Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/CvoI--xH3FbeVVgqWYNUv7I9XBA.roa
File: CvoI--xH3FbeVVgqWYNUv7I9XBA.roa (raw, json)
Hash identifier: YCuWgl57gksghYyyp1j/5kQCg9XuHO885c5bi0x8ZSo=
Subject key identifier: 0A:FA:08:FB:EC:47:DC:56:DE:55:58:2A:59:83:54:BF:B2:3D:5C:10
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197726F79ACF49A1C2B98A7844FD7719F87
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/CvoI--xH3FbeVVgqWYNUv7I9XBA.roa
Signing time: Sun 15 Jun 2025 07:13:17 +0000
ROA not before: Sun 15 Jun 2025 07:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 08:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:6f:79:ac:f4:9a:1c:2b:98:a7:84:4f:d7:71:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 07:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0afa08fbec47dc56de55582a598354bfb23d5c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:00:6d:34:56:d5:82:20:99:49:71:8b:98:
6c:25:ce:79:a2:7c:84:17:48:80:b6:5b:fe:b1:32:
8b:65:07:7a:a0:83:23:78:da:f9:d9:cc:80:e6:12:
a5:cc:97:48:78:c0:e8:01:89:19:28:a1:e5:1d:c8:
8a:3a:53:9a:10:20:73:f9:58:45:74:f6:7b:79:22:
2d:e6:4a:d7:3f:28:e0:47:d9:4a:32:7b:ee:40:4d:
54:e9:16:d3:4b:1b:91:96:0c:f5:f3:33:7d:9c:38:
e2:8b:2c:10:ef:7b:de:58:7b:d5:df:3d:c6:c8:ca:
ed:a1:51:9e:79:83:3f:35:fe:42:22:b2:a2:0c:2d:
38:41:5d:42:05:7f:ef:3d:76:73:1d:2b:e9:32:48:
4b:4e:f6:37:40:bf:e5:55:37:a4:ea:c3:2d:47:df:
a9:2b:01:94:ed:5c:bf:f9:1f:68:f5:7e:b8:03:c3:
a8:fa:d5:32:b0:6e:55:f4:3a:a2:9f:c9:35:68:64:
73:ec:83:33:71:0b:c7:44:06:56:7e:d2:78:e6:29:
4d:79:93:dd:72:d9:86:ed:a3:f9:3e:8e:2b:85:08:
73:ca:36:7f:e3:f2:e3:5b:ed:90:28:56:2f:a6:42:
8e:17:31:7a:a9:77:ab:e0:d5:45:b8:1d:33:7d:7e:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FA:08:FB:EC:47:DC:56:DE:55:58:2A:59:83:54:BF:B2:3D:5C:10
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/CvoI--xH3FbeVVgqWYNUv7I9XBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
46:7c:e8:fb:71:87:1f:98:da:a5:b1:81:a8:15:b9:85:f6:82:
7e:1f:f2:1b:1b:7d:83:4e:0f:37:b6:35:6f:aa:f6:16:33:b2:
34:06:a5:26:dd:55:79:b0:1f:6e:a7:47:5c:b2:12:9b:bb:2d:
ae:64:c2:90:40:e3:53:ea:5b:25:32:26:21:9c:dc:e3:74:d9:
50:36:94:ab:f9:19:d4:4b:0c:d5:73:99:81:14:10:ec:9a:93:
55:f3:7e:d5:3b:dd:d6:84:52:f8:65:b7:6f:ad:44:54:f5:51:
d4:8b:fe:a1:2f:de:a0:e4:f3:c6:1c:79:40:c4:1c:0e:34:c4:
0d:d0:60:ee:d7:ff:56:a5:23:c7:e8:0e:ad:dc:66:3b:41:19:
bc:38:3d:7c:bb:eb:e8:a6:19:1b:54:37:22:8d:4a:c6:93:1b:
85:6f:67:4f:bc:70:40:22:cb:19:c8:46:26:dd:a0:05:5e:e6:
27:76:67:4f:b1:e8:78:e1:9e:db:2d:14:91:b6:11:b3:7f:f8:
28:4c:2c:d5:ec:d0:90:f7:0b:cb:74:7a:1d:21:e2:44:d9:7d:
76:09:ea:0a:71:b0:f1:0f:f2:2b:39:18:ea:e5:b7:43:ad:53:
d3:ea:b7:2b:8b:58:8a:61:65:40:d5:2b:cb:41:05:a7:74:e0:
c1:2b:44:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:01:11 2025 by rpki-client