Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/H7pffMLK2Za2wMI1jH-5FXAN4mk.roa
File: H7pffMLK2Za2wMI1jH-5FXAN4mk.roa (raw, json)
Hash identifier: Cc7xomYtv2+DE/sjDUm4m8eQilzvQ7wnptxsL7Ibakw=
Subject key identifier: 1F:BA:5F:7C:C2:CA:D9:96:B6:C0:C2:35:8C:7F:B9:15:70:0D:E2:69
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AC5728AC6787D7C9DD6E7B9041AA3502
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/H7pffMLK2Za2wMI1jH-5FXAN4mk.roa
Signing time: Thu 26 Jun 2025 13:04:42 +0000
ROA not before: Thu 26 Jun 2025 13:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:ac57:9/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 13:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:57:28:ac:67:87:d7:c9:dd:6e:7b:90:41:aa:35:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 13:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fba5f7cc2cad996b6c0c2358c7fb915700de269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1d:92:46:63:83:23:e6:4e:94:e1:e7:8c:1d:
f2:34:c0:7d:6c:15:54:93:a2:f2:5d:ae:b0:2a:a2:
cd:ec:a6:3a:67:d9:10:82:a5:63:88:96:21:39:12:
60:4a:a5:44:5f:4d:ae:47:54:88:25:3d:54:fd:34:
6f:27:09:28:4b:6b:6b:22:22:96:a2:17:c8:e2:bf:
08:de:c0:3f:3e:77:17:08:1f:3b:1b:92:94:70:39:
68:7d:b3:6c:99:89:45:57:90:5f:42:b2:45:eb:66:
5a:9d:0a:f7:c2:2f:08:b3:88:43:d3:73:ca:74:5f:
8c:ed:3f:6b:49:2c:b6:9e:75:94:ca:22:a2:91:c4:
94:09:24:5c:c3:4f:9a:22:d1:05:94:dc:37:10:47:
c6:46:b3:cb:57:c3:79:52:c3:77:0e:a2:d5:4f:d2:
6f:64:e5:bd:f1:79:de:ba:f9:1b:ec:47:aa:c8:e7:
91:e3:80:e7:f6:75:db:44:be:0c:75:c5:87:d0:94:
8a:b8:13:93:d0:9d:b4:7c:37:dc:5a:5c:69:e6:1d:
9b:cd:e9:8d:bb:af:db:bf:44:b3:c7:22:ff:a5:a5:
b0:ce:17:bc:99:8d:dc:45:b2:6d:62:c4:3b:57:0e:
09:ba:4d:70:3d:83:b5:14:34:f0:55:32:e2:d0:5c:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:5F:7C:C2:CA:D9:96:B6:C0:C2:35:8C:7F:B9:15:70:0D:E2:69
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/H7pffMLK2Za2wMI1jH-5FXAN4mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:ac57:9/128
Signature Algorithm: sha256WithRSAEncryption
55:57:39:82:03:54:f6:bd:85:7d:37:84:c8:8a:b5:67:d1:cb:
81:e9:88:ab:a6:51:95:d1:02:5d:79:28:c8:97:02:6d:7c:0d:
56:2d:42:f7:af:51:42:5c:86:45:b8:c6:26:e2:e5:4e:13:51:
dc:7f:8e:f6:8a:47:5e:31:89:e1:5d:32:b3:6f:81:06:b8:b0:
cf:65:9e:f8:eb:f5:42:fa:73:9e:f0:7c:d8:47:47:ec:25:3e:
ae:a7:30:85:29:96:32:95:e4:7d:b7:c9:80:e7:72:6b:e1:06:
96:9d:3b:47:16:82:dc:86:16:44:97:8c:5d:66:8a:ca:e4:1c:
06:8b:09:ed:53:b5:99:5f:60:81:84:fc:1d:80:a0:bb:7e:60:
a6:12:4d:b3:73:6e:1c:ab:44:5c:f4:8d:dd:a7:ea:5f:fc:1e:
b4:0c:50:95:3c:d2:bd:b4:2d:40:a5:93:e9:8e:f7:bc:10:e0:
42:7e:e9:79:d9:3a:8d:c1:ce:86:17:ea:1b:89:c6:e0:4b:65:
cc:e5:73:54:31:8a:67:dc:d5:0d:7d:27:45:22:f2:a0:f5:ff:
08:1c:7e:00:c2:fb:c6:e5:c5:c2:6d:59:f6:10:98:8e:f6:78:
57:ab:da:61:b9:b7:f5:ac:c2:a1:c6:96:2a:c5:50:64:40:41:
dd:08:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:35:51 2025 by rpki-client