Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FqoAaC_vR4Puo9VYi1ggDabadiE.roa
File: FqoAaC_vR4Puo9VYi1ggDabadiE.roa (raw, json)
Hash identifier: 1b73PnFZJdQxpRYEWQLBU+ojIJRYWjl7HiYsnfLA40s=
Subject key identifier: 16:AA:00:68:2F:EF:47:83:EE:A3:D5:58:8B:58:20:0D:A6:DA:76:21
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977503924B0A1734B6B2B481835DC21667
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FqoAaC_vR4Puo9VYi1ggDabadiE.roa
Signing time: Sun 15 Jun 2025 19:14:17 +0000
ROA not before: Sun 15 Jun 2025 19:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 20:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:03:92:4b:0a:17:34:b6:b2:b4:81:83:5d:c2:16:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 19:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16aa00682fef4783eea3d5588b58200da6da7621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:f1:a8:41:36:90:99:fc:fc:65:bd:09:7e:
96:fc:73:dc:c3:40:04:55:34:c6:3e:11:42:7c:b5:
5d:c9:dd:ba:9e:aa:e2:9e:fe:3e:83:5c:df:38:20:
41:9a:2e:87:f1:ec:cf:6b:c4:b7:6f:cb:bd:ae:eb:
81:89:fd:9c:21:aa:46:2f:2d:8d:b6:97:0a:f7:ff:
c7:51:a2:c4:39:17:de:e2:63:06:41:f4:2c:eb:6b:
21:5e:be:ec:6c:18:8f:32:03:94:a3:a4:a1:7b:75:
1a:a9:0e:59:2d:d3:f2:b1:79:02:5a:a8:4d:01:f7:
a8:f5:ae:b7:b9:41:c4:1a:1d:cb:c5:f3:47:b9:4d:
6c:d6:75:b9:d3:a2:bb:a5:47:b1:e2:de:df:fe:07:
f7:01:61:12:28:2f:a5:98:3d:f0:ad:2f:ae:db:39:
19:46:79:3f:bf:3f:02:81:ff:81:65:7e:be:71:9b:
68:11:0c:41:00:eb:44:9b:2e:16:94:25:b4:63:58:
b3:c7:43:18:f6:6e:91:41:82:06:6f:29:ab:ce:b4:
57:c1:17:98:25:3d:79:b7:0c:47:47:29:f7:42:cb:
9f:96:1b:a5:3c:22:c7:30:cd:75:18:6f:8d:74:e8:
7d:8e:80:bb:2a:cf:41:da:57:6b:a8:74:53:f5:2f:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:00:68:2F:EF:47:83:EE:A3:D5:58:8B:58:20:0D:A6:DA:76:21
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/FqoAaC_vR4Puo9VYi1ggDabadiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
25:97:a4:05:c3:d1:3f:63:8e:2d:36:04:5b:b5:03:ca:48:9b:
50:0c:00:b6:ae:50:ad:e6:3c:7f:ec:4b:47:15:72:30:20:78:
e1:ab:2b:9d:41:b7:ef:2c:db:d1:d2:31:2e:ad:19:e3:e9:fb:
f2:44:1b:30:15:da:d6:df:d3:a3:94:2e:d8:ae:a7:63:80:44:
b4:75:ea:1a:fd:ee:fa:30:13:2f:31:d3:c0:d0:fe:7e:02:2d:
54:4b:33:7b:17:ea:97:1f:df:09:77:4c:30:7b:e5:48:c7:a8:
21:9c:ee:c0:26:2b:fd:9f:4a:c1:9d:15:55:d8:74:85:c4:86:
45:43:ee:61:f6:48:8f:20:79:1b:be:cf:ff:8f:55:83:bb:c7:
ef:23:08:ad:7b:a3:62:29:e8:0c:47:9c:59:61:23:de:81:18:
7c:da:63:5f:ff:6a:59:7b:11:df:18:1b:a5:90:55:18:11:0f:
f3:1b:9d:c8:4d:1c:78:e6:e9:b6:2f:0c:a4:a1:0b:2a:e7:99:
01:58:57:62:c5:64:1b:e0:0b:b2:41:72:b9:ba:e0:bf:e7:39:
f6:5c:bf:95:cc:5e:e4:ff:0a:a4:26:08:42:3a:99:b0:b6:bb:
3d:84:f5:9f:3d:9e:f8:2c:84:fc:52:d3:00:aa:a9:03:12:31:
d4:83:28:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:12:23 2025 by rpki-client