Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MvTraTMPSvAq-SZzjH1R2rVPyfk.roa
File: MvTraTMPSvAq-SZzjH1R2rVPyfk.roa (raw, json)
Hash identifier: DChWzappyngeRtJZhwjc/GvRWwvlpJlhEm/TdbJ0g4o=
Subject key identifier: 32:F4:EB:69:33:0F:4A:F0:2A:F9:26:73:8C:7D:51:DA:B5:4F:C9:F9
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197929D2BC17814061B1D58B524F229BFFB
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MvTraTMPSvAq-SZzjH1R2rVPyfk.roa
Signing time: Sat 21 Jun 2025 13:11:03 +0000
ROA not before: Sat 21 Jun 2025 13:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Jun 2025 14:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:9d:2b:c1:78:14:06:1b:1d:58:b5:24:f2:29:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 21 13:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32f4eb69330f4af02af926738c7d51dab54fc9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:a5:b6:15:d4:25:e8:5e:25:c6:36:4d:8b:
aa:22:f4:ca:c7:7f:77:67:7d:f2:b9:55:87:3a:47:
ba:de:44:3c:dc:5b:70:3f:7b:74:86:04:53:d4:4f:
d1:d7:4d:6b:99:9e:a7:41:d7:58:bf:cb:21:fa:46:
35:9c:53:b0:99:85:e6:ae:0e:00:a2:c1:1e:f1:e7:
8e:ad:19:e5:4f:14:ef:f9:bd:3b:f9:f1:6f:f2:54:
42:31:4c:ba:e0:a2:6d:b3:d8:a5:e5:52:c3:7d:3e:
13:37:46:e3:71:3b:bb:cb:84:be:d5:63:23:ad:27:
60:80:51:8a:19:d2:09:cb:15:91:d4:ba:b5:1f:b7:
ed:f4:fa:0b:5f:95:ee:cc:04:39:44:c3:87:0e:fa:
0d:8d:30:4c:68:87:a6:33:86:b3:40:95:19:48:35:
8f:2e:70:dc:ff:f7:2e:aa:59:66:1d:b3:79:9a:8b:
8e:51:3e:03:2b:15:30:e9:d3:3b:8e:c7:1d:f3:7d:
e6:2d:ae:29:c8:b8:04:50:bf:86:5c:85:2e:52:90:
75:16:4d:36:a5:46:e4:52:92:c4:92:23:83:8b:f1:
fd:2d:18:fc:72:31:d2:59:92:3c:24:b9:52:99:98:
90:90:62:96:53:31:d0:d9:cc:16:a8:1c:9c:31:e4:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:EB:69:33:0F:4A:F0:2A:F9:26:73:8C:7D:51:DA:B5:4F:C9:F9
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/MvTraTMPSvAq-SZzjH1R2rVPyfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4f:4e:dc:bd:92:79:64:fe:29:dd:e3:a6:4a:31:78:59:58:12:
7c:e6:5d:c5:0b:b1:08:39:1f:65:a1:e7:45:68:bb:08:dd:67:
20:42:3e:00:eb:c8:f7:58:de:46:41:40:19:08:d7:81:09:c3:
d1:03:08:f7:72:25:8c:2d:e8:53:f4:90:67:1b:09:56:a8:c6:
11:5a:18:10:48:e0:2f:c0:b8:e5:6f:e7:4c:74:82:e1:f3:89:
8d:04:39:56:40:47:3a:0a:64:a0:df:20:df:cf:c5:15:56:e5:
6f:c8:7b:95:79:1b:b4:8b:a7:52:c5:78:24:aa:68:34:82:bf:
50:d7:a6:ec:b9:b7:c3:d6:46:f2:7b:00:52:c7:30:ad:ab:6e:
2d:47:a2:e9:bd:46:17:90:ed:f7:1f:02:05:1f:90:e8:0c:47:
3b:89:62:06:10:12:eb:da:5c:1e:93:2e:e9:4d:3b:cb:40:b1:
37:4f:c0:0a:a5:97:94:b1:54:22:14:b3:d8:fe:58:2d:0f:03:
cc:61:1f:ab:fe:c1:0e:95:c2:df:f1:db:e0:00:02:bc:f1:63:
17:c7:d8:3d:cb:a8:3d:3f:95:00:cc:8a:21:cf:32:16:dd:7d:
02:29:5d:c3:38:7d:e2:4d:11:7b:3c:b4:4b:90:7b:ad:c3:8d:
9a:71:b1:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:53:48 2025 by rpki-client