Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MJG_SekKBy6_tt6-aWWRn5RSo-A.roa
File: MJG_SekKBy6_tt6-aWWRn5RSo-A.roa (raw, json)
Hash identifier: l2XlC2CaOWf1LUGWuzr0bqUZhQEUCluTqkrX8QBy6lM=
Subject key identifier: 30:91:BF:49:E9:0A:07:2E:BF:B6:DE:BE:69:65:91:9F:94:52:A3:E0
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019795314434F4527211844721AE6DDECC41
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MJG_SekKBy6_tt6-aWWRn5RSo-A.roa
Signing time: Sun 22 Jun 2025 01:12:03 +0000
ROA not before: Sun 22 Jun 2025 01:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 22 Jun 2025 02:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:95:31:44:34:f4:52:72:11:84:47:21:ae:6d:de:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 22 01:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3091bf49e90a072ebfb6debe6965919f9452a3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:27:10:06:61:bf:64:47:8a:56:73:05:3a:
cf:84:73:a7:58:62:b6:09:a7:0e:e6:91:a9:db:bf:
ce:4a:f7:1f:a3:dd:ac:a1:26:35:c2:eb:6f:9d:ff:
48:23:fc:65:3e:93:9e:96:bf:1e:6e:c2:f1:97:1e:
c8:e9:64:89:73:32:f9:04:24:a0:a2:f2:bb:2d:6a:
73:50:06:f8:5e:04:fb:26:30:45:39:11:a7:e6:13:
4e:d7:9b:f7:ed:42:3f:22:80:ac:25:ca:a9:2d:38:
de:5f:a2:ef:68:5c:6e:d8:71:8f:e5:56:77:74:4f:
b2:89:7f:b3:ae:16:5b:9f:ef:76:ee:35:5d:ef:e6:
4e:f0:84:6a:f8:2d:78:1d:f6:70:33:5d:ba:83:7a:
bb:b1:8f:7a:93:fe:ed:1c:8f:3c:49:c8:7b:76:6f:
6f:af:04:d8:50:52:f5:e7:9d:6b:d8:80:0a:3e:02:
74:bb:32:c5:7b:cd:ad:a5:6d:ee:5d:f6:d3:91:03:
46:0d:b7:e9:9b:10:a9:c9:5c:29:97:05:0b:97:81:
56:99:1f:cf:d0:ba:32:8c:10:de:81:7c:7c:b8:48:
cb:29:6d:27:64:14:4b:9f:35:d1:3f:52:96:82:d6:
8e:a8:5d:2c:3b:2e:4d:e4:f0:59:cc:f0:09:72:c8:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:BF:49:E9:0A:07:2E:BF:B6:DE:BE:69:65:91:9F:94:52:A3:E0
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MJG_SekKBy6_tt6-aWWRn5RSo-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
18:29:98:af:94:e4:88:e8:3a:6f:f5:aa:12:01:2a:ac:a3:2c:
dd:7d:5c:02:9e:e9:cb:00:c1:42:22:31:65:49:2f:5a:0a:1b:
c4:1e:a1:9d:b2:6f:d5:39:a8:ad:75:10:ce:51:93:08:c9:c4:
a3:75:39:40:c9:86:7e:28:8d:6c:6f:d6:c3:13:aa:bb:2c:01:
6e:1f:36:43:a5:af:14:94:e0:9b:41:0d:07:5a:02:6c:75:cc:
c8:ea:da:83:8b:fd:4c:2d:c3:f0:80:31:cf:48:ed:cc:ef:97:
81:fd:9b:a9:1a:6e:54:b6:a7:80:2c:6d:be:4b:8c:ab:c3:76:
17:78:84:50:cd:29:78:f5:7c:95:b8:7c:e7:f7:cb:27:ee:c5:
43:a1:37:d8:ce:15:b8:be:2e:7c:2f:ea:19:d3:33:71:a0:6e:
b9:f9:fe:52:00:90:19:8a:69:65:15:de:a1:dc:50:ae:bd:d4:
43:08:d4:3e:44:7c:aa:f0:cf:40:1d:79:cd:8f:21:77:45:6a:
73:4e:68:2a:ab:ef:25:a8:4f:ed:8d:55:aa:b9:3e:63:8a:c8:
74:bd:58:8d:27:2b:a6:07:17:8b:d9:b3:0e:28:c4:a5:ad:03:
79:0b:9d:c5:4f:d3:78:9b:02:cc:1a:c7:34:8c:23:46:9c:1f:
66:93:eb:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:42:51 2025 by rpki-client