Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/KGgAJChxFE7Aikbx_mSpNr1sgMc.roa
File: KGgAJChxFE7Aikbx_mSpNr1sgMc.roa (raw, json)
Hash identifier: w0SfWTpUKy0XaBuF1w2C/ZhwjCXvxJBHJ898kJjr2Tw=
Subject key identifier: 28:68:00:24:28:71:14:4E:C0:8A:46:F1:FE:64:A9:36:BD:6C:80:C7
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197745FB10A4898EBCE8C54822911BF80B4
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/KGgAJChxFE7Aikbx_mSpNr1sgMc.roa
Signing time: Sun 15 Jun 2025 16:15:17 +0000
ROA not before: Sun 15 Jun 2025 16:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 17:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:5f:b1:0a:48:98:eb:ce:8c:54:82:29:11:bf:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 16:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=286800242871144ec08a46f1fe64a936bd6c80c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:bf:f4:8a:54:26:30:d5:c1:d4:5a:7a:e9:
26:e8:f2:a2:dd:4b:a4:54:bb:0f:d4:c6:ee:06:f0:
d5:38:f6:22:da:f5:06:a6:79:be:22:c7:0b:02:b4:
e1:b3:45:76:f0:6b:fc:48:39:35:cf:1b:cc:90:b8:
0a:5c:d4:8d:6c:e6:31:8f:6f:ed:c5:5f:e4:b7:d8:
9a:60:1d:ec:8b:8b:05:54:f6:a2:7b:34:89:6b:f8:
c5:83:80:b7:b8:b0:6e:ed:32:6a:12:ef:ef:dd:d2:
7f:7f:78:92:38:a3:eb:1e:91:a9:3d:68:a0:11:9c:
b5:34:e3:42:e0:54:24:fd:0c:a1:97:d3:0a:6a:7e:
f1:5f:5d:bb:e1:93:3f:33:ae:48:13:d8:c4:97:c0:
e6:8c:89:e4:1c:fc:9d:9f:61:f0:05:5b:2a:ed:52:
a5:19:ea:ff:01:f8:7f:01:76:c2:de:0f:61:4c:af:
56:df:c7:df:ab:42:27:be:c3:95:1f:34:29:66:9c:
4b:cc:d7:72:7e:51:01:41:42:54:74:3e:96:3c:85:
a2:6a:0c:09:e3:76:fb:ae:6d:1d:94:5f:82:a4:6e:
95:3a:7c:27:73:e6:94:c8:bb:dc:57:e5:96:8e:1e:
6a:fd:4c:b3:5e:84:d0:57:16:38:8c:db:63:78:00:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:68:00:24:28:71:14:4E:C0:8A:46:F1:FE:64:A9:36:BD:6C:80:C7
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/KGgAJChxFE7Aikbx_mSpNr1sgMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4b:a3:e6:6b:18:35:a0:9d:27:db:93:1d:55:fd:07:32:92:c8:
ce:47:1a:df:76:55:cb:d1:ff:6b:cf:61:5b:ac:e3:5d:ac:bb:
1e:f7:4e:5a:a6:3a:e0:41:e7:aa:a9:ac:b2:89:2b:ec:81:7a:
c5:b4:a9:2c:36:c6:46:eb:32:ff:19:9c:9c:39:e5:db:f6:b6:
b8:bc:d1:bd:f4:c8:ff:89:35:8f:c6:a2:ee:5d:21:b0:9c:e9:
83:5d:d1:57:ad:21:92:05:26:54:85:de:6e:5a:83:c4:bb:e3:
1d:a8:de:45:cd:13:84:ec:48:ac:79:89:64:4c:21:ea:9b:cb:
2e:88:53:ca:2e:96:2b:9d:21:c2:bd:94:bc:73:79:e7:a4:9b:
e8:57:8f:a2:8a:f1:15:62:e1:7d:46:19:c1:f9:9a:b8:1e:47:
f5:d9:44:d0:be:a0:6d:b5:ae:78:c4:73:0b:74:04:f3:b7:38:
6b:e1:91:24:39:50:c4:13:70:a4:e7:87:76:52:db:65:22:68:
16:e5:ac:23:26:b3:88:4d:bf:87:10:27:8d:42:52:ba:a9:c8:
2b:0b:b3:ea:c5:f0:df:25:e7:4b:0c:cc:9b:d1:32:7d:8e:18:
29:5d:36:ae:6d:af:c2:4c:bb:5a:e3:dd:dd:86:fb:f0:e8:70:
ac:1f:0c:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:05:32 2025 by rpki-client