Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Es6E_FFy1XROJH7N5JqXYMFqzoE.roa
File: Es6E_FFy1XROJH7N5JqXYMFqzoE.roa (raw, json)
Hash identifier: 9Y7r0lmjrnWyzX6hqtB6zDJFNkcvt0hTHrqTMlpGdkc=
Subject key identifier: 12:CE:84:FC:51:72:D5:74:4E:24:7E:CD:E4:9A:97:60:C1:6A:CE:81
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197ADDFEABF763295D100C54AF43AF354E4
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Es6E_FFy1XROJH7N5JqXYMFqzoE.roa
Signing time: Thu 26 Jun 2025 20:13:42 +0000
ROA not before: Thu 26 Jun 2025 20:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 21:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:df:ea:bf:76:32:95:d1:00:c5:4a:f4:3a:f3:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 20:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12ce84fc5172d5744e247ecde49a9760c16ace81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:dc:f5:75:97:9f:e9:08:71:44:8e:a2:a6:
32:98:6d:12:a4:d5:f4:9d:9f:f3:6c:c1:6a:96:66:
47:01:67:24:ef:f3:a2:29:aa:30:58:c0:f7:e1:28:
e5:76:28:62:c7:67:4d:8b:41:43:56:7a:33:f0:e5:
6b:ef:49:53:aa:fa:fa:40:4a:6e:df:bd:f7:2b:71:
ca:3a:5c:72:a6:1b:60:0b:d1:fe:6a:90:2d:46:2c:
44:46:8c:ea:86:b7:cb:80:b9:79:38:11:b1:cc:6d:
5c:7f:72:c9:59:d3:19:f9:20:57:39:b2:08:9f:e6:
87:fb:e4:d2:94:d1:6a:3c:2d:f5:7a:bd:ce:3b:26:
2f:27:1c:f8:58:b2:f2:82:96:ce:b6:fb:63:b8:21:
2c:44:1d:79:56:30:a2:c6:e0:23:53:75:eb:37:64:
53:6e:fb:a4:19:39:5b:8e:94:fe:89:9d:af:d7:8d:
b3:46:ee:da:8d:fa:9d:d0:df:62:9c:97:76:bc:e1:
cf:ce:eb:05:8c:f0:ef:ec:c7:ab:62:76:ac:cc:87:
cc:1e:0d:55:49:30:e5:cc:42:e7:99:04:4e:f4:02:
9b:a9:2a:ab:7a:4f:93:85:77:f7:21:b0:d7:d4:23:
e0:dd:62:1f:76:59:da:43:c8:b0:32:0e:fa:67:08:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CE:84:FC:51:72:D5:74:4E:24:7E:CD:E4:9A:97:60:C1:6A:CE:81
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Es6E_FFy1XROJH7N5JqXYMFqzoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5e:b9:b5:d0:54:e0:5d:da:86:93:8e:df:a9:b3:cf:f6:a8:7c:
2d:73:7f:93:97:ea:1c:53:98:53:5b:fa:a9:40:7a:9a:71:a3:
08:1a:e5:a6:be:c4:bb:0d:2e:2d:5d:19:6d:61:fb:8d:69:be:
85:9b:ca:e3:3f:74:de:41:05:62:66:08:89:76:a7:47:b3:d4:
73:3e:ef:94:06:77:66:eb:75:32:c3:25:1c:3d:5d:89:f5:41:
ff:2f:cc:c8:0a:d6:bb:26:6c:06:67:95:fe:7a:d8:e4:55:76:
f1:b9:6d:b8:16:68:4f:b7:0c:a3:88:d6:59:3a:77:b0:08:1b:
82:7f:ee:12:10:0d:f8:a0:f6:f7:fe:02:27:b2:3c:1b:ce:dc:
ee:67:38:38:f9:3b:c4:2c:f9:be:dd:7e:5e:ed:89:22:30:6a:
3c:3e:8a:0f:89:f1:e4:7c:dd:8d:e1:c4:83:94:dd:c2:f2:ba:
f1:48:26:51:94:ad:6b:60:a8:07:a8:1c:11:4e:d0:b7:1a:25:
f5:74:56:30:c0:2b:a2:aa:44:be:6b:29:2c:f2:36:e9:ab:42:
d8:7a:ee:6c:12:ed:f1:58:22:9d:7d:5c:6e:1c:cc:e8:eb:76:
23:63:f6:23:62:78:b0:e7:17:bb:ae:d6:33:d5:1d:c9:72:05:
8d:c8:b2:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:33:10 2025 by rpki-client