Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/I68KUUEtNfM32b3xJXeOERV5PbM.roa
File: I68KUUEtNfM32b3xJXeOERV5PbM.roa (raw, json)
Hash identifier: Wv2HicRYQVbwGDC6j4+gv0Jx5JxUGOZeA/W3KYYA/ko=
Subject key identifier: 23:AF:0A:51:41:2D:35:F3:37:D9:BD:F1:25:77:8E:11:15:79:3D:B3
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019780CFE5C58B7B3CFF3C6C04DC9D6DB3E7
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/I68KUUEtNfM32b3xJXeOERV5PbM.roa
Signing time: Wed 18 Jun 2025 02:13:17 +0000
ROA not before: Wed 18 Jun 2025 02:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Jun 2025 03:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:cf:e5:c5:8b:7b:3c:ff:3c:6c:04:dc:9d:6d:b3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 18 02:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23af0a51412d35f337d9bdf125778e1115793db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:a5:31:d3:10:29:dd:9e:46:6b:5d:1d:24:
57:9b:de:31:f9:86:c3:8d:c2:1f:b6:56:d8:12:0c:
6f:bf:50:0f:d2:d9:8f:a9:62:8e:40:18:97:9b:9d:
dc:32:28:db:7f:14:0c:e2:ea:05:ad:9c:ee:5c:7a:
d4:a7:06:7c:91:8c:c5:5d:bd:78:8c:a1:d7:68:b0:
f7:25:d7:0b:9a:00:c4:fa:34:b6:c1:63:0d:fc:51:
57:4d:e1:03:6f:10:ed:53:5a:02:cb:54:ad:d2:d3:
80:df:3f:18:ed:dc:12:e7:e3:10:8d:f0:34:77:33:
f2:c4:43:52:10:6d:ef:3c:02:b8:6b:f4:09:17:33:
8a:99:c0:e5:6b:bb:33:e2:14:56:57:4e:a5:25:98:
fc:cd:8e:a2:0f:57:04:04:35:35:43:e1:40:98:8a:
bf:b5:fd:14:46:d7:45:6b:24:c1:7a:5a:84:a6:02:
a0:4d:bf:14:07:5f:47:ff:e1:27:80:e3:61:6d:1f:
08:63:ee:b5:02:b6:a7:14:25:d9:db:ea:e7:6b:3f:
10:fa:f1:5e:07:e0:50:da:35:fb:a9:64:cc:b9:09:
02:99:a0:2b:d7:67:e5:0d:3f:91:04:ec:25:33:0c:
38:97:a5:bc:37:ec:b1:a8:cb:b0:74:62:93:67:6a:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:0A:51:41:2D:35:F3:37:D9:BD:F1:25:77:8E:11:15:79:3D:B3
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/I68KUUEtNfM32b3xJXeOERV5PbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
79:10:91:3f:0f:7b:9a:4a:97:ad:ae:77:2e:3e:5f:a3:ac:2c:
9c:d6:0f:5f:2d:88:b2:ab:17:fc:73:0c:d9:48:50:5d:61:2d:
15:a6:c7:9e:88:6f:b0:71:d0:85:7b:4e:13:f8:44:ca:f4:b9:
7c:8f:0a:68:32:04:05:49:df:2f:b2:25:d5:b6:40:89:5a:64:
c0:82:27:94:1f:04:7e:38:f3:4c:ef:ba:69:da:4b:53:95:15:
58:dc:f0:b2:cb:67:ef:b6:59:be:99:20:b6:76:d0:fa:25:92:
75:1d:2d:c8:20:3f:35:0b:86:dc:fc:d8:d5:02:dd:a6:15:36:
c5:6f:0f:d5:d8:c8:4f:cd:b3:65:93:94:72:eb:18:d8:0e:02:
cf:91:73:80:41:7b:b8:80:cb:56:65:ce:c0:de:51:d8:59:83:
8d:ac:6c:5c:9d:b5:28:3d:fc:41:cd:7c:d3:0d:64:46:62:7d:
5b:43:1b:e2:a6:de:bd:28:5f:eb:eb:e8:e9:ab:5a:82:4f:d9:
78:50:bc:dc:a9:03:bb:60:53:7e:f1:4b:ce:d6:ab:4f:92:09:
a6:b0:eb:cc:92:70:2f:ef:d4:ce:cb:13:7b:02:08:98:1e:b9:
fb:dc:12:35:55:9f:ae:64:f5:9d:06:3b:4a:86:2b:f1:e6:c9:
19:62:1c:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:39:33 2025 by rpki-client