Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/F1-GZgvh2x4CRk-9HPcoDT0EJXQ.roa
File: F1-GZgvh2x4CRk-9HPcoDT0EJXQ.roa (raw, json)
Hash identifier: GIERE660lHmvOWuuUBM41U4kFiszWUD/ROCBoI5ZLec=
Subject key identifier: 17:5F:86:66:0B:E1:DB:1E:02:46:4F:BD:1C:F7:28:0D:3D:04:25:74
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977124F8B8FA4BD0E998DE7A42224AB20D
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/F1-GZgvh2x4CRk-9HPcoDT0EJXQ.roa
Signing time: Sun 15 Jun 2025 01:12:17 +0000
ROA not before: Sun 15 Jun 2025 01:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 02:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:24:f8:b8:fa:4b:d0:e9:98:de:7a:42:22:4a:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 01:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=175f86660be1db1e02464fbd1cf7280d3d042574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a8:d6:ea:4e:5f:87:fb:52:5c:7e:3c:d5:c0:
68:11:8a:f7:a3:e6:61:ba:0b:08:b2:4c:5f:4e:fb:
f3:21:43:a7:0b:47:11:71:9a:ec:6c:ac:fc:3e:54:
06:bc:46:5c:fe:3d:af:cd:74:a1:e4:2e:e0:3e:ec:
43:bb:00:5d:d4:05:d8:69:ff:6f:f9:2d:0a:fb:fe:
c3:9b:3b:e1:32:ea:7b:90:7c:d0:17:05:e2:8b:f4:
f8:ac:5d:09:13:0c:33:a5:5b:42:ae:4a:f0:18:ff:
2f:35:d7:14:61:3c:da:39:ad:78:43:91:59:51:bd:
4e:a4:04:1c:0d:1a:71:c8:e2:ae:14:c8:67:0c:c1:
2c:ff:5a:7c:48:0f:19:7c:a1:57:17:ff:36:ab:10:
28:b7:0a:4f:3d:35:e3:e6:4f:40:c4:a6:73:9e:0d:
1a:5c:9e:ad:d0:36:5b:d2:b0:2d:cc:d7:3c:5e:fc:
ec:1e:b7:e4:7d:24:c5:1f:f9:2c:5c:cc:79:08:f1:
e4:05:e0:08:74:30:c4:08:35:10:47:ca:c5:a6:26:
65:8c:06:ba:ac:52:6b:a7:2e:6f:95:5e:41:f2:7d:
d1:a3:31:01:ff:06:cc:8f:eb:7e:98:22:de:70:3a:
d1:31:36:56:0a:19:39:7c:44:33:ff:6f:80:ee:ab:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:86:66:0B:E1:DB:1E:02:46:4F:BD:1C:F7:28:0D:3D:04:25:74
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/F1-GZgvh2x4CRk-9HPcoDT0EJXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
85:2d:65:33:67:36:02:9a:73:58:d6:96:31:e1:92:4e:fa:4e:
ca:bc:05:ae:55:16:18:13:d9:4d:05:0b:97:dd:bd:95:6a:a0:
3c:ef:5a:70:87:f4:1d:5c:b6:d3:19:5e:9c:e2:bf:7f:9f:3a:
fa:d4:0f:fc:e0:7f:40:54:9a:79:18:57:f1:7f:f4:86:63:20:
e2:9a:65:1e:66:02:40:c9:de:36:78:fe:71:bb:d9:a2:2f:22:
d2:eb:8a:04:55:38:a6:d3:13:e6:6f:97:c0:8b:b7:1a:4c:fb:
e1:3b:f7:c0:47:88:e2:c1:25:4b:b6:73:cc:24:14:b0:68:f8:
79:4f:86:96:63:84:ae:fa:0b:3a:e1:81:b4:0a:2f:5b:b5:1a:
09:f5:ca:9b:1e:de:f5:ea:9e:05:c4:b1:9c:bc:6e:00:f2:3a:
c4:58:74:60:49:87:20:dc:12:1e:99:54:c2:03:2c:e3:70:14:
bd:6a:ee:9b:dc:a7:ad:e2:ef:2a:46:32:b6:4c:ad:a7:33:2d:
8b:11:a7:e1:af:f1:ed:d1:e8:cd:f0:ad:89:31:98:a5:1e:d3:
d9:75:62:51:65:f8:19:9a:44:42:39:fa:0b:53:af:43:26:2c:
6a:93:90:d4:b3:d7:7d:bd:16:d6:df:22:cd:d4:86:d3:ee:9c:
93:b0:58:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:31:36 2025 by rpki-client