Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/KAg-5OZM9fwdxfugGrQynHG5ZQA.roa
File: KAg-5OZM9fwdxfugGrQynHG5ZQA.roa (raw, json)
Hash identifier: B4w9zMsmhBdV3mt1bk0KnWY1+ey3+Zyh4YFo2Ui0ehM=
Subject key identifier: 28:08:3E:E4:E6:4C:F5:FC:1D:C5:FB:A0:1A:B4:32:9C:71:B9:65:00
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A324631ABA2BE08EA3A78B9FC9DC92BD
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/KAg-5OZM9fwdxfugGrQynHG5ZQA.roa
Signing time: Tue 24 Jun 2025 18:12:40 +0000
ROA not before: Tue 24 Jun 2025 18:12:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 19:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a3:24:63:1a:ba:2b:e0:8e:a3:a7:8b:9f:c9:dc:92:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 24 18:12:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28083ee4e64cf5fc1dc5fba01ab4329c71b96500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:65:26:2f:c0:58:bc:b9:ab:99:5e:03:f7:
19:42:10:9c:52:cd:7c:55:70:95:29:af:3f:d7:5f:
10:bb:e6:ee:74:99:e9:b4:9a:71:f1:3d:70:af:fa:
9f:40:66:88:32:4a:9d:58:f8:16:b2:ef:23:2d:5d:
a2:a5:41:9b:a6:45:75:8c:a3:a7:fa:26:df:9d:05:
9c:10:31:eb:be:42:ef:c4:87:18:bb:57:ae:c6:57:
29:81:80:10:5c:f1:39:09:64:c9:6d:c1:30:d7:3c:
9b:97:df:59:65:5b:02:5a:d5:5a:84:ee:c0:ac:b9:
44:46:55:d9:8a:81:6e:4d:91:dd:71:db:f9:b7:1f:
ee:64:8c:58:72:4d:5f:46:bc:59:67:47:d0:6b:ba:
9b:94:e8:42:fa:57:e6:ac:69:36:86:94:01:27:bb:
b5:05:dc:da:3b:21:20:a7:89:24:c6:36:76:99:73:
5e:31:ed:40:2b:0e:3c:5e:56:2e:39:0b:ad:d3:4e:
fd:23:65:c1:2e:20:df:75:ce:7d:92:f0:54:70:46:
59:cc:f1:38:df:a9:a9:45:2c:18:c2:ee:e3:f1:ba:
e0:bc:fc:64:1d:a6:32:fd:4e:d3:00:7e:17:b8:86:
ae:5b:b7:24:60:6c:61:71:41:43:c6:fd:cc:eb:54:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:3E:E4:E6:4C:F5:FC:1D:C5:FB:A0:1A:B4:32:9C:71:B9:65:00
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/KAg-5OZM9fwdxfugGrQynHG5ZQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
40:66:ed:83:fe:35:d3:cf:a5:89:42:d7:65:d8:74:3f:9f:bd:
49:ff:15:f8:94:a9:43:c0:03:17:c8:69:e6:ea:39:84:48:7b:
2a:34:29:8c:4b:58:b7:f8:90:8b:a2:5d:be:eb:04:6b:36:2d:
b3:58:96:e0:25:07:74:01:45:33:29:58:23:b1:8c:ec:86:dc:
26:38:b0:8b:e4:fb:67:20:ba:4e:c5:85:fa:24:85:90:42:e9:
f8:eb:ed:f0:5d:b5:77:52:12:ca:4b:40:81:1f:5e:7a:a1:7b:
8b:6c:8f:60:51:6f:5a:79:b5:5a:25:43:2a:6d:50:a8:44:e4:
f1:da:21:97:1f:73:1c:9e:c0:fa:15:4d:36:6a:0b:1f:ab:a5:
5d:3b:fa:32:dc:89:ee:5e:23:fe:dd:07:5e:27:71:bf:a8:f7:
1c:56:d8:03:e3:b4:ec:88:82:c6:25:b6:2c:01:a7:8c:7c:3b:
1f:0e:85:b7:b3:bc:b5:f3:54:df:30:82:13:b9:54:21:16:d9:
84:37:2a:02:6a:de:74:d4:a3:92:e5:2f:01:de:e9:77:50:67:
20:13:02:d9:e4:27:40:30:fc:2b:92:04:d7:0e:9c:69:ab:9f:
6d:ce:db:0a:a4:1f:62:e4:b4:fe:64:99:61:ef:3b:86:35:fa:
d5:e2:c6:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:23:29 2025 by rpki-client