Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/J1wMoBqZSGi7BA5dAfhX0D9MdO4.roa
File: J1wMoBqZSGi7BA5dAfhX0D9MdO4.roa (raw, json)
Hash identifier: lIdiA3qF4IStSJOMmhHvjFpbVTjN2ZbcgDBtKScLMZQ=
Subject key identifier: 27:5C:0C:A0:1A:99:48:68:BB:04:0E:5D:01:F8:57:D0:3F:4C:74:EE
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B14ED328672D5CD95CB47CE232BF4360
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/J1wMoBqZSGi7BA5dAfhX0D9MdO4.roa
Signing time: Fri 27 Jun 2025 12:13:42 +0000
ROA not before: Fri 27 Jun 2025 12:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 13:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:4e:d3:28:67:2d:5c:d9:5c:b4:7c:e2:32:bf:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 12:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=275c0ca01a994868bb040e5d01f857d03f4c74ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:ab:4d:6f:0d:f3:01:56:33:ce:7a:28:38:
84:4c:ce:60:83:6f:9a:ba:cd:38:0f:d2:29:f9:12:
90:18:16:3a:15:2d:d9:84:ce:d8:40:da:42:c7:7a:
7a:e0:9e:5b:08:b6:af:23:1b:c4:64:f2:00:8f:39:
24:1a:24:02:34:16:bd:a4:e7:60:c3:6c:5d:f1:03:
07:bb:e9:50:d4:32:76:79:d4:67:bb:2c:d6:b6:d8:
de:6b:ab:44:26:30:87:90:a8:95:e5:f4:4f:b4:83:
94:5d:4f:aa:0b:f8:99:d2:6e:56:38:ea:36:80:92:
ee:62:0a:21:6c:25:59:04:3a:e9:31:eb:c2:0f:00:
6b:c4:98:1d:d3:cb:7b:e8:06:d6:9e:7b:05:95:98:
c7:8f:c4:4b:07:8a:fb:9b:22:7e:05:9b:32:42:33:
93:cf:1b:63:9f:1a:09:94:a8:47:6e:39:b2:57:88:
9e:4b:d8:ce:22:6f:91:06:4f:b3:54:2e:f8:00:51:
ca:c9:06:70:a5:9a:59:a3:fc:d3:af:1a:77:85:8f:
ae:2a:df:fe:49:98:73:16:b3:65:5d:d1:b4:bc:b2:
14:62:c6:bc:17:86:21:c5:45:33:62:ae:c5:69:ad:
57:7a:ed:ff:57:fc:ef:20:4f:5d:24:3f:bb:a0:dc:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5C:0C:A0:1A:99:48:68:BB:04:0E:5D:01:F8:57:D0:3F:4C:74:EE
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/J1wMoBqZSGi7BA5dAfhX0D9MdO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
42:2b:8d:46:f4:10:eb:1d:2d:86:48:4f:00:b6:4e:c0:6e:11:
6a:8d:14:bb:52:49:99:db:18:ab:c6:dd:b8:86:23:f9:ce:97:
43:08:73:aa:37:39:9f:d0:6a:ab:9b:0c:dd:4d:92:1f:1f:1f:
34:31:f8:ef:a9:0f:87:72:32:ca:24:81:ce:ce:73:14:50:0d:
c0:ba:ba:64:f0:8c:5b:e6:30:62:5f:cd:8c:fe:9b:eb:29:04:
27:cd:74:10:29:42:ae:53:c8:a5:1c:93:a6:df:54:13:78:59:
62:0b:74:2a:ec:d8:75:a1:9f:f4:a1:3a:6e:1e:16:8e:18:bb:
e1:38:0f:50:ec:6d:74:fd:eb:29:d7:60:13:4e:bc:ce:71:d5:
bd:04:87:4b:6e:12:a7:69:9b:eb:dd:6b:2b:9a:cf:75:30:d9:
36:92:62:12:a0:0c:21:ab:c8:40:f8:b5:0a:94:80:5d:74:87:
f9:c2:f5:e8:7d:25:55:05:fa:c8:cc:79:a9:d3:a9:ce:4c:77:
73:5c:10:7c:27:f1:02:da:51:55:c1:0e:32:03:14:7d:78:ea:
53:0c:57:d9:b8:61:b9:ec:77:d2:15:15:20:cf:46:fb:ac:dc:
43:a0:c0:c1:6b:cb:cc:19:a6:09:39:38:a2:27:e6:51:71:97:
97:4f:6e:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:20:10 2025 by rpki-client