Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/M4ZbN2bMF_nQ5oakejv3TcErFfk.roa
File: M4ZbN2bMF_nQ5oakejv3TcErFfk.roa (raw, json)
Hash identifier: 5OGGV9uOxq73Gc2PbOdBdRXd7t7S0sTWFByaW6QIWlY=
Subject key identifier: 33:86:5B:37:66:CC:17:F9:D0:E6:86:A4:7A:3B:F7:4D:C1:2B:15:F9
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A5EE814D14B8820D984DA82ED74D8EEA
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/M4ZbN2bMF_nQ5oakejv3TcErFfk.roa
Signing time: Wed 25 Jun 2025 07:12:40 +0000
ROA not before: Wed 25 Jun 2025 07:12:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 08:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:ee:81:4d:14:b8:82:0d:98:4d:a8:2e:d7:4d:8e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 07:12:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33865b3766cc17f9d0e686a47a3bf74dc12b15f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:ef:bc:af:76:e5:86:42:3e:8d:1b:23:06:
bc:22:45:fa:c7:f4:64:e2:9e:1c:3c:b1:e6:d6:61:
02:25:03:bd:99:fa:00:98:05:01:d2:e7:5e:36:8d:
c6:44:90:18:c1:4a:93:88:02:af:35:a3:2c:c5:07:
91:32:d2:fa:44:82:aa:3e:f9:5c:8f:88:c9:37:9f:
4e:af:37:1a:52:26:4c:50:48:62:ed:b1:c4:ba:2f:
f9:94:b5:f4:6e:4d:f9:93:38:1e:3e:08:5b:db:b0:
05:34:31:3c:d4:3b:bb:5b:4b:05:54:e0:22:31:d0:
8b:fe:f0:15:76:36:1c:6e:0a:68:0d:65:da:a6:e6:
21:c3:70:fc:fe:cf:6d:8a:51:f3:ce:05:0f:9f:17:
32:bf:a4:85:a5:b1:ec:61:d5:b6:c4:6e:19:65:d3:
c1:cc:82:79:57:08:b3:f1:92:29:54:25:fc:8c:56:
47:56:85:f1:c7:1d:ac:8f:5a:1b:7a:68:cb:d5:ba:
0a:62:d1:6f:62:b2:de:db:38:f3:55:25:19:d1:60:
ea:7e:7f:89:f9:83:b6:e6:9b:34:f3:4d:9a:82:78:
19:cc:d1:9e:c2:ab:61:91:59:01:9d:34:0e:0d:1f:
4a:d5:f8:02:06:89:0d:ab:f2:f2:1d:b9:9f:8e:85:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:86:5B:37:66:CC:17:F9:D0:E6:86:A4:7A:3B:F7:4D:C1:2B:15:F9
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/M4ZbN2bMF_nQ5oakejv3TcErFfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
14:1d:08:d4:ee:6e:86:78:fd:1b:53:1b:3c:f4:77:ba:d9:93:
98:d9:fa:35:df:53:69:51:87:44:7c:76:a8:c4:c2:97:b5:62:
71:a6:fe:9b:cf:60:82:50:73:65:ee:6e:8b:32:33:37:8e:da:
2d:52:a6:44:77:b2:a9:9e:ed:16:34:71:78:99:22:cf:c9:46:
d5:f9:0a:41:2c:52:41:ea:d0:7c:07:9b:70:6c:8f:1e:e7:b0:
f7:97:76:97:cb:bd:1a:03:7d:ba:51:82:1e:47:71:1c:a7:e6:
03:41:d4:22:ff:ed:99:25:b7:16:07:bc:5c:cd:68:af:83:53:
12:67:81:cc:30:f0:e7:41:0a:49:4a:10:4d:92:1c:c1:cf:1d:
77:df:b4:e2:53:da:98:3b:f1:33:54:5d:5d:cc:14:76:4e:6a:
3a:b0:65:c5:f3:c7:07:f2:4a:82:72:40:13:c2:b3:a0:02:58:
36:06:be:11:25:c8:4d:ea:e8:4e:67:54:f3:d4:da:55:24:bd:
93:1e:c9:cd:53:36:e1:29:35:4c:c8:d3:4e:2a:70:c7:41:b0:
cc:c9:c1:85:5b:dc:f7:eb:f4:f8:76:32:6a:9d:9a:35:98:70:
10:81:79:f9:7a:21:18:81:68:6d:3e:fd:6d:15:2f:97:0c:47:
26:e3:83:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:11:35 2025 by rpki-client