Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6SYAeml5MHyAyX3n2ZBPJIV8iNQ.roa
File: 6SYAeml5MHyAyX3n2ZBPJIV8iNQ.roa (raw, json)
Hash identifier: WqSvBCKDn/lHznuM9anNbydlWp88qW0ZPCp1JH3Gjdg=
Subject key identifier: E9:26:00:7A:69:79:30:7C:80:C9:7D:E7:D9:90:4F:24:85:7C:88:D4
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019798DAC50BEE6B2D3D3C2AEB620365143A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6SYAeml5MHyAyX3n2ZBPJIV8iNQ.roa
Signing time: Sun 22 Jun 2025 18:16:03 +0000
ROA not before: Sun 22 Jun 2025 18:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 22 Jun 2025 19:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:98:da:c5:0b:ee:6b:2d:3d:3c:2a:eb:62:03:65:14:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 22 18:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e926007a6979307c80c97de7d9904f24857c88d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:9d:c8:6f:e8:ca:76:89:4a:53:72:67:cb:
e3:39:46:18:1e:dc:df:4d:72:83:7c:bc:f8:10:b2:
8e:74:5b:ae:41:2e:ab:c8:32:e0:6a:98:30:f1:9b:
21:51:54:c0:d7:74:02:6d:fe:16:4d:d8:ee:41:fc:
57:56:01:fa:9e:88:8c:21:d8:0a:80:85:55:a6:e6:
f5:70:65:67:7e:39:57:e3:78:b1:7a:a1:53:42:83:
2c:43:1d:bd:65:6f:0b:b7:bf:96:71:80:8f:29:f3:
65:5e:b8:e2:3a:f0:4c:a0:81:49:1d:58:af:28:5b:
e2:88:af:f5:a7:bc:c9:12:1e:b6:33:77:2b:10:bd:
cd:92:89:c1:b0:19:5a:6d:fb:4e:a1:75:0d:65:c4:
5d:19:fa:18:80:84:5e:68:ad:e4:7a:ec:26:dc:9e:
4e:3f:78:e7:0d:95:2f:9e:d4:09:d8:89:26:fe:4e:
bf:0f:0e:1d:54:82:69:5f:d7:4a:de:1f:82:d7:0c:
c5:a7:18:ee:d0:45:97:0c:4f:34:9a:dd:7d:d9:94:
ce:24:7e:b8:42:ef:86:71:e1:ce:6d:71:4a:66:f3:
45:e4:22:12:37:56:88:55:d0:5e:09:45:cc:70:44:
de:54:81:48:5d:2d:b6:87:9c:f0:72:5a:f1:6d:83:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:26:00:7A:69:79:30:7C:80:C9:7D:E7:D9:90:4F:24:85:7C:88:D4
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/6SYAeml5MHyAyX3n2ZBPJIV8iNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
6e:79:36:ed:5a:d9:2f:fc:97:7c:4c:a8:a1:9a:2d:b0:28:d7:
15:ed:fc:ea:d2:f9:10:56:62:4e:7d:9a:97:bd:4c:d3:e9:2b:
63:07:ae:b8:d5:01:18:57:40:98:e7:cc:9c:8e:0f:ee:d2:d8:
1c:5c:a5:07:d3:ca:1f:73:fb:0f:75:6b:a3:0d:bf:83:1c:5f:
b7:05:f6:a2:fa:b5:c6:6e:65:c4:9f:4e:08:1c:bc:72:b1:be:
2f:80:09:ef:38:7b:9b:dd:54:75:47:37:51:81:e0:d1:67:f4:
b8:ea:8f:27:a0:9d:2e:56:28:0b:68:0f:21:8c:6f:07:cf:37:
ab:5d:5e:06:4e:6e:f4:ea:11:36:e4:48:84:08:ff:5a:cc:c9:
a6:6a:ae:a9:34:3c:b1:25:f3:fb:07:e1:98:9b:76:3c:3c:20:
82:b7:1c:a3:87:47:7e:9a:b4:6c:fa:6d:5c:90:56:f3:17:d7:
5f:e3:af:22:88:7f:84:43:46:74:4c:47:57:1f:b3:5b:f2:a8:
3b:88:b6:f8:91:a6:e0:aa:59:f2:3f:c7:d8:c9:81:5c:c9:73:
55:63:58:b8:ab:c1:2e:3a:61:44:be:b2:0a:32:e7:7d:66:ff:
72:36:9f:b7:f4:2f:6c:3a:ce:6b:d8:fa:64:0b:f6:4a:ce:9c:
4d:4c:47:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:55:08 2025 by rpki-client