Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/C5_b-of4r_QhnUen1p8qs3Xy284.roa
File: C5_b-of4r_QhnUen1p8qs3Xy284.roa (raw, json)
Hash identifier: ZWzTNMHAU7BhyRaQXkmn6OdCSnBipNxgtykZ49MDWN4=
Subject key identifier: 0B:9F:DB:FA:87:F8:AF:F4:21:9D:47:A7:D6:9F:2A:B3:75:F2:DB:CE
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A5B7922D1434C5E605A8A7CF408A3C83
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/C5_b-of4r_QhnUen1p8qs3Xy284.roa
Signing time: Wed 25 Jun 2025 06:12:40 +0000
ROA not before: Wed 25 Jun 2025 06:12:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 07:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:b7:92:2d:14:34:c5:e6:05:a8:a7:cf:40:8a:3c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 06:12:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b9fdbfa87f8aff4219d47a7d69f2ab375f2dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:23:62:be:94:3e:cd:1f:84:b9:90:77:a4:
c3:38:6d:44:c5:90:80:a7:88:46:18:bc:24:1f:6c:
c6:c1:b6:cd:86:b5:5d:37:52:11:f9:83:fb:e3:ce:
6f:af:b0:c4:f6:9c:bd:71:1c:76:4d:0d:fe:2e:d0:
1c:76:0f:bc:56:ff:5a:c1:ec:ba:31:2a:94:72:d1:
0d:64:0f:16:57:b6:f5:c0:0a:0b:65:8d:36:f7:37:
22:ba:5a:8f:b0:ba:ee:51:d7:25:25:8c:86:26:bd:
21:c5:3c:f8:ea:48:18:31:64:f8:6c:13:de:eb:8a:
08:29:2d:ee:68:a0:01:a8:e7:91:c2:08:de:67:40:
20:60:f0:98:9c:5a:81:e5:6d:3b:08:e3:49:33:e0:
f8:62:22:18:e7:29:58:f0:4f:d4:a3:ce:99:e0:06:
b7:6f:a7:bc:3b:42:25:a6:75:ae:73:30:f2:0f:96:
f1:55:e5:04:8d:cf:5d:a8:31:2d:4e:5d:22:b7:9b:
22:64:db:3e:44:30:0c:19:37:bf:8e:1d:99:44:96:
83:4c:1e:0b:b7:76:ea:6a:a2:e5:13:75:bc:b8:c2:
22:ee:77:ac:98:97:04:3f:29:6d:dd:52:90:5b:52:
dc:20:d8:2c:15:c0:4b:ac:aa:3e:49:c9:40:3e:32:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:DB:FA:87:F8:AF:F4:21:9D:47:A7:D6:9F:2A:B3:75:F2:DB:CE
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/C5_b-of4r_QhnUen1p8qs3Xy284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5c:cf:4b:4c:52:5a:ea:4c:f1:18:6f:3f:7a:04:b7:e3:7b:b9:
4d:76:33:42:e4:bc:51:fc:96:30:c6:6b:8a:32:8a:7e:9d:83:
6f:df:8c:13:6a:d1:43:60:70:90:3b:4d:a3:b8:37:9f:35:f4:
cf:e1:76:40:be:a6:f3:8f:44:f0:41:49:8d:72:74:dc:eb:af:
cb:14:73:ae:0c:97:b3:43:b7:d2:31:44:99:9b:4f:4b:77:54:
49:3c:be:85:10:7d:e3:43:bd:3f:70:f3:fb:20:49:df:b2:37:
c4:a8:44:09:56:cf:71:bc:2c:f9:1c:2a:0d:c2:a0:16:e8:41:
9d:df:fb:ad:38:ae:19:10:2f:e0:1c:d4:0d:61:09:db:a5:1e:
67:96:8a:38:05:f1:4c:dd:8a:51:8f:0c:a3:75:21:5e:47:17:
eb:6f:7d:8f:3c:e4:9f:ef:29:e3:e5:2a:0e:c9:2d:1e:e7:0b:
b1:87:a5:20:26:7e:5a:e4:03:7d:cc:a5:7b:74:19:17:98:4e:
7a:2d:62:b9:50:99:7c:a6:b0:0a:5d:0e:e2:aa:42:ea:9a:a3:
ba:35:a9:15:25:c7:63:23:2c:2b:34:ea:fc:e9:74:cd:1a:8b:
a7:f5:f9:eb:19:2c:fa:67:bb:fe:a4:26:ae:11:a8:e8:18:10:
59:68:a5:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:56:55 2025 by rpki-client