Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JneOcRzoBte62CBv401NEUKstPQ.roa
File: JneOcRzoBte62CBv401NEUKstPQ.roa (raw, json)
Hash identifier: S0PHLfjdM6E9lINCeWv3/9UaaPcVsK7+zykGlo+dj1c=
Subject key identifier: 26:77:8E:71:1C:E8:06:D7:BA:D8:20:6F:E3:4D:4D:11:42:AC:B4:F4
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019787E296D5D79BBCBEA95E0F0BE3C37B98
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JneOcRzoBte62CBv401NEUKstPQ.roa
Signing time: Thu 19 Jun 2025 11:11:03 +0000
ROA not before: Thu 19 Jun 2025 11:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 12:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:e2:96:d5:d7:9b:bc:be:a9:5e:0f:0b:e3:c3:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 11:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26778e711ce806d7bad8206fe34d4d1142acb4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:56:90:23:0e:07:ad:e5:b1:79:b2:38:2b:
54:85:e3:41:a5:70:38:5a:df:dc:7d:e5:19:aa:0e:
d9:b6:3a:0c:7b:7f:ca:4a:fd:4c:ac:94:d0:5f:fd:
e1:4a:4b:59:74:46:04:ae:8c:ac:b2:bc:bb:61:43:
cc:4f:fd:a3:c8:cd:70:58:8a:88:84:91:c0:0b:67:
be:83:b9:8e:f8:5e:76:d2:45:5d:ca:48:91:dd:22:
49:81:ef:cf:65:0e:70:5d:04:cb:dd:69:6d:83:ac:
c2:b2:92:e5:79:32:47:8f:4c:f3:92:dc:73:e8:d8:
1b:87:77:22:0b:ff:a5:63:58:fa:78:65:90:e8:a6:
d3:7c:a1:7f:fc:0d:cb:dd:69:38:f7:99:49:01:d3:
49:d9:2c:af:20:62:f7:85:c3:ae:53:8c:da:02:f0:
29:df:c2:5a:38:c6:da:79:7a:07:ec:a2:bc:b3:5f:
6c:3f:b5:2c:64:21:99:fb:42:9c:2c:90:db:41:91:
07:d4:c9:dc:85:43:16:3e:f3:0f:59:c2:b4:7d:b2:
11:c1:c4:e5:cf:dd:97:b1:71:99:15:03:91:0b:a1:
04:c6:b2:ca:d0:c0:c1:e1:0c:1b:04:ef:a0:6f:64:
83:1c:5d:0e:88:7c:75:74:35:43:eb:0d:05:dc:1f:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:8E:71:1C:E8:06:D7:BA:D8:20:6F:E3:4D:4D:11:42:AC:B4:F4
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JneOcRzoBte62CBv401NEUKstPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
21:d7:37:47:45:07:2a:a1:a8:39:9d:43:ac:4e:b9:26:90:c1:
3f:a2:54:f7:21:26:6b:31:30:d8:5b:e6:1a:fd:0e:ed:02:89:
18:0a:53:a0:79:9d:4f:8c:5c:1c:3d:86:ed:ce:ea:70:e7:cc:
53:36:01:cc:fd:d2:af:2d:27:7b:e0:ba:5d:28:09:c3:cf:65:
33:3f:e0:d9:2e:3c:58:40:0c:c6:03:36:bc:f2:1a:40:58:70:
41:d0:62:f6:9c:50:91:1e:eb:f8:e2:48:05:39:17:d9:d6:49:
8b:af:84:fa:e7:79:dc:ff:38:d7:85:f4:ee:36:09:b0:73:4c:
f2:0d:8b:6a:66:98:b3:b3:74:d4:19:aa:c8:87:ac:19:c9:6a:
c4:4f:14:77:62:8e:54:e1:79:f9:5d:79:a5:73:b4:f3:cf:8b:
07:c5:b8:d0:db:59:81:0f:5c:37:26:7a:95:db:f2:aa:14:b6:
ad:62:1f:ff:38:a7:45:4c:11:20:af:10:59:1b:3f:fe:dc:2c:
2a:df:01:f2:fa:59:c2:49:5f:b7:63:17:7a:ad:0c:4f:72:f7:
9d:42:9b:6c:e6:7a:20:be:0d:c6:a6:87:e3:e2:12:54:90:8e:
ce:a3:d1:72:b1:8c:f2:e3:57:e8:ed:fa:49:3f:fc:b9:d9:1b:
53:f4:de:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:01:05 2025 by rpki-client