Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9siQrDVoko4eRy6vmq0RYNhSbSI.roa
File: 9siQrDVoko4eRy6vmq0RYNhSbSI.roa (raw, json)
Hash identifier: PdFvOMEIgApI/VAgDV7RdA9Ddr1XPsFzCUFBu6UkbHU=
Subject key identifier: F6:C8:90:AC:35:68:92:8E:1E:47:2E:AF:9A:AD:11:60:D8:52:6D:22
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979FB895058EA79E0A94830C73CD4B8FDB
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9siQrDVoko4eRy6vmq0RYNhSbSI.roa
Signing time: Tue 24 Jun 2025 02:16:03 +0000
ROA not before: Tue 24 Jun 2025 02:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 03:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9f:b8:95:05:8e:a7:9e:0a:94:83:0c:73:cd:4b:8f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 24 02:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6c890ac3568928e1e472eaf9aad1160d8526d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:b1:65:71:63:73:7e:e7:cf:40:de:8f:ae:
0e:49:e0:63:56:fe:35:c6:dc:3f:e7:d2:02:2c:61:
64:3a:b1:73:3a:db:e4:52:89:02:a3:de:95:11:cc:
30:b5:6a:c9:b3:ee:6e:2e:15:2e:51:4c:7d:d8:97:
74:36:02:54:36:28:37:40:91:d7:58:43:81:79:e0:
8b:ee:2b:83:33:6a:2a:80:b1:3b:fe:21:c6:8f:8a:
ac:28:34:4a:d9:07:e4:aa:5e:c2:ac:6a:80:b8:27:
14:d2:86:76:be:63:47:bd:ae:d1:65:c3:83:c9:f9:
c1:64:a3:af:b7:dd:c9:c1:e9:f5:29:fb:f9:ff:8d:
ae:f8:db:fa:83:2a:b6:54:bb:fc:e4:76:64:7d:e6:
73:35:1a:2c:2d:d0:df:08:b3:cb:b9:3d:27:b2:9e:
8b:4f:c1:bb:ba:c7:0b:01:5d:f1:12:41:b1:9e:e6:
ec:6a:ec:54:19:e1:ef:b8:59:5a:50:ad:17:88:73:
a6:ee:02:75:b8:4c:94:a4:1c:59:04:13:33:d9:31:
10:cb:92:16:4b:f0:db:f5:4a:fd:ea:00:db:a6:12:
fd:a3:e7:bd:09:99:b1:38:29:aa:e6:72:84:95:dc:
d0:a3:b8:ac:04:a1:39:23:63:4d:01:3d:cd:41:ac:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C8:90:AC:35:68:92:8E:1E:47:2E:AF:9A:AD:11:60:D8:52:6D:22
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/9siQrDVoko4eRy6vmq0RYNhSbSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2a:f0:ac:37:83:25:37:fa:df:d3:8a:c0:ac:39:ab:79:d9:c5:
0d:2c:ee:fe:8f:eb:32:7c:97:6f:67:61:8e:32:dc:f0:92:01:
06:26:b5:35:07:20:89:0f:82:c3:b9:87:5c:ac:0f:bf:ac:aa:
f7:b0:58:d3:8d:fa:17:80:45:a3:ce:4e:58:f5:86:bd:45:2c:
28:71:c7:92:c8:cf:60:57:b9:a0:60:de:65:b8:cc:a0:57:a1:
cc:2a:80:2c:4e:10:4a:26:65:b4:cc:6d:06:d6:09:ef:07:a3:
76:8d:c5:5f:3d:3c:93:96:a9:39:a4:31:11:0c:cb:ba:3c:cd:
bc:c0:63:4c:25:dc:09:0c:6b:95:6c:45:d9:a4:41:91:57:e8:
8b:b0:de:0b:37:ae:ee:bb:17:6e:e3:9c:1c:c8:2a:57:a7:98:
51:45:34:03:3b:3f:25:fb:30:4d:c8:81:2c:d9:09:14:de:60:
3e:01:cf:21:00:03:ac:19:7d:ab:f6:cd:de:a8:98:e8:55:19:
05:b3:34:03:72:d3:04:b0:e1:27:d6:ea:e7:4f:b0:df:66:f2:
7e:4a:0c:b4:66:6a:f7:79:b5:73:83:a2:13:1c:c8:81:e4:ca:
04:43:09:ac:0e:57:89:e1:72:d7:b5:60:bf:35:db:f6:ca:5f:
c1:2b:2a:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:06 2025 by rpki-client