Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9Ji_A2DeLQZOltfSCZiqUeOVhQM.roa
File: 9Ji_A2DeLQZOltfSCZiqUeOVhQM.roa (raw, json)
Hash identifier: bS8aZT53PflmiRC7W2RJhGooPKJrlMi1eAyUFfRfXIo=
Subject key identifier: F4:98:BF:03:60:DE:2D:06:4E:96:D7:D2:09:98:AA:51:E3:95:85:03
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BDEF8D9B39C9F152E9C9331E85FA7A34
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9Ji_A2DeLQZOltfSCZiqUeOVhQM.roa
Signing time: Sun 29 Jun 2025 23:04:42 +0000
ROA not before: Sun 29 Jun 2025 23:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:bdef:1b3b/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 23:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:ef:8d:9b:39:c9:f1:52:e9:c9:33:1e:85:fa:7a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 23:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f498bf0360de2d064e96d7d20998aa51e3958503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:4d:4e:ab:0d:09:9c:56:ea:57:4c:d6:79:
c2:6a:dd:60:e9:a9:8b:07:5a:6e:c0:e1:c9:99:db:
82:63:cb:ab:2a:e2:5e:ec:3e:00:24:7f:98:4b:1c:
26:7c:7e:f3:ac:72:0d:65:18:c4:9e:3e:0a:85:b1:
f0:97:5c:7e:44:1d:cd:96:c0:c6:0e:e4:e8:f0:ca:
4b:a1:2e:bd:8a:cd:83:09:fe:44:00:25:69:9f:36:
76:a2:71:21:d7:ea:8f:a5:71:53:7f:df:75:ca:33:
74:63:d5:75:a9:0c:39:b5:4c:17:c3:7c:0a:0a:a6:
83:3c:9a:f0:aa:fd:eb:15:ef:07:3e:e3:c2:95:f6:
47:c6:d7:a2:f1:ba:04:6f:ae:1f:2f:58:a7:3b:9a:
88:51:4e:73:c2:fc:c8:48:23:12:fa:a6:b8:7f:51:
c0:e0:b9:f4:52:bd:63:6e:8a:8e:be:2c:24:b3:f3:
4e:c7:1c:23:98:74:40:46:e8:89:ea:84:12:2a:e6:
37:34:4c:f9:9e:d3:a0:8c:9d:a1:e5:1e:43:0e:f4:
5d:42:75:60:51:ad:2a:59:21:bb:e8:c3:73:ed:9a:
f7:02:a8:3d:83:96:c9:eb:1a:f7:ca:79:0c:81:07:
bd:bf:2a:de:89:0e:99:6f:bd:11:7d:fa:5f:58:bd:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:BF:03:60:DE:2D:06:4E:96:D7:D2:09:98:AA:51:E3:95:85:03
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9Ji_A2DeLQZOltfSCZiqUeOVhQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:bdef:1b3b/128
Signature Algorithm: sha256WithRSAEncryption
4a:97:80:3f:9d:b4:6f:1e:21:08:df:38:92:e1:c3:7d:fc:bc:
73:55:af:e1:f9:4e:8f:d2:6c:94:d8:76:5e:09:27:15:eb:45:
33:2d:2a:46:cb:2c:69:d8:a9:87:b7:e2:63:d1:88:9c:8d:10:
7d:bb:92:17:29:0a:51:39:c0:34:36:b4:e4:07:3e:47:17:3a:
4d:52:fd:c3:a1:c3:e4:1d:3e:21:c0:2c:30:de:ed:1f:80:1a:
8c:1c:3c:20:8f:ee:7a:3d:6b:2f:d6:93:4e:ac:8f:98:97:96:
5f:e5:6d:be:6a:a9:dc:14:f1:a8:90:8d:57:7e:f1:0d:32:cc:
29:50:51:32:d5:4b:62:a5:51:2e:88:6d:7d:2b:6e:fa:1d:fd:
d7:13:22:20:82:45:71:7e:a0:a4:f7:ed:3a:25:80:a5:64:9d:
07:af:66:6d:16:c0:0a:de:f4:59:58:29:ec:e1:4f:45:65:0f:
f1:bc:25:93:89:03:7e:86:0a:a6:7c:42:a4:b9:ab:d5:00:b6:
6d:92:ab:70:68:49:0e:67:1f:4c:ce:0f:c2:4b:b0:02:0f:bb:
ad:9a:6c:cb:a2:a3:0e:24:38:23:ce:31:6e:bb:c3:2d:61:84:
12:eb:4a:32:b2:f7:33:ec:fc:34:fd:92:4e:8e:d8:1e:89:49:
c0:61:f1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:44:33 2025 by rpki-client