1d:cb:07:33:
c6:f1:15:46:a2:5e:d2:18:93:d9:d9:9d:87:d8:27:a6:73:c7:
30:ee:bc:df:36:4d:85:94:b2:2f:2f:90:18:73:87:76:e6:aa:
f7:6d:28:4f:57:81:12:96:d0:ed:f1:74:21:32:b1:1c:b9:be:
97:73:59:fd:27:62:57:ee:a1:ce:7c:b0:dc:b1:20:f7:46:02:
d1:12:64:2e:c9:02:26:7c:0e:5c:6e:5a:ec:c5:c1:42:b9:2b:
88:46:20:ee:7d:37:8c:c7:5f:fa:64:38:f7:d0:bf:75:85:96:
33:64:6a:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:31:08 2025 by rpki-client