Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IRRT_BI6XRB4lPoBcJb6ZldwxQ4.roa
File: IRRT_BI6XRB4lPoBcJb6ZldwxQ4.roa (raw, json)
Hash identifier: NBtb0N+omm5cALw1vRaJOqBmFOUh1ERfG8dOUo9QVtA=
Subject key identifier: 21:14:53:FC:12:3A:5D:10:78:94:FA:01:70:96:FA:66:57:70:C5:0E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B3AA28EF44DCF0F3712852F8F5A1C517
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IRRT_BI6XRB4lPoBcJb6ZldwxQ4.roa
Signing time: Fri 27 Jun 2025 23:12:42 +0000
ROA not before: Fri 27 Jun 2025 23:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b3:aa:28:ef:44:dc:f0:f3:71:28:52:f8:f5:a1:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 23:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=211453fc123a5d107894fa017096fa665770c50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:46:b8:5a:93:46:18:7b:8f:a6:02:e0:87:
54:40:f3:3d:76:22:a5:72:82:64:91:e5:e0:de:66:
9a:c0:42:14:f5:b7:30:a0:ec:ab:7b:b0:12:7e:e3:
c5:ec:ab:de:b4:2b:a9:c1:6a:fd:42:ac:fa:6c:a4:
39:8d:f1:f2:71:e2:e1:26:31:26:aa:53:dd:f1:ee:
15:f6:43:87:ca:27:f1:2f:16:dd:ec:df:3d:6e:e5:
f3:9e:fb:4d:c9:fb:76:1d:3d:c6:b6:7a:47:81:fa:
77:f0:d5:e0:ce:c8:7e:01:db:33:eb:cd:dd:92:70:
4a:91:72:74:5a:f2:89:ec:5d:13:e8:4d:79:1c:36:
74:ae:30:0d:ae:e8:18:0f:46:44:52:c6:7a:54:1c:
c5:63:b9:b5:01:2a:c1:a3:f8:e7:72:57:12:73:4d:
01:b3:62:e5:59:f8:e1:93:14:32:68:c9:b2:9f:8a:
1f:6b:0e:fa:0e:fd:99:f5:32:57:4b:16:a2:90:83:
d2:de:f5:34:10:f9:ed:f7:b3:0a:ec:dc:8f:4d:c8:
7f:d8:2e:05:21:ab:f2:e2:ac:52:53:79:82:b2:7e:
b8:09:ee:86:35:99:bc:fd:3b:c1:d9:06:5b:6a:6f:
40:ae:e4:20:23:b6:37:55:d8:2b:68:6b:34:98:62:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:14:53:FC:12:3A:5D:10:78:94:FA:01:70:96:FA:66:57:70:C5:0E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IRRT_BI6XRB4lPoBcJb6ZldwxQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
02:a0:b7:e4:82:65:e1:1c:b1:31:23:9d:a1:6a:9c:02:13:af:
b4:37:62:e1:e3:df:de:8b:fd:ca:7c:15:6f:93:07:75:43:1b:
4d:e7:c8:aa:89:00:70:67:cf:4a:ed:2d:b7:2e:90:1f:3f:3d:
df:c1:ca:d5:00:fd:bf:ce:d2:15:e4:ea:d4:e6:8d:e6:ad:4f:
69:6e:a9:60:a9:b7:1e:1b:b7:22:8b:26:0f:a7:86:f8:b6:54:
a1:75:79:11:19:03:ac:94:a1:52:e9:c3:3b:c2:a5:c1:69:f4:
54:a3:d8:f7:87:12:bb:09:da:cf:9e:87:4f:5f:53:16:7d:63:
00:7c:34:e6:af:14:f4:a3:39:2c:9a:be:35:08:a4:cf:e7:b7:
e6:d7:5c:0a:3b:b5:f2:ec:e9:45:b0:f4:b5:ef:97:29:86:8e:
c7:ac:fd:f6:30:2e:81:ee:d6:f4:f6:12:51:e0:b4:87:06:4d:
37:1d:ca:e8:ea:a9:81:ea:d2:9e:5d:b3:09:a1:14:20:e9:e2:
dc:64:d2:f5:37:6d:9c:e7:a7:b0:a7:6e:34:07:ae:80:ff:46:
f1:6d:d6:ce:55:ec:22:e8:88:a5:06:5f:55:86:ff:e5:2d:82:
2f:d7:bd:35:40:28:f3:73:db:09:95:a8:60:56:f5:20:7a:08:
56:c2:53:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:09:43 2025 by rpki-client