Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/J85jRtcZc7hNjfSN2pxQlcPIpTM.roa
File: J85jRtcZc7hNjfSN2pxQlcPIpTM.roa (raw, json)
Hash identifier: 4Wz3RN92JC9rBxf1qK0Da2+8gzSiG6t649koXVcHvzg=
Subject key identifier: 27:CE:63:46:D7:19:73:B8:4D:8D:F4:8D:DA:9C:50:95:C3:C8:A5:33
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978A779BEEA1C328C7D85A9D6ACA952EBB
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/J85jRtcZc7hNjfSN2pxQlcPIpTM.roa
Signing time: Thu 19 Jun 2025 23:13:03 +0000
ROA not before: Thu 19 Jun 2025 23:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 20 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:77:9b:ee:a1:c3:28:c7:d8:5a:9d:6a:ca:95:2e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 23:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27ce6346d71973b84d8df48dda9c5095c3c8a533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:68:2f:73:4c:44:00:43:cb:6e:07:3b:c4:
57:e3:28:5f:29:ce:a2:de:88:7a:f3:1d:83:1f:83:
09:35:4a:c9:0b:c3:21:30:5c:cb:e0:f2:2c:4d:e3:
2a:7b:c8:67:41:2e:41:15:a5:08:2f:d4:e7:ec:bc:
2d:9a:a9:9b:0e:34:37:5a:2e:bf:15:80:17:c6:d2:
19:68:1c:33:38:d8:dc:64:f6:9b:dc:bb:a0:23:e1:
17:d5:0f:85:21:c0:38:10:b5:f2:75:7a:e2:54:45:
48:c9:c0:45:a9:6f:da:3f:08:57:51:c9:68:f7:88:
cb:7d:6f:4b:d4:41:c4:30:39:bd:08:90:e2:9d:5b:
1d:47:c4:5c:e1:2e:8e:68:23:3f:a3:2f:b5:e4:c2:
03:7b:95:5d:96:a1:33:87:96:f2:d3:2d:70:e3:93:
c8:cc:23:a9:78:d5:4a:a6:f2:71:c4:be:37:2e:1f:
c4:44:d9:be:ac:99:80:d1:b8:8d:0d:09:5d:74:5a:
09:6d:ea:01:1d:dc:09:0e:9c:74:9e:eb:66:e1:40:
20:52:9c:8b:1e:5f:68:51:2c:f1:68:1c:ae:9a:d5:
d5:98:b2:57:ee:2c:dd:aa:f2:7b:6f:80:e5:8c:32:
ca:1d:db:a0:1c:44:ea:dd:2b:5c:25:47:87:d6:cd:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CE:63:46:D7:19:73:B8:4D:8D:F4:8D:DA:9C:50:95:C3:C8:A5:33
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/J85jRtcZc7hNjfSN2pxQlcPIpTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3d:5d:60:b1:2e:58:3b:df:d1:1c:11:25:5f:6d:61:20:bc:e4:
2c:45:dd:c4:9a:e1:5c:c4:59:63:7b:08:d9:dc:57:1a:6b:3e:
f8:c5:f7:a4:0a:c7:8f:e6:03:9d:70:9e:5b:8c:33:8a:33:d1:
9b:9a:02:82:00:47:70:38:62:bb:9d:5f:d8:89:29:a5:87:19:
08:b8:f4:5b:af:14:6b:00:dc:ed:7c:d8:ff:1b:e1:13:b6:64:
d7:93:25:9f:42:ec:41:82:7d:c1:e7:31:45:33:0e:f8:07:45:
1c:ba:8f:cb:39:7a:f0:ac:79:b2:b4:d1:48:52:8a:88:b4:76:
88:08:c8:83:40:d4:dd:61:2a:0b:e0:c4:e1:78:ea:85:ac:5d:
f1:a4:6f:fb:7c:20:24:5f:f8:c9:83:da:4c:5c:6a:3a:5b:c5:
d8:e5:36:b6:88:15:2c:e3:82:6b:e3:18:aa:31:3f:89:ad:86:
94:63:38:ae:72:cb:5d:0d:da:d0:0d:49:7f:50:ff:c6:e8:12:
f1:de:e5:42:a2:a6:70:a0:ff:99:fb:76:cf:70:50:8a:82:89:
65:19:83:02:62:7f:d5:be:ba:e6:e0:30:bc:16:4c:64:20:6b:
0b:b6:08:53:17:8a:fe:62:67:42:30:e4:62:28:09:db:f0:09:
ca:de:bb:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:18:44 2025 by rpki-client