Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/EkMkFU0hkYG_IUsJzy7Xx1Tl9BE.roa
File: EkMkFU0hkYG_IUsJzy7Xx1Tl9BE.roa (raw, json)
Hash identifier: It8c00ghBEYOOGRPMcN15qh+N5C35DzTiVsqvHcg/M4=
Subject key identifier: 12:43:24:15:4D:21:91:81:BF:21:4B:09:CF:2E:D7:C7:54:E5:F4:11
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019794C53C58B389B4FB799FD66B3BA5E383
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/EkMkFU0hkYG_IUsJzy7Xx1Tl9BE.roa
Signing time: Sat 21 Jun 2025 23:14:03 +0000
ROA not before: Sat 21 Jun 2025 23:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 22 Jun 2025 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:94:c5:3c:58:b3:89:b4:fb:79:9f:d6:6b:3b:a5:e3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 21 23:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=124324154d219181bf214b09cf2ed7c754e5f411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:ea:3b:86:0b:95:d8:c0:66:b8:dc:56:47:
cb:ea:bc:d3:61:17:79:7d:96:95:6a:39:0b:06:2a:
e3:41:21:6b:f3:d0:45:44:3f:0c:62:2c:68:a7:f8:
3f:61:e3:0b:f2:2d:4a:db:8a:ca:99:be:8d:c9:e5:
d2:1e:05:14:59:d7:5b:06:cc:61:f8:a4:8b:2b:98:
b6:2d:b8:24:e8:15:ff:5e:77:41:ac:fe:2a:b3:5d:
b3:03:43:51:4f:6f:37:8f:fd:d5:3f:9a:eb:ca:cb:
51:48:f2:19:df:d8:3d:1b:a0:61:81:08:88:98:1e:
11:a1:b7:a0:f0:52:d6:37:17:23:b2:78:14:c1:77:
99:d5:54:99:c2:6a:71:56:51:20:f4:61:4f:9d:16:
ca:63:3a:7c:02:cd:3c:7b:cd:7f:02:4c:c7:74:a6:
3e:e7:da:7b:95:90:82:c8:f4:0c:9f:9f:3b:19:9e:
e7:f6:a5:8b:a4:5d:3a:86:cd:bd:44:fb:af:db:f1:
0c:49:b9:95:4c:3a:c7:5a:50:03:83:4b:09:76:7a:
ee:d7:08:cf:2d:b9:8b:16:55:9f:8f:5c:3e:0b:59:
fe:04:19:4c:f8:16:f2:fa:17:61:04:3d:59:2d:c1:
11:45:f0:ef:b8:ec:2a:91:68:a1:23:00:69:19:7d:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:24:15:4D:21:91:81:BF:21:4B:09:CF:2E:D7:C7:54:E5:F4:11
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/EkMkFU0hkYG_IUsJzy7Xx1Tl9BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
03:a0:6f:38:08:23:b1:d7:3d:54:fa:c2:48:dd:c8:a9:0a:2d:
02:bb:e3:5e:83:5b:8f:6f:94:55:82:f8:c6:76:e3:46:d3:ac:
7a:af:01:e2:7a:e5:fd:2f:cd:2d:e8:53:c1:df:91:3a:41:27:
9b:6c:25:71:62:32:17:62:22:7d:42:d2:f6:55:45:2f:17:0c:
fd:b4:43:23:7f:6e:e2:5d:49:bf:75:de:fc:1a:3d:71:d9:b0:
d1:bc:bd:d5:e0:73:61:17:f4:ff:ae:a8:61:34:f1:8e:4d:f1:
3e:53:be:1e:3d:6b:ae:a3:5c:df:b7:8e:07:65:e7:29:73:85:
c4:85:31:d1:8f:3b:66:70:d0:c8:06:a8:c9:cc:c0:58:25:a4:
02:a9:a2:90:72:b8:d8:07:e0:ee:af:c2:0f:46:4d:8b:13:6a:
a7:ad:0e:ea:8f:08:58:7a:c3:3d:83:0b:2c:97:fd:91:40:5a:
6c:32:79:32:d6:89:f9:60:71:8d:2d:12:bd:e8:0b:c8:69:2a:
af:96:4d:e3:bc:3c:cb:01:da:8d:41:e4:f7:80:e9:15:49:d1:
03:53:2d:2c:77:33:bb:94:0e:8e:3b:27:35:93:a4:23:70:ee:
6c:f7:c0:0f:a4:a6:dc:3e:2b:21:37:02:57:e9:c9:c0:7c:8a:
f0:68:f0:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:56:55 2025 by rpki-client