Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/HQe8lKbg1vHWt1rH_cFw1wwwtuo.roa
File: HQe8lKbg1vHWt1rH_cFw1wwwtuo.roa (raw, json)
Hash identifier: fp1azq+lT6ynNsHRkawg87PBZbcJdrNWZX/x4Cmo3JI=
Subject key identifier: 1D:07:BC:94:A6:E0:D6:F1:D6:B7:5A:C7:FD:C1:70:D7:0C:30:B6:EA
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B26265C72587263E8DB86EAB4A4B0D2D
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/HQe8lKbg1vHWt1rH_cFw1wwwtuo.roa
Signing time: Fri 27 Jun 2025 17:14:42 +0000
ROA not before: Fri 27 Jun 2025 17:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 18:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:62:65:c7:25:87:26:3e:8d:b8:6e:ab:4a:4b:0d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 17:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d07bc94a6e0d6f1d6b75ac7fdc170d70c30b6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:77:25:d5:a4:1f:3f:73:38:fb:cb:fa:ee:
60:e0:96:21:d3:7b:05:99:af:c6:4f:c0:ed:6d:df:
f2:67:1d:cc:aa:a4:a8:c4:62:00:d5:72:f3:32:11:
26:2e:cb:70:80:a0:0e:e6:68:34:8b:55:1e:69:fd:
a3:fc:0e:60:70:a9:0e:58:8f:db:b9:80:1a:b2:85:
52:b8:21:cc:a5:28:67:ca:23:af:14:17:64:72:d0:
27:65:be:30:ad:57:18:63:27:b7:47:ec:24:3c:c6:
9a:49:86:b8:70:a3:f0:af:37:a6:6e:7a:6a:02:fd:
27:31:6f:73:8d:17:a2:0c:30:bb:81:5f:d4:e0:a3:
74:63:68:e5:41:49:20:ee:08:ef:15:f3:21:52:62:
65:d5:ad:dd:b3:e9:12:c9:94:7c:82:d8:d3:54:3b:
75:6e:40:10:fb:a5:35:95:30:4c:f3:d8:77:49:77:
5e:92:ec:8b:f6:16:6a:d9:51:0b:d0:b3:c1:b7:9c:
63:d7:21:5e:1b:b9:f1:b0:9f:77:e0:b4:b5:a4:f6:
4f:aa:cc:97:75:bd:1e:3a:d8:bd:d9:eb:c6:20:48:
14:f8:04:58:48:98:bd:b4:22:cb:38:a2:4f:50:3b:
e6:47:c8:ca:e4:04:c0:1e:85:8d:bd:00:be:d7:9b:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:BC:94:A6:E0:D6:F1:D6:B7:5A:C7:FD:C1:70:D7:0C:30:B6:EA
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/HQe8lKbg1vHWt1rH_cFw1wwwtuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
14:c1:9a:3c:eb:ca:2f:72:9b:8d:af:83:66:a2:e0:05:5e:dc:
74:58:9c:3f:3f:14:7a:c5:81:4b:52:67:ee:b7:e9:1d:d0:af:
18:d3:85:37:e5:70:ba:55:b2:dc:16:8c:47:64:0d:d2:ed:2c:
fd:ba:3a:41:a3:ab:38:90:f1:81:ca:5b:86:2e:d8:54:35:c0:
ca:46:9a:5a:a8:4b:b2:64:ab:b5:50:51:1a:95:69:b0:af:25:
cd:49:ba:22:2e:d4:0d:1d:ea:41:d4:77:08:b7:69:b3:bc:81:
a4:18:1d:5d:11:a9:7b:b9:a0:1b:b4:1f:8b:8b:a8:98:fe:8b:
94:e3:a5:7c:60:d8:cd:de:14:3e:26:39:c9:0c:ce:71:96:d1:
71:35:a1:8d:6f:21:bc:01:55:37:04:7b:24:3c:7a:9c:18:b3:
8f:23:19:e5:2a:6e:60:90:6f:94:48:17:28:1c:c9:e9:52:48:
5a:50:d4:c1:c7:44:7a:13:80:80:3e:3a:d6:d4:d8:b8:62:db:
1e:05:15:d6:b7:e8:6f:3d:9a:4c:39:5c:63:7b:4b:8d:b1:7e:
a7:e7:70:12:7e:3b:3b:9f:b9:6c:63:e4:1f:42:57:ba:5c:b2:
c5:6c:6e:a5:40:06:61:5f:ff:26:df:25:02:1a:77:30:fc:ad:
8b:f0:eb:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:16:23 2025 by rpki-client