Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Mk-o9VezNxWJy6-Zh9ytWhJye5Q.roa
File: Mk-o9VezNxWJy6-Zh9ytWhJye5Q.roa (raw, json)
Hash identifier: +x5WRH8y2apkSNOWnFXCL+mEuxs+fTC4gPyvFQFfD+8=
Subject key identifier: 32:4F:A8:F5:57:B3:37:15:89:CB:AF:99:87:DC:AD:5A:12:72:7B:94
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A9CFE0D4EC2F3D464BA392596D7514FD
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Mk-o9VezNxWJy6-Zh9ytWhJye5Q.roa
Signing time: Thu 26 Jun 2025 01:17:42 +0000
ROA not before: Thu 26 Jun 2025 01:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 02:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a9:cf:e0:d4:ec:2f:3d:46:4b:a3:92:59:6d:75:14:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 01:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=324fa8f557b3371589cbaf9987dcad5a12727b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:6e:35:38:85:84:58:1b:c7:e0:45:40:88:
72:db:f6:98:59:37:a0:1c:f6:35:e5:e4:3f:b3:ef:
5d:b7:d7:87:43:8a:99:09:91:fa:50:58:6a:0a:f8:
be:be:81:66:41:1a:d2:10:a2:b7:86:e2:7a:c1:41:
f5:81:59:3d:98:4d:66:98:f4:79:50:99:42:ca:78:
d1:82:e6:eb:86:a8:b9:0b:e9:d0:92:b9:a0:b6:96:
0e:be:0e:df:75:2b:4f:d0:df:20:b1:6a:5e:04:a4:
cc:62:7c:37:40:1a:8e:6d:fc:d3:2b:3b:15:9e:e8:
fc:14:a7:da:01:e4:89:e5:36:97:4e:72:83:e5:2a:
88:71:60:5b:37:d3:f7:1a:b2:cc:77:ad:1b:cd:ad:
fd:f0:a9:24:1a:1c:9e:78:46:93:53:00:7f:81:57:
c1:69:9e:b7:68:16:65:d8:ce:db:fe:86:05:3f:f2:
7a:0e:df:df:9a:00:45:b8:11:bb:c7:1e:7e:13:fc:
0f:8f:d5:e4:9a:da:31:6f:94:8b:5a:44:93:31:13:
c5:dd:e0:da:7c:2d:fb:5d:d0:95:5c:71:a4:80:d3:
99:17:01:2d:6c:b4:20:25:7c:71:05:86:f7:a9:37:
b8:83:ac:9d:23:c9:bf:0b:67:7d:33:16:bd:d2:0c:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:A8:F5:57:B3:37:15:89:CB:AF:99:87:DC:AD:5A:12:72:7B:94
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Mk-o9VezNxWJy6-Zh9ytWhJye5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
58:53:a6:60:41:d1:21:a9:fe:1b:14:ab:de:ff:a5:35:39:9b:
20:fb:18:d1:ab:11:f5:2b:eb:11:5b:01:99:c2:e4:df:ef:ee:
69:6f:5e:ba:1f:3f:e2:e2:d5:00:e1:7e:08:aa:41:1e:f5:f7:
cf:48:67:3d:ec:55:e0:95:df:fa:d3:b7:f4:dc:80:5f:20:2a:
99:dc:19:57:a3:d0:44:3f:6f:a5:21:d8:7f:1f:95:91:68:1f:
f3:aa:05:c9:82:04:3d:d5:93:20:ee:77:0c:43:65:d4:c3:4d:
b9:8a:f4:7e:d5:59:3e:92:0f:a8:ce:c5:51:df:9b:2d:cc:a7:
c8:e5:dc:ae:6e:c8:cc:48:ec:16:c3:38:e0:2e:09:25:f2:02:
37:9b:a3:b1:fd:cc:b8:1a:10:87:3b:9f:94:82:e1:5e:3a:96:
09:0b:09:36:ed:2b:ef:2a:b2:ea:c7:e7:1f:4b:61:02:60:62:
23:ee:03:34:11:93:74:1f:42:7f:be:a9:12:84:53:58:00:f9:
10:4a:ce:06:b3:49:0e:3b:14:9c:dc:e6:35:69:ea:e7:56:e1:
01:24:4a:ef:b4:12:b2:12:a6:8b:f1:37:82:21:d7:8a:b5:f8:
af:a0:1b:07:ba:26:e4:e3:47:c9:67:4a:4d:9e:1d:dc:18:58:
7a:03:ed:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:20:05 2025 by rpki-client