Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FQzEL97ORH82O_VVAmnLyT6JV50.roa
File: FQzEL97ORH82O_VVAmnLyT6JV50.roa (raw, json)
Hash identifier: YXQS+FVQbGMITvAgyjdMUJnyy6vePJPaNZ7s6YZ5g4M=
Subject key identifier: 15:0C:C4:2F:DE:CE:44:7F:36:3B:F5:55:02:69:CB:C9:3E:89:57:9D
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979CEACE94E6718E80FD650D306DAE1759
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FQzEL97ORH82O_VVAmnLyT6JV50.roa
Signing time: Mon 23 Jun 2025 13:12:03 +0000
ROA not before: Mon 23 Jun 2025 13:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 14:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:ea:ce:94:e6:71:8e:80:fd:65:0d:30:6d:ae:17:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 13:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=150cc42fdece447f363bf5550269cbc93e89579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1a:96:cc:b4:3d:85:1a:40:79:06:2f:a5:e1:
d9:ec:11:d7:d9:98:c8:52:23:60:ec:0e:33:11:ca:
a4:f8:e9:87:a6:9c:69:c7:02:b5:f9:76:03:66:e9:
76:9c:08:7a:db:7f:62:2b:b8:51:ba:0e:13:e4:8b:
e6:61:41:f7:5a:0c:e6:32:9a:8c:a2:98:02:11:22:
64:07:6f:b6:a9:29:6d:7c:c2:b8:8d:56:74:b8:1f:
9f:b9:2f:91:57:77:9f:3c:49:fc:0d:ee:64:10:7e:
7e:96:39:d6:4a:3e:fd:d5:53:8d:66:ea:54:52:fd:
c7:11:8b:0f:0a:31:0e:d7:c6:40:95:8b:5d:48:23:
83:5c:60:dd:7a:cc:8b:38:cc:40:dd:3d:93:d5:68:
a6:cc:88:12:86:17:86:30:78:b8:c8:94:52:b8:b1:
ce:70:87:06:c7:e6:ec:7a:58:4c:94:f5:b0:03:ee:
41:42:7c:67:6a:16:5e:97:4b:d7:06:cd:d1:b5:22:
35:5a:77:cf:22:d6:34:39:30:48:08:cb:1b:60:7a:
da:2e:2a:e3:65:12:4c:5a:7b:0c:12:a8:35:c2:10:
64:f8:9d:39:b9:85:b9:88:28:d4:e1:dd:ac:b1:39:
ff:ac:7f:fe:c4:26:e6:c6:5e:79:e4:94:b7:6f:e4:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0C:C4:2F:DE:CE:44:7F:36:3B:F5:55:02:69:CB:C9:3E:89:57:9D
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FQzEL97ORH82O_VVAmnLyT6JV50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4e:4d:f2:ef:29:2c:cd:da:36:dd:c0:d1:11:64:0b:b1:06:31:
1d:48:d2:c0:f0:2a:24:cf:01:82:4a:b3:5f:92:06:49:c9:fc:
c8:e9:f1:08:ff:a4:9d:3b:88:a3:82:09:d7:57:bf:eb:72:a7:
ac:3f:1e:a6:d8:f6:27:2e:1a:18:6c:d8:c5:a0:56:49:a5:54:
38:1d:2e:8d:0b:4a:2c:da:ba:5b:1d:da:e1:c4:e4:1a:79:59:
f9:34:73:67:d9:fd:cf:d8:ea:fc:89:b7:74:8f:f8:b0:34:d2:
17:fd:dd:b4:72:de:f4:f3:73:7b:38:3b:1b:83:07:39:71:29:
e5:df:33:3b:53:20:ca:5e:58:ac:01:86:c9:d8:4d:90:b4:51:
68:8f:56:1a:4a:9c:9e:7e:5f:c3:db:f1:0d:3f:79:48:d0:27:
27:aa:fe:05:f6:6d:73:13:e3:44:91:9b:9c:7a:f3:76:d9:36:
e0:ad:92:e8:68:36:eb:e7:c1:a7:6f:18:69:43:2f:82:a9:8b:
ae:fd:18:12:fc:95:21:7c:b8:4a:44:64:d4:b9:c1:a7:fc:3a:
f2:05:5c:ad:23:b2:a2:f2:bc:29:16:de:85:09:02:c2:03:05:
cc:bd:76:0d:a3:50:a0:2a:27:38:d3:21:eb:a6:53:f9:1f:df:
d3:3b:d4:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:17:56 2025 by rpki-client