Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Kcsu0GlOcYV4712PA6S0cS9F5Ac.roa
File: Kcsu0GlOcYV4712PA6S0cS9F5Ac.roa (raw, json)
Hash identifier: hHu18eOF6RM/ThsgOedZnGZP9YOAWUBHCLA7+M0xv7o=
Subject key identifier: 29:CB:2E:D0:69:4E:71:85:78:EF:5D:8F:03:A4:B4:71:2F:45:E4:07
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019791FC09E2A89C4F43D8BD642F351B5325
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Kcsu0GlOcYV4712PA6S0cS9F5Ac.roa
Signing time: Sat 21 Jun 2025 10:15:03 +0000
ROA not before: Sat 21 Jun 2025 10:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Jun 2025 11:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:fc:09:e2:a8:9c:4f:43:d8:bd:64:2f:35:1b:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 21 10:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29cb2ed0694e718578ef5d8f03a4b4712f45e407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:45:0c:7c:07:10:39:2c:39:e2:81:12:30:
87:ed:79:40:9c:74:d6:17:da:71:49:2a:63:67:c0:
d0:10:44:73:75:ff:fa:27:1b:cd:81:34:79:24:e9:
7b:89:69:f5:34:0e:73:c9:6f:d9:7c:8f:6b:82:89:
ef:62:51:c0:9c:11:36:e9:10:71:10:ee:40:d6:fb:
d6:d3:98:d8:20:15:2f:fa:7d:80:37:f4:e6:99:1b:
c5:8b:8c:da:2d:68:5f:46:05:9c:cb:c6:f2:ae:e7:
63:04:a3:98:da:19:e6:46:32:2e:19:e1:a1:3b:01:
50:44:cf:0a:e8:dd:a4:bc:8d:89:ed:84:dd:a3:88:
66:6a:d6:ed:00:c6:31:78:14:50:b7:af:aa:6d:3d:
66:6f:b7:8e:49:82:7d:8a:1a:d8:6e:94:12:03:37:
36:29:a7:dc:9a:ae:97:fc:f1:00:08:3b:7d:fb:90:
37:b5:0a:30:99:3b:fc:53:c0:c2:78:0e:0b:c0:94:
55:70:e5:db:ca:92:ad:8f:af:c3:c3:e7:3c:1b:8a:
ae:16:7a:88:0b:fc:81:58:38:ec:41:61:0f:15:5c:
57:16:33:64:83:c6:3c:b6:d6:c6:03:83:0d:76:66:
1b:d1:35:7a:97:34:0b:d9:39:e2:34:65:bd:c1:77:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CB:2E:D0:69:4E:71:85:78:EF:5D:8F:03:A4:B4:71:2F:45:E4:07
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Kcsu0GlOcYV4712PA6S0cS9F5Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3e:32:99:8c:7b:84:d3:88:47:3f:d1:2d:ce:4f:d2:53:2c:f0:
bc:cb:02:b9:e0:55:0c:03:f0:a7:7d:f6:2d:fa:d7:1e:77:fe:
25:73:e7:32:10:45:94:be:79:4c:c7:91:e3:ed:17:50:41:ef:
24:0f:a1:f4:f7:ce:4a:6c:b6:77:29:44:f1:89:89:71:71:63:
53:dc:f1:2e:9e:82:ba:34:98:6f:99:11:f7:c5:e1:28:27:8b:
19:21:bc:07:58:8a:c6:85:f7:67:07:e2:2b:5e:4a:a6:7d:79:
34:73:81:80:ee:1f:3f:ea:62:2c:8e:3b:05:a6:21:fb:91:04:
f8:7d:fe:71:4f:7d:70:09:45:bc:c8:a9:22:8f:b2:5e:cc:c6:
cb:5c:19:aa:fc:d2:97:c8:6d:01:43:e8:ca:04:71:43:a9:c8:
0b:fe:c7:0c:12:1f:3f:b5:cb:27:5a:82:af:03:30:6a:45:7b:
0a:a4:69:56:94:d1:a2:bf:af:2a:f2:7e:35:5a:e3:44:a6:ba:
26:a7:9f:d3:96:f1:b8:11:a7:64:37:d5:74:b0:c3:24:0a:35:
a3:97:62:14:49:68:ce:23:26:1f:0c:be:b8:ed:dc:53:eb:1d:
af:d3:ae:39:26:c0:7e:c7:0b:c8:c8:6b:32:3a:0b:90:3e:a4:
c5:eb:56:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:28:34 2025 by rpki-client