Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7fbdKwpk0Hv-zooslHdYZcAuATU.roa
File: 7fbdKwpk0Hv-zooslHdYZcAuATU.roa (raw, json)
Hash identifier: r9hhaJUN8Jn7r/2ksinyE2P+5ywp0xlNkrjwqACP5tQ=
Subject key identifier: ED:F6:DD:2B:0A:64:D0:7B:FE:CE:8A:2C:94:77:58:65:C0:2E:01:35
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BE2CE483EC7DE04A7304755F7814A936
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7fbdKwpk0Hv-zooslHdYZcAuATU.roa
Signing time: Mon 30 Jun 2025 00:11:42 +0000
ROA not before: Mon 30 Jun 2025 00:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 30 Jun 2025 01:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:2c:e4:83:ec:7d:e0:4a:73:04:75:5f:78:14:a9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 30 00:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf6dd2b0a64d07bfece8a2c94775865c02e0135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:33:9e:e7:95:9a:45:2d:64:63:5e:49:f2:
e4:67:91:fe:7f:47:f1:35:27:be:1d:80:9e:db:c7:
51:81:59:55:c2:56:ad:90:1c:43:88:ed:5e:83:22:
14:68:8f:d9:1d:f2:12:a4:79:ec:99:03:a9:0c:ce:
31:6d:28:c8:5b:bf:ea:45:cb:5c:05:54:70:a7:8b:
ce:91:6e:4f:d9:d9:ab:5f:fd:62:04:0d:09:0e:27:
d1:9d:7c:de:da:56:1c:c5:a9:c1:a3:9a:d1:f8:af:
ef:97:6f:f7:d1:4e:eb:e5:75:8d:d0:72:94:cf:16:
5e:6f:74:b7:ef:1b:4b:77:4d:56:38:c8:96:cd:0b:
a7:d7:61:0a:5d:ec:58:6b:62:5f:ce:f9:28:7f:63:
0e:f0:e1:2f:d6:fc:db:f0:a8:2a:54:3d:b2:e6:8a:
9b:83:6d:b3:0d:21:d6:1b:7f:c4:b5:c6:fe:4f:09:
97:d5:d1:09:dd:8f:22:78:3e:0c:23:ea:17:bb:a1:
66:3e:9a:75:1a:c5:dc:24:47:e7:02:8a:7d:fb:e6:
4e:42:a2:da:a4:37:62:1d:54:e9:40:1b:6a:d6:5b:
60:6d:37:71:37:2d:34:9f:7e:d9:60:6b:ac:7f:b3:
ba:33:40:f9:2c:73:4d:af:71:f8:dd:96:23:87:76:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F6:DD:2B:0A:64:D0:7B:FE:CE:8A:2C:94:77:58:65:C0:2E:01:35
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7fbdKwpk0Hv-zooslHdYZcAuATU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
56:38:c6:48:5f:cc:58:53:ab:f1:a7:f7:6e:2e:6a:a1:cb:9d:
58:d1:dc:85:16:04:6f:2c:4a:9c:1b:b1:d5:97:ac:a5:f8:7e:
a4:2e:1e:1d:9b:23:ad:b2:28:a4:68:51:25:2e:cf:9d:4e:3b:
a6:8c:01:45:20:d2:1b:53:63:54:ec:3e:65:77:d5:bb:fc:5c:
fb:46:e6:c6:ad:3e:b8:a5:4a:ea:d0:e9:73:c9:00:b6:b0:b1:
df:89:2b:0b:79:f6:f0:0b:81:53:1e:06:44:6a:2e:70:36:6d:
5b:94:91:48:36:9e:26:46:c9:c1:1c:98:94:3d:3b:f5:6b:ac:
6b:64:97:ed:36:18:b4:84:84:49:cf:15:7f:49:03:fb:b9:d4:
a6:e6:be:18:39:87:1a:43:c9:bf:3b:b1:fc:9c:72:77:ae:0c:
ff:44:33:b8:10:76:59:28:8d:62:4e:4e:2b:80:bb:4f:32:ab:
a8:e2:fe:f3:91:b4:8f:ab:4a:fd:e7:8f:8d:bf:84:7c:f0:89:
4a:1a:1f:54:2c:e8:64:57:e8:ce:c4:b9:7a:02:61:45:86:fd:
67:09:88:89:81:ad:eb:70:e8:19:5a:f1:a6:a2:b9:b2:f2:38:
f2:6d:1a:e5:b9:f0:33:ea:f9:0d:6f:34:a7:b4:d2:1d:4b:c0:
4c:7b:06:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:25:32 2025 by rpki-client