Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/BFTLisJz5V4hSCA6Wepm8MrTY2k.roa
File: BFTLisJz5V4hSCA6Wepm8MrTY2k.roa (raw, json)
Hash identifier: 1LbU+2KIHFjy1Mf+JyOe50sdMkmlSixMi3fsB9V0foc=
Subject key identifier: 04:54:CB:8A:C2:73:E5:5E:21:48:20:3A:59:EA:66:F0:CA:D3:63:69
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197892D17F986C0285E01F259E1739A384E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/BFTLisJz5V4hSCA6Wepm8MrTY2k.roa
Signing time: Thu 19 Jun 2025 17:12:03 +0000
ROA not before: Thu 19 Jun 2025 17:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 18:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:2d:17:f9:86:c0:28:5e:01:f2:59:e1:73:9a:38:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 17:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0454cb8ac273e55e2148203a59ea66f0cad36369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:f8:94:dd:91:19:f6:e5:a2:31:80:5d:64:
ad:6e:6c:d4:42:bd:1f:ae:82:af:0d:f9:c9:84:58:
0e:39:52:ca:85:28:82:73:fc:6b:4b:91:82:79:9b:
6b:65:c4:4e:24:2a:8b:c6:15:f8:0a:ec:85:f3:e7:
93:b1:9a:5d:31:74:b4:72:36:cb:eb:a6:e4:13:bb:
2e:30:21:20:58:fd:ac:26:02:ca:47:96:2e:a9:7b:
2e:0b:58:ca:41:b5:8f:7a:61:c0:72:49:f3:85:a6:
3b:2d:9e:ad:bf:de:c4:d1:90:3d:ec:9b:0a:3b:13:
ef:55:ae:0d:d6:1a:82:ca:07:0f:09:71:84:86:5c:
16:b6:a0:2e:e5:23:e4:71:d7:c1:92:fd:15:f8:70:
78:43:15:79:c2:8d:0d:61:e9:55:57:21:ce:29:de:
ea:d8:80:7b:6d:1e:68:33:77:67:49:c1:2c:d9:ec:
a4:b0:0f:ab:16:65:4b:c7:e4:7c:99:2c:54:60:27:
3e:60:e4:59:a8:ed:3d:8e:47:1c:cf:a0:f0:f0:4c:
d4:6d:15:70:45:41:60:91:92:28:97:14:27:e7:74:
07:97:5a:7c:0e:1a:5b:76:65:88:70:ac:f9:35:e6:
0d:a6:d1:df:dc:21:df:63:68:7e:06:21:cb:8b:50:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:CB:8A:C2:73:E5:5E:21:48:20:3A:59:EA:66:F0:CA:D3:63:69
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/BFTLisJz5V4hSCA6Wepm8MrTY2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2a:6f:b0:d9:43:28:b2:70:0b:3e:c5:c3:ff:5c:4d:36:72:37:
d2:69:84:3a:b9:f7:db:97:57:57:84:aa:f8:0d:c3:26:fb:d0:
9f:ac:c7:c7:4f:1d:fb:62:1e:71:17:05:1d:be:0e:de:58:5b:
f5:81:a0:09:b8:4a:2f:ec:68:3e:78:9a:8b:6c:04:74:e5:51:
fd:e6:79:4d:ae:83:cc:a0:23:0c:a7:4d:6f:a2:01:1a:50:50:
05:a9:4d:a7:8c:bc:bc:ff:a3:f3:bf:94:7b:85:ba:54:20:b5:
7f:bf:2c:11:0b:f7:c2:fd:05:bf:0f:d0:17:c7:de:34:18:73:
2f:4d:ee:a7:dd:51:69:35:cb:61:ad:4e:aa:8b:fb:69:6c:10:
96:ca:bb:91:c7:12:a9:d7:a1:3d:b0:40:1f:f3:85:56:af:a1:
13:8f:2a:19:06:e2:81:62:d6:64:89:ef:a9:a9:92:e2:65:21:
db:4b:ae:84:38:68:e3:fa:f8:e7:14:a0:e4:cb:79:64:32:9f:
73:80:88:80:5d:10:f4:5c:74:b0:95:a2:42:b6:40:50:be:54:
b2:53:86:b9:1f:b2:c6:41:e6:1a:e3:91:e0:fa:58:3b:71:b3:
a5:7e:6e:bb:30:aa:a3:20:75:46:1b:a1:b9:79:d9:dd:f7:ea:
2d:95:d9:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:10:43 2025 by rpki-client