Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GUNaOarjwHmqXFErLnPH5B3s7Ew.roa
File: GUNaOarjwHmqXFErLnPH5B3s7Ew.roa (raw, json)
Hash identifier: c5T0+r171l5WpZRCXO5OStil3dnojiItOFKfQX3Q6CA=
Subject key identifier: 19:43:5A:39:AA:E3:C0:79:AA:5C:51:2B:2E:73:C7:E4:1D:EC:EC:4C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978F31ECF466E6CFFC1C967F346E70F297
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GUNaOarjwHmqXFErLnPH5B3s7Ew.roa
Signing time: Fri 20 Jun 2025 21:15:03 +0000
ROA not before: Fri 20 Jun 2025 21:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 20 Jun 2025 22:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8f:31:ec:f4:66:e6:cf:fc:1c:96:7f:34:6e:70:f2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 20 21:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19435a39aae3c079aa5c512b2e73c7e41decec4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:e2:2e:c4:f5:1c:60:4b:3c:63:42:f9:66:
bc:67:76:97:0e:37:d7:cf:21:f4:e9:98:36:86:ad:
9c:a9:f4:0d:94:e4:eb:ec:eb:eb:34:4a:ab:47:42:
ec:84:76:4c:c8:1a:48:1e:09:1b:77:38:70:52:e9:
f9:af:04:51:ed:2d:73:36:cf:d0:07:ce:2e:2d:04:
7b:19:0e:b7:f6:d0:d3:a9:3a:b7:35:da:a1:70:fa:
10:8f:9b:fc:e5:62:c7:be:00:4a:aa:c2:36:f4:6a:
65:0e:ed:5f:23:d9:55:bb:55:32:41:e4:23:bf:87:
b0:84:0e:55:cb:3e:40:85:2b:6c:5b:71:f2:dd:1a:
5d:5f:82:00:f7:b9:b6:25:16:f6:3c:70:37:90:59:
72:cc:99:3c:60:86:89:62:ba:66:60:ae:8d:60:85:
6b:d0:39:9d:a0:7d:2a:22:3d:9a:e7:2d:af:a2:ed:
31:5a:60:55:8d:8a:59:80:f0:41:f8:33:c2:2f:d7:
50:07:11:16:44:2d:79:63:da:02:c3:6a:71:67:53:
d9:1b:15:6f:2a:01:96:42:cb:07:6e:e5:2f:18:2c:
52:65:ef:6c:24:45:3f:ed:5e:24:8c:33:62:b0:e7:
0d:11:8d:bb:1b:7a:a6:68:9d:ad:ae:e9:6f:1a:80:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:43:5A:39:AA:E3:C0:79:AA:5C:51:2B:2E:73:C7:E4:1D:EC:EC:4C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/GUNaOarjwHmqXFErLnPH5B3s7Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
27:05:a6:77:45:bc:af:a5:99:79:2d:49:e0:38:db:c4:b2:fc:
6d:af:a6:24:dd:ac:26:53:a4:e5:14:aa:d3:b7:a3:1d:45:f8:
87:ee:01:32:9b:99:91:87:f4:2c:37:87:f3:e9:5f:f9:d0:44:
9d:c4:af:d1:36:c5:bb:ee:c6:48:28:7f:dc:ab:85:4d:cd:b2:
6e:01:83:13:d7:aa:9e:82:b9:16:4c:56:e2:7e:e9:66:a0:6f:
65:bc:c5:ca:64:8c:6f:aa:33:14:20:55:4a:c2:b1:93:09:d6:
e3:e4:fd:f3:5b:6a:74:a0:e8:50:13:ec:fc:4b:ed:61:1d:96:
78:66:41:48:f6:35:0e:cb:45:c2:51:25:00:55:bd:f9:94:5c:
0e:c1:02:bf:d3:26:6d:3f:1c:f5:fa:62:e4:e2:4d:73:be:47:
3d:75:1a:3a:7f:47:77:db:d2:df:99:5c:23:fb:ad:43:4d:28:
a7:b1:7f:cd:64:fc:a5:96:bb:bb:42:40:42:84:91:34:e6:9f:
3a:ae:46:a5:57:b3:db:5e:bf:f7:75:27:a4:bb:ca:9b:d5:54:
7e:9f:27:7c:fd:2b:27:c2:b9:0c:06:b4:98:e1:45:b6:46:eb:
87:56:65:90:cf:86:41:fb:bb:b1:d5:1c:ce:65:cb:5c:f6:b1:
be:64:d6:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:11:36 2025 by rpki-client