Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/8UrR7GPMyQE6uulfZoYCbv28jzM.roa
File: 8UrR7GPMyQE6uulfZoYCbv28jzM.roa (raw, json)
Hash identifier: kjGPOJDbmevb/wcz1pJOirUGGB+exrswED3y9b7OnJ4=
Subject key identifier: F1:4A:D1:EC:63:CC:C9:01:3A:BA:E9:5F:66:86:02:6E:FD:BC:8F:33
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AA05E583E8F924616BF8186DA02A0CE9
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/8UrR7GPMyQE6uulfZoYCbv28jzM.roa
Signing time: Thu 26 Jun 2025 02:16:42 +0000
ROA not before: Thu 26 Jun 2025 02:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 03:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:aa:05:e5:83:e8:f9:24:61:6b:f8:18:6d:a0:2a:0c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 02:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f14ad1ec63ccc9013abae95f6686026efdbc8f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:d2:44:35:f8:de:53:13:dc:db:af:2b:82:
0d:8e:83:43:2a:ea:e6:c2:0b:58:b7:a2:8f:6a:6f:
4b:04:27:48:e1:f3:b9:0b:37:be:86:ab:fe:03:c5:
b8:e5:24:0c:5a:e5:5f:49:fe:97:2b:ec:6b:d4:e6:
82:fb:39:be:99:9f:2f:c0:9f:90:e1:fb:c2:d0:a6:
8e:56:d0:c5:d1:31:31:ff:40:1a:1b:fe:28:db:12:
b0:a2:49:4c:44:6a:7f:fe:2f:a8:ea:b8:50:11:24:
a3:bd:5e:bf:42:f4:d9:94:5c:38:90:0f:d0:ac:40:
c6:95:a6:5d:fc:63:07:fe:24:0d:17:d9:11:e4:64:
82:18:3d:b8:3c:2a:40:35:de:fe:37:ba:3c:c0:ef:
99:e6:d7:15:81:6e:49:0a:48:5c:4f:08:e3:81:07:
cd:76:66:13:47:1e:62:a8:80:29:21:84:bc:24:0b:
ca:fc:10:6f:86:b8:f4:72:e9:ea:27:e8:2b:ef:b0:
67:46:41:87:e1:ed:23:dd:42:fc:70:ac:9a:93:9a:
54:be:6d:44:7e:81:1e:84:d4:1e:dc:0d:fa:71:f3:
15:37:b5:58:a8:de:03:17:6b:fb:56:3c:eb:0e:5a:
12:e4:88:4f:49:c2:82:08:56:e3:72:b1:09:65:9d:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:D1:EC:63:CC:C9:01:3A:BA:E9:5F:66:86:02:6E:FD:BC:8F:33
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/8UrR7GPMyQE6uulfZoYCbv28jzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
0e:27:7c:14:03:9a:19:39:4b:99:50:38:97:bb:6c:8b:68:ff:
2c:5e:14:8e:0e:4c:3f:a0:18:e0:f7:5d:fd:90:7d:3d:ac:de:
ea:d6:6a:2e:0e:cc:2d:f7:96:56:35:e1:09:d4:ff:bc:46:f5:
40:3b:3c:f9:fc:93:35:37:e5:f6:50:ad:58:a0:5b:29:27:64:
37:e8:f1:55:4d:68:b4:86:bf:1d:8c:ea:7e:3e:41:b1:48:7a:
f6:d9:b9:72:69:84:19:be:be:1c:45:74:6e:20:68:b9:60:32:
13:d1:e4:b8:be:88:66:51:f3:38:ff:d9:d1:06:e2:8f:0d:c6:
10:c4:77:4d:28:e8:97:59:fa:a8:46:cc:7b:f7:e8:fc:01:72:
a9:51:bd:0c:aa:6d:5d:87:38:b6:99:86:fd:c1:8f:d2:7f:a2:
c8:62:b0:96:8b:9c:72:41:e8:5b:bf:2e:9c:ef:3a:25:f3:db:
5d:67:5e:27:02:d1:cc:b5:41:7f:94:e7:77:05:27:3b:8f:dc:
63:38:39:c6:c1:31:dc:1c:b4:fe:dd:be:2c:44:e6:d1:83:10:
f8:bf:10:91:d6:68:16:fd:3a:db:c4:ee:da:51:f3:a0:78:a6:
9b:e7:12:08:15:3a:17:1a:50:b7:a9:ba:62:a2:5a:7f:55:c4:
1e:60:6b:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:00:05 2025 by rpki-client