Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6Lv9JjuWbl5r52E_Lps_7JkRabc.roa
File: 6Lv9JjuWbl5r52E_Lps_7JkRabc.roa (raw, json)
Hash identifier: xx7Xtq9CYs9BlpuLmE/5nRzzo8qYJpFR5VIiLmLACNU=
Subject key identifier: E8:BB:FD:26:3B:96:6E:5E:6B:E7:61:3F:2E:9B:3F:EC:99:11:69:B7
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977BDEA2FBE99D0859CEB15D7FEBB176CE
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6Lv9JjuWbl5r52E_Lps_7JkRabc.roa
Signing time: Tue 17 Jun 2025 03:11:17 +0000
ROA not before: Tue 17 Jun 2025 03:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 17 Jun 2025 04:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:de:a2:fb:e9:9d:08:59:ce:b1:5d:7f:eb:b1:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 17 03:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8bbfd263b966e5e6be7613f2e9b3fec991169b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:e3:36:02:a8:c9:52:4e:a5:d4:bc:25:8f:
0b:3e:e3:3a:a5:f7:9c:88:bd:81:cf:b4:f1:0e:9c:
e6:e8:c6:11:59:ce:ec:b6:38:11:c7:59:a7:2b:ab:
95:2d:d4:a2:be:11:40:23:71:db:59:bf:34:17:b8:
b4:94:b5:94:40:7a:fd:14:c5:33:d8:ae:dc:7c:3f:
a1:6c:52:0a:bb:47:bd:fb:95:c6:b5:d8:b3:ad:c7:
e7:b3:b6:ba:22:d3:e8:ff:5c:e2:77:44:41:12:ed:
cf:c3:6a:63:59:1d:22:98:56:cd:47:6e:72:e4:a4:
2d:48:ed:5f:bf:33:5f:30:ef:d4:9d:f8:48:fb:73:
60:49:20:ce:53:07:aa:63:e7:67:72:72:76:73:08:
8a:84:16:f5:d9:96:2a:f7:7c:dc:41:ff:c6:d8:4b:
94:b3:df:62:19:1e:be:c8:d6:d3:87:58:18:e0:b4:
63:33:fa:7b:f5:e8:c9:43:6f:60:14:2f:f3:c6:cd:
40:d7:f6:59:03:78:cc:68:09:94:e8:1c:fd:3d:bd:
76:53:82:59:10:b6:fd:2f:75:58:24:53:87:be:bd:
ac:ca:b1:08:d4:50:8a:c8:da:7b:45:f3:5f:61:0e:
b0:86:9f:ca:b7:9d:34:2f:e1:9c:46:11:ac:f7:49:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:FD:26:3B:96:6E:5E:6B:E7:61:3F:2E:9B:3F:EC:99:11:69:B7
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6Lv9JjuWbl5r52E_Lps_7JkRabc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
72:90:29:e6:ad:9f:23:aa:8d:0a:50:9f:a9:c6:bf:c9:62:da:
35:20:50:26:08:dd:8a:38:bc:6f:f1:3e:46:1f:56:fa:d4:f1:
6c:ce:15:1e:d9:5b:bf:f0:86:e7:1d:38:55:cc:c6:7e:1f:d4:
2a:6f:91:ee:d4:f6:0d:51:ba:0e:d9:c6:74:52:8c:78:e0:13:
6d:37:89:69:39:f8:15:95:f8:0c:fd:04:61:7e:cc:b6:9c:cb:
d4:59:86:66:37:04:7f:aa:46:f8:31:5b:38:3c:64:cc:5d:b0:
d6:9e:19:74:24:3b:b9:79:7c:ad:12:2c:f8:f3:d9:d9:71:7c:
da:84:d4:e9:41:ac:56:a1:66:f7:f6:03:41:45:8d:c3:f5:85:
c7:bb:ff:cd:5a:89:fc:78:50:96:c6:13:ce:26:2b:e1:fd:28:
20:7c:00:1f:6e:03:b2:f5:b1:d3:fa:48:26:59:02:0e:b2:a6:
5b:05:9d:16:27:35:c7:04:9d:ee:48:f4:c4:08:9d:1f:05:7c:
a3:25:f0:48:a3:a7:f3:60:c3:24:b9:de:66:b0:97:f0:30:e1:
e7:81:72:8d:47:98:f2:89:0a:04:e7:23:b0:fd:98:8a:d8:93:
cd:7f:fc:ed:bf:fe:dd:6c:29:4c:83:61:d1:a0:4c:4e:17:fd:
40:2c:81:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:05:25 2025 by rpki-client