Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7mbQJszHNPGfguD5eyAxxHK4u1g.roa
File: 7mbQJszHNPGfguD5eyAxxHK4u1g.roa (raw, json)
Hash identifier: XF1YBT6UBa9l8DTpY/CsSpZ7ic7KJ53qYrNPzdp9siw=
Subject key identifier: EE:66:D0:26:CC:C7:34:F1:9F:82:E0:F9:7B:20:31:C4:72:B8:BB:58
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C428939B05BC9D34B955E1A43FBA2F9C
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7mbQJszHNPGfguD5eyAxxHK4u1g.roa
Signing time: Tue 01 Jul 2025 04:04:42 +0000
ROA not before: Tue 01 Jul 2025 04:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:c428:25f2/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 04:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:28:93:9b:05:bc:9d:34:b9:55:e1:a4:3f:ba:2f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 04:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee66d026ccc734f19f82e0f97b2031c472b8bb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:d0:e0:25:e6:10:5d:24:af:6c:eb:63:35:
f4:6a:49:82:56:c1:e1:28:7a:4d:6e:38:e5:be:9f:
15:68:c1:87:24:e2:2c:4f:16:81:de:15:06:b9:37:
89:4b:f1:3f:74:97:8f:05:94:8b:4a:23:a2:f5:17:
63:f0:26:e1:e6:24:53:c9:33:e2:5f:6a:14:df:42:
98:9d:9f:3d:ea:9d:fc:7d:14:05:4b:23:93:f8:53:
b7:73:35:ae:40:a6:de:ce:e6:f9:03:e7:e7:74:27:
38:e6:d5:7b:5f:76:dc:6d:76:91:ec:f4:f4:f1:d1:
05:3b:4e:72:ce:b4:71:33:f8:40:bc:3f:ae:af:b8:
ef:6d:4c:23:a3:18:31:24:38:c9:31:17:f5:02:83:
d5:f0:4a:a1:af:91:43:f7:4f:07:ac:f7:1a:eb:af:
d2:25:75:47:f9:1e:b3:29:90:2a:35:db:6b:52:c1:
15:28:78:18:61:3a:a9:09:af:23:bb:d2:a0:8c:3b:
4f:5d:bd:b8:b1:00:cb:41:41:e8:53:6e:bf:05:b0:
37:a6:2b:e0:67:3d:36:ad:ae:45:71:5c:40:c8:36:
8b:9f:8e:d7:97:82:88:a0:76:1a:59:02:cf:d3:df:
a0:db:36:c8:79:cb:28:40:fc:de:60:bf:6b:9f:99:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:D0:26:CC:C7:34:F1:9F:82:E0:F9:7B:20:31:C4:72:B8:BB:58
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7mbQJszHNPGfguD5eyAxxHK4u1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:c428:25f2/128
Signature Algorithm: sha256WithRSAEncryption
7c:6b:ed:75:b2:c3:5b:7b:80:a0:53:c8:b2:19:c6:25:f7:bd:
bb:75:20:29:86:ee:ff:02:a9:c8:81:26:81:5c:77:1a:a9:16:
3a:b2:30:04:fb:d9:ee:2b:0a:61:38:5b:ab:dd:d4:70:6b:bf:
a8:5a:e3:b6:5e:8f:5c:f3:54:ab:4b:c8:c1:69:29:bb:ed:fe:
8f:55:02:58:6f:23:bf:99:d7:3f:91:c5:e2:99:7b:ab:19:77:
3e:49:92:dd:cc:16:46:60:77:26:ec:d2:0c:86:aa:14:45:82:
44:ba:25:a0:0a:29:ba:37:d2:44:53:1f:87:b0:fa:0f:8c:dd:
cd:8a:be:94:24:05:d0:30:32:4b:9e:fb:e1:b2:ff:55:82:43:
13:49:7e:3f:0f:c1:66:80:a0:a6:a8:3b:45:3b:e8:5a:c1:1e:
50:4d:15:72:3f:e0:77:b5:0c:3c:02:9e:03:e8:ba:e6:5d:11:
57:25:c7:7a:b0:95:78:a6:6e:37:dd:00:db:f8:af:b4:d8:b1:
da:3d:4a:45:0d:6d:f2:d7:bb:1b:4a:df:59:51:43:a8:57:b0:
49:b0:60:f7:90:bd:8f:6b:fb:70:19:8b:5d:fe:64:1d:00:dc:
07:8e:f3:8e:7d:e8:35:39:dd:8b:35:3d:e5:75:cf:dc:be:18:
1a:62:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:55:08 2025 by rpki-client