Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/P18hCxFzDyrhEZh68jZ0p0GfIWA.roa
File: P18hCxFzDyrhEZh68jZ0p0GfIWA.roa (raw, json)
Hash identifier: OTPn/Kn4yS6zzw+HNsts1uEHHEvsUoT0e/MsA75gOyE=
Subject key identifier: 3F:5F:21:0B:11:73:0F:2A:E1:11:98:7A:F2:36:74:A7:41:9F:21:60
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197738222A0D517FAD85D1CDF0C0DB80633
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/P18hCxFzDyrhEZh68jZ0p0GfIWA.roa
Signing time: Sun 15 Jun 2025 12:13:17 +0000
ROA not before: Sun 15 Jun 2025 12:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:82:22:a0:d5:17:fa:d8:5d:1c:df:0c:0d:b8:06:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 12:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f5f210b11730f2ae111987af23674a7419f2160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:99:47:85:0f:24:90:a0:24:da:2b:84:1f:
c6:7b:be:2d:63:cc:80:a2:b8:2b:d3:d3:d7:43:75:
37:d3:ee:5c:47:c9:22:7e:58:5a:d3:82:a4:d8:87:
2d:36:92:0d:99:3f:ce:07:e8:63:cc:69:20:f2:92:
08:79:7d:20:03:30:60:7c:bd:20:3d:c7:65:df:c0:
f0:f9:bf:3f:df:3b:59:4b:04:55:db:0c:f6:e7:15:
5a:ee:94:50:5d:f8:17:cb:65:0d:03:57:0a:fa:51:
87:d1:42:f2:c4:e8:ef:95:58:49:1f:a8:6f:92:97:
8f:45:c8:2b:44:ab:94:aa:07:6b:f9:f0:3e:fd:8e:
a5:0f:64:ab:aa:f3:c8:e4:b6:41:38:64:bc:20:ae:
7b:70:ef:8f:b0:ad:ae:0c:c8:e0:94:7b:f7:5f:37:
07:8b:e8:dd:e9:36:bb:03:3a:f0:56:79:fa:2d:47:
5a:80:14:30:d0:21:2e:3f:5d:5a:da:e7:ab:43:34:
64:a6:92:4c:b1:a1:0b:72:e8:fc:78:9c:5d:e9:83:
36:26:8f:e3:39:8e:a1:bd:a0:07:5e:2a:e4:65:46:
c9:29:ca:a6:e9:a7:b4:3b:f0:ba:b3:15:14:15:02:
93:00:71:57:a2:4e:92:20:57:6e:6a:34:61:c9:73:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5F:21:0B:11:73:0F:2A:E1:11:98:7A:F2:36:74:A7:41:9F:21:60
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/P18hCxFzDyrhEZh68jZ0p0GfIWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
88:bd:91:47:0e:66:b8:f4:1a:65:05:fc:7a:d0:83:e8:a1:52:
f9:f2:22:85:d9:c2:7d:1e:9b:ce:24:57:94:56:ac:13:ae:bc:
28:95:ac:c1:ec:4c:41:f4:db:c2:c4:32:94:b5:d3:b6:16:2d:
76:c4:61:67:05:1b:9d:1a:d4:e5:b0:54:e5:63:07:8d:e8:52:
76:67:45:5f:2a:91:14:a6:aa:6f:52:26:4c:a7:c1:28:a6:24:
e4:77:ff:6a:4f:82:18:06:c2:e0:c8:26:bb:9e:cf:5d:7c:c3:
03:21:36:0c:9a:35:8c:2b:d4:0e:cb:74:d3:f9:53:2d:f1:0b:
82:d3:18:bb:0c:c8:dc:11:11:00:64:0d:1c:b8:34:e8:da:9a:
eb:22:85:34:ea:de:0f:a9:7a:83:92:f7:51:e1:b7:9f:c3:83:
16:f0:47:e0:26:5d:e2:92:8c:59:07:de:9f:21:4a:5e:f7:0e:
a8:93:ad:1d:34:3b:fa:37:21:e0:95:7b:2f:86:13:cd:90:01:
a0:45:0a:eb:c7:4c:b3:54:97:79:55:22:37:f9:b8:e3:c1:2d:
91:96:48:5c:f6:68:42:84:59:6c:e8:f7:d3:4a:af:db:d6:a1:
b9:1d:07:a7:85:75:75:b4:c2:ad:81:f7:47:1a:d9:d7:a5:d1:
a8:6b:cb:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:28:04 2025 by rpki-client