Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/869lbwFxDyN6qHr5f_xCS1lscGY.roa
File: 869lbwFxDyN6qHr5f_xCS1lscGY.roa (raw, json)
Hash identifier: mIan7bprv8/JT6Bn9GD6cXadPy4zNYw36oL8TPUkNoA=
Subject key identifier: F3:AF:65:6F:01:71:0F:23:7A:A8:7A:F9:7F:FC:42:4B:59:6C:70:66
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197851B71C8E1E105EED020CE2B06992620
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/869lbwFxDyN6qHr5f_xCS1lscGY.roa
Signing time: Wed 18 Jun 2025 22:14:17 +0000
ROA not before: Wed 18 Jun 2025 22:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Jun 2025 23:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:1b:71:c8:e1:e1:05:ee:d0:20:ce:2b:06:99:26:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 18 22:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3af656f01710f237aa87af97ffc424b596c7066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:8a:74:c6:7b:4b:e1:f5:b2:40:19:53:73:
4c:23:df:85:9c:86:ab:5e:7a:92:e5:8d:80:8a:29:
1e:13:ed:13:38:ef:04:6f:2d:69:59:ea:8d:95:a5:
1b:92:63:d5:6e:ea:3a:6a:89:af:e1:07:3c:36:65:
1d:94:a5:0c:38:86:8e:88:5f:8a:77:72:28:bd:4d:
96:c5:ed:f8:c3:7a:ea:73:68:4b:41:97:9f:78:c3:
fb:31:a9:6a:3d:22:bd:f1:5c:71:7b:0d:db:df:85:
e4:68:03:23:5c:1c:64:91:3a:aa:22:a6:2f:e5:b0:
13:d3:9a:bf:c2:ff:84:98:90:ef:44:45:92:94:a2:
d6:67:60:ef:a9:4a:be:92:ea:83:4e:c7:8d:5c:7c:
db:7e:75:48:5c:40:bc:69:51:ff:0c:2e:88:bd:fc:
8d:14:86:59:00:ba:52:a2:a8:0e:57:36:fb:8b:d7:
ea:91:6e:18:16:2b:da:4d:bc:fd:d3:8b:27:6c:5b:
ee:ba:7a:fb:07:82:3e:9a:6f:31:f5:69:7b:ee:f2:
ab:f2:ab:c2:b0:d4:ae:b6:74:9b:62:f6:54:6f:4c:
68:98:93:ab:4d:94:32:2c:18:11:3c:f9:14:4c:76:
76:86:62:58:6a:88:65:bf:0c:43:bf:75:5f:14:7e:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AF:65:6F:01:71:0F:23:7A:A8:7A:F9:7F:FC:42:4B:59:6C:70:66
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/869lbwFxDyN6qHr5f_xCS1lscGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
21:c6:8c:e7:f3:1c:5f:87:bc:d9:c1:08:09:c2:6c:65:92:bb:
83:3f:fa:e6:66:7a:97:3c:97:df:19:29:6b:73:d2:3e:9a:74:
07:5d:36:f8:a0:a3:96:47:ae:55:3d:52:d1:25:36:28:b4:a5:
e7:a3:5b:c4:c8:0e:63:17:8e:f9:51:85:6d:c2:ee:79:fa:77:
a1:3c:32:ca:16:14:74:dc:08:bf:0b:91:4e:4e:1b:42:39:06:
65:d4:6d:30:8d:f2:46:30:3b:13:d9:2a:8d:c6:c4:5f:06:5f:
5a:e3:8e:a6:13:6d:de:ce:c2:7a:9d:18:d3:b3:0e:64:b8:5c:
0f:ac:be:f9:c8:5f:0e:c5:a5:0f:f8:1c:7c:21:88:4e:a7:58:
61:04:26:56:20:11:f7:01:37:71:f0:09:25:6d:a2:6c:70:59:
d5:fa:80:4f:2e:bc:a7:3d:b2:97:86:dd:c6:ca:34:01:8b:4a:
d4:a8:bc:3f:40:1d:d5:e7:02:ab:b4:30:b8:06:d1:53:8b:c6:
c0:05:98:b8:b2:1a:9b:53:4c:5e:3a:98:da:19:54:29:e8:b0:
aa:46:98:b1:fc:af:9a:f9:80:68:07:27:84:df:5b:e8:43:91:
f1:4c:d8:fe:86:30:14:de:26:5a:8d:d2:09:57:6f:76:ee:a2:
38:a7:c9:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:22:26 2025 by rpki-client