Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/N4SWIr5L_0JawaApx37sC2E5-m4.roa
File: N4SWIr5L_0JawaApx37sC2E5-m4.roa (raw, json)
Hash identifier: DAYZCrcIZRls5rWNEtEBYq2oIUIy2EiRRJxtJuW/qaA=
Subject key identifier: 37:84:96:22:BE:4B:FF:42:5A:C1:A0:29:C7:7E:EC:0B:61:39:FA:6E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BF0235F842B4D7E359BE4D987ECC3B95
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/N4SWIr5L_0JawaApx37sC2E5-m4.roa
Signing time: Mon 30 Jun 2025 04:04:42 +0000
ROA not before: Mon 30 Jun 2025 04:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:bf01:c8e9/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 30 Jun 2025 04:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:02:35:f8:42:b4:d7:e3:59:be:4d:98:7e:cc:3b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 30 04:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37849622be4bff425ac1a029c77eec0b6139fa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:25:4a:5d:4c:e6:0a:09:02:f5:a2:60:8c:
7e:e5:d6:dd:df:36:00:a1:9b:8b:c2:46:d7:62:0f:
2c:a0:f5:1a:1a:a8:36:9e:ed:c2:ab:a3:70:4d:b4:
50:2d:a5:55:80:c7:a2:3b:64:d7:e1:5a:2e:f3:53:
d2:39:cd:06:70:9c:e1:5e:65:4e:ad:2a:97:54:f7:
56:f8:8a:08:8c:b5:db:51:b3:a6:c1:0a:ca:30:da:
91:37:66:64:0d:d3:e9:25:94:01:a7:d5:97:3e:fc:
c8:76:3f:71:15:6c:8d:ab:ae:f9:91:9d:ac:60:7f:
e3:21:d9:e0:ec:2b:4d:8d:a4:81:03:73:50:ea:e8:
e4:27:c9:f7:36:54:88:81:d8:31:86:b4:d8:47:53:
14:00:77:a1:d5:13:6f:33:73:a5:77:8f:6e:e2:eb:
76:22:6b:f6:cc:27:38:1c:2e:fe:32:c7:5a:e7:2b:
71:07:0a:50:0e:91:85:af:16:6c:a1:ed:a1:bf:48:
86:6e:90:bd:33:59:ec:ee:97:7f:5c:a8:24:f7:0f:
d8:d6:8a:86:11:08:60:27:7a:38:cc:53:7c:8e:81:
8a:72:6a:a8:c0:b6:27:be:93:43:bf:bd:c3:75:5d:
34:db:f6:4a:33:58:2a:e2:68:fc:46:42:d1:65:4e:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:84:96:22:BE:4B:FF:42:5A:C1:A0:29:C7:7E:EC:0B:61:39:FA:6E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/N4SWIr5L_0JawaApx37sC2E5-m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:bf01:c8e9/128
Signature Algorithm: sha256WithRSAEncryption
0c:17:0b:fa:91:b9:5e:5c:da:e2:18:d8:31:f2:34:3b:4b:0b:
3e:86:77:1f:cf:a1:56:19:f4:19:35:38:ed:51:f3:9b:4f:f6:
b7:06:c2:14:2b:1a:c2:3c:f4:96:29:a6:d6:fb:07:c6:48:a3:
5b:40:96:5e:df:71:bd:45:c7:13:35:62:77:48:b1:5a:80:61:
88:32:fb:03:88:a4:33:de:f2:a1:2a:ee:22:8c:1b:e5:f1:07:
5e:38:da:6f:ec:ce:6c:85:5b:29:50:4e:7f:a8:57:29:fb:9e:
b5:9b:6b:dc:ee:ac:e6:0e:68:39:fc:ac:8b:5f:7c:7a:47:fc:
c0:31:d8:6c:86:ac:14:7f:86:b7:0f:2b:55:fb:26:0d:34:72:
98:97:21:87:da:37:d2:41:c7:b9:f0:ee:5d:1d:fb:24:0e:54:
f6:b2:2a:89:c4:4b:2a:02:a8:82:d3:a9:a7:0b:bc:f7:8f:35:
de:e4:38:18:bc:1b:be:b7:88:86:d1:d2:71:bb:23:81:84:b3:
16:44:d1:cd:53:27:73:7f:ac:ed:7f:19:93:18:1d:c1:09:11:
da:ad:12:c5:27:c0:11:b2:54:2f:b4:4f:3a:95:61:fa:b8:67:
a6:f7:b0:ae:d9:c6:98:df:8e:95:38:42:b5:56:ca:3d:62:85:
4b:44:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:13:09 2025 by rpki-client