Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GCgxK6pUR7WUQI16qyzEhXMBcnI.roa
File: GCgxK6pUR7WUQI16qyzEhXMBcnI.roa (raw, json)
Hash identifier: 4rrr6kF7CWlnusTpQsg8op1ezagJ93w2JBOvtIUKAIg=
Subject key identifier: 18:28:31:2B:AA:54:47:B5:94:40:8D:7A:AB:2C:C4:85:73:01:72:72
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A7A5095D6E024FB7AE44657176CFDD88
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GCgxK6pUR7WUQI16qyzEhXMBcnI.roa
Signing time: Wed 25 Jun 2025 15:11:40 +0000
ROA not before: Wed 25 Jun 2025 15:11:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 16:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:a5:09:5d:6e:02:4f:b7:ae:44:65:71:76:cf:dd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 15:11:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1828312baa5447b594408d7aab2cc48573017272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:95:30:ae:86:ab:58:4d:b9:d1:eb:ef:61:
84:6c:78:46:5b:33:be:5c:7e:47:60:e4:70:14:2d:
ba:9d:4b:9e:12:5e:6f:64:ed:c1:99:bb:12:fd:30:
67:7d:3f:0c:46:da:6d:b7:0c:06:78:dd:a1:33:51:
8d:37:56:fc:d4:a1:02:20:3d:f6:62:5d:19:8a:52:
29:f1:f6:2d:7a:b6:d6:e5:1b:4a:56:67:54:75:97:
88:25:6a:c5:f2:c1:bb:14:ec:e4:ed:83:45:04:57:
2f:5b:b7:a2:76:29:30:8d:1b:84:d4:c3:2f:28:10:
2c:46:6d:f6:9f:f4:0f:71:d7:21:72:3e:53:fb:07:
c3:5b:4d:50:9d:ef:5e:f8:90:79:7c:f7:17:fb:a8:
dd:6f:56:7d:e6:40:4e:a9:a0:52:e0:ce:69:de:aa:
80:94:5e:56:eb:75:e2:ad:92:27:d5:8b:c5:41:b5:
91:4e:97:a7:cd:c2:4c:d8:41:ac:e6:8f:a7:04:bc:
dd:1a:3e:d8:3f:88:0b:73:52:e0:ff:30:ce:cc:55:
3b:cb:6d:72:bd:08:ad:4a:57:df:85:0e:2f:23:30:
79:19:1d:42:eb:13:db:cd:92:2c:85:4e:b1:0a:40:
9c:63:04:22:ba:07:d8:ae:7e:d9:5b:94:e7:b4:03:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:31:2B:AA:54:47:B5:94:40:8D:7A:AB:2C:C4:85:73:01:72:72
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GCgxK6pUR7WUQI16qyzEhXMBcnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
26:6b:a3:58:1a:b6:c8:ce:24:70:73:14:ae:c5:e0:c5:95:95:
79:bb:16:25:8d:9d:b0:9a:3f:00:d5:ea:5c:79:7c:c0:1c:43:
8b:2d:dc:c6:17:46:50:1a:36:f3:68:08:f7:8c:86:2c:58:33:
ab:f9:77:67:51:d4:54:8f:57:97:5b:76:a6:55:68:c0:d1:1a:
2c:71:ba:62:f5:7f:d1:f2:26:30:75:54:04:a7:fa:82:35:fd:
bf:9c:59:41:a4:83:ab:cc:7b:ee:ed:83:e3:0d:96:bd:96:ed:
55:2b:1d:4e:ab:66:f0:09:1d:40:3d:04:48:2d:e9:b9:02:1f:
e0:31:03:7b:be:f2:13:39:f9:91:ad:1a:0e:58:36:49:98:a6:
c2:5d:cc:8c:cf:89:30:44:05:d7:6b:cf:d2:8d:61:7b:fa:6a:
60:46:75:58:ac:fd:89:10:a1:c2:0e:38:f9:2b:5f:6a:f3:01:
b9:ad:da:bd:65:2a:72:19:5b:62:95:6c:7a:52:a0:7b:22:f8:
13:96:8f:ee:07:c2:6f:4e:54:c0:6b:7d:c5:e8:6a:6b:c7:b9:
73:ee:a5:9d:85:a2:21:79:42:f5:92:b2:75:e8:e2:09:1c:dd:
7c:0c:e9:47:14:d7:d6:84:1b:04:38:f5:e2:c3:85:1d:e0:11:
f6:bb:4e:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:16:22 2025 by rpki-client