
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9EHOHnTfNrXr9PmpwvoQZHEH1lI.roa
File: 9EHOHnTfNrXr9PmpwvoQZHEH1lI.roa (raw, json)
Hash identifier: z/Kk69l8JCwdu6+/Uwwu8wkpuAa1gcrI72zuv62BNvo=
Subject key identifier: F4:41:CE:1E:74:DF:36:B5:EB:F4:F9:A9:C2:FA:10:64:71:07:D6:52
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A76E1AE71E9D218B4C90DC796CBD32B1
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9EHOHnTfNrXr9PmpwvoQZHEH1lI.roa
Signing time: Wed 25 Jun 2025 14:11:40 +0000
ROA not before: Wed 25 Jun 2025 14:11:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 15:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:6e:1a:e7:1e:9d:21:8b:4c:90:dc:79:6c:bd:32:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 14:11:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f441ce1e74df36b5ebf4f9a9c2fa10647107d652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:c3:ba:f9:f4:c9:48:0e:0c:8c:9c:00:cc:
f0:79:c2:8d:6c:a6:ad:25:71:aa:25:e3:34:84:de:
a0:93:39:a6:d2:4b:7b:79:43:cf:92:06:e5:37:18:
3e:e3:46:18:11:b9:e3:8c:ba:ae:e0:bc:f1:ef:f5:
7b:e9:2c:89:45:a8:2c:b6:78:e2:64:2e:0d:78:e0:
2c:8d:9f:49:1d:8c:f7:ba:ad:ff:0d:b3:f8:34:50:
5b:b2:7a:f7:ad:10:fe:b4:ba:10:84:18:67:ac:4d:
65:ef:0c:dd:a3:b8:fe:7a:7b:8b:b2:1e:0a:b8:5f:
e7:8c:c5:e4:12:74:94:28:fd:ec:3d:ee:89:a0:31:
57:fe:a7:ef:c1:98:72:f8:87:8d:6f:f2:77:8c:e0:
2f:b9:bf:7c:8e:fb:e9:2c:23:de:46:af:59:42:4b:
f4:9e:26:50:f6:20:30:41:d2:84:38:23:94:96:6d:
f1:8e:fa:bf:5e:4c:70:7c:cd:76:d2:72:c9:38:8a:
32:b1:e8:7e:9a:7e:2a:88:50:34:4e:40:44:29:bb:
34:2e:09:ff:26:d3:02:58:d0:c9:77:c4:ef:a8:17:
68:e2:ae:33:4d:40:f8:ff:01:53:7e:15:83:26:bf:
43:70:98:81:b1:85:16:a0:98:8e:8f:1c:13:29:25:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:CE:1E:74:DF:36:B5:EB:F4:F9:A9:C2:FA:10:64:71:07:D6:52
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9EHOHnTfNrXr9PmpwvoQZHEH1lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4a:86:d5:76:53:53:37:56:52:06:67:f6:5c:06:b7:05:cb:a6:
2a:d8:1d:85:49:2e:26:52:b4:7f:e4:43:4f:36:d4:7d:55:a3:
6f:5d:7b:bc:ba:ce:ad:e0:4e:69:be:e9:49:08:fb:35:9f:e6:
c7:6c:8b:9b:70:cb:c0:f4:8e:e6:a8:0c:fa:d9:08:8b:15:5a:
c5:65:8c:2a:71:1f:d2:22:ef:8d:7e:36:d4:fb:c3:e6:ae:63:
ab:21:e9:af:1d:48:27:2d:5e:8e:66:9d:70:99:e9:56:54:4c:
79:ba:69:a9:5a:5f:dd:63:6f:91:24:ce:9c:c0:ee:c5:93:c8:
37:17:08:2a:77:38:c3:c3:27:ff:d4:c7:21:21:54:88:38:c7:
5a:9a:70:a3:93:84:a2:bf:c2:6b:54:94:1d:f0:a9:0a:e1:cc:
fa:1d:17:c2:4b:4b:d8:cd:b3:38:f2:bd:90:18:3a:6f:b5:4a:
83:f4:6a:2f:fe:04:e5:6d:74:74:99:a8:46:39:2f:ea:cf:98:
0c:48:bc:81:b4:e2:da:35:f4:aa:5d:74:2e:1a:98:3e:38:79:
e1:37:7e:66:a8:92:42:f3:18:3b:5f:c3:b2:2b:aa:f3:97:8e:
fd:de:4e:d7:b3:d9:ec:ea:69:db:42:4e:f5:59:61:27:44:bf:
62:af:31:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:23:47 2025 by rpki-client