Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/At9Vbr5da9NYo2fYvG71HJMn7dQ.roa
File: At9Vbr5da9NYo2fYvG71HJMn7dQ.roa (raw, json)
Hash identifier: 8A+218o93V80wEkyX7Y7+kQtiPkhy2KZ94wDdvFiQrY=
Subject key identifier: 02:DF:55:6E:BE:5D:6B:D3:58:A3:67:D8:BC:6E:F5:1C:93:27:ED:D4
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197ABBB8640706AFA219D7D7B4177A02EEC
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/At9Vbr5da9NYo2fYvG71HJMn7dQ.roa
Signing time: Thu 26 Jun 2025 10:14:42 +0000
ROA not before: Thu 26 Jun 2025 10:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 11:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:bb:86:40:70:6a:fa:21:9d:7d:7b:41:77:a0:2e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 10:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02df556ebe5d6bd358a367d8bc6ef51c9327edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:5d:c3:b0:26:20:ec:b6:0d:a9:1a:d6:b4:
a6:9d:e5:75:71:3b:30:a5:70:5c:bb:53:49:c6:b5:
b2:2a:18:9d:06:4c:a9:d3:60:f2:8e:62:63:75:b8:
3e:eb:2e:9f:53:f0:f4:62:88:da:9a:7e:28:6f:5e:
c8:e6:f4:a3:8a:20:7c:6c:37:94:69:d8:9c:49:88:
d9:7e:5d:f3:a2:d9:ef:6c:26:c0:e5:ee:b4:ca:ce:
c7:60:f6:96:e6:c7:9d:7e:d0:db:79:af:60:e6:c0:
75:26:71:5b:c4:be:e3:97:80:37:60:ea:f3:98:96:
11:e7:e4:27:07:5a:95:2f:2e:72:e8:6a:99:b1:00:
9d:1a:f9:a0:f1:2c:78:40:d5:c1:74:ad:fb:24:8e:
8a:21:43:8e:75:46:95:d5:8f:cd:3e:09:20:fc:93:
d8:54:54:46:a8:e2:d5:4a:c0:39:50:46:e8:f5:25:
85:00:4f:1f:5a:ba:84:0e:c2:73:f5:70:e4:e0:55:
ad:e5:e6:38:79:e3:c3:15:a9:a8:eb:5b:92:f0:20:
12:35:56:c9:e8:66:7f:58:15:e5:29:6c:f5:35:2a:
39:46:48:42:4f:57:0b:3b:89:97:cd:31:29:86:12:
fd:1f:fc:f7:ee:28:d2:83:d4:b9:f0:27:15:7f:cc:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:55:6E:BE:5D:6B:D3:58:A3:67:D8:BC:6E:F5:1C:93:27:ED:D4
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/At9Vbr5da9NYo2fYvG71HJMn7dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
52:f9:a8:fa:3a:b1:e9:b3:ea:0f:b2:b3:41:2e:ef:84:cd:e6:
d5:a4:10:dc:5b:a7:1a:fa:d4:50:25:0e:76:1f:68:d3:b8:11:
c5:ea:be:97:1c:b6:6a:d6:62:16:53:97:a4:92:51:05:a5:56:
32:b1:0c:40:d4:1c:12:94:97:ee:1b:ea:7d:ae:91:61:9a:c5:
cb:cc:9a:18:ab:d8:97:9b:24:1b:36:35:4f:06:97:cb:07:8f:
8d:d4:dc:a4:06:2f:bf:9a:28:f2:dc:c4:40:17:58:3f:8a:bb:
09:d0:2b:42:f5:0f:8f:fd:9c:a5:dc:8e:40:a1:8b:2c:b7:e8:
d9:1e:42:23:17:8a:30:ec:4d:4b:13:b2:9e:35:9e:b4:d0:7f:
e7:fa:d4:6f:6a:93:0b:a3:e3:7f:f5:e3:c4:db:66:ec:4a:fe:
a1:5b:ae:39:33:d3:38:7b:88:bf:06:ed:80:a4:fa:54:90:e7:
2a:2a:59:4d:a7:74:0d:5f:0c:f4:fa:2d:44:d9:92:48:7a:f8:
ba:02:77:60:39:d5:a2:a1:87:0f:05:7c:98:c4:c8:d6:a9:82:
06:4f:95:32:dc:09:36:2f:df:bb:d2:9c:bd:2f:bd:e6:f8:74:
3c:91:e6:54:ea:35:6d:0b:6b:98:2a:81:fb:1e:c8:9d:eb:bd:
86:d4:ef:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:03:49 2025 by rpki-client