Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QD3sxk5lzwWAbgkb6vLZa5bmRcM.roa
File: QD3sxk5lzwWAbgkb6vLZa5bmRcM.roa (raw, json)
Hash identifier: k2EFBe52mkglsUSat793SZVv8cG+vdKkPncStMlqmVo=
Subject key identifier: 40:3D:EC:C6:4E:65:CF:05:80:6E:09:1B:EA:F2:D9:6B:96:E6:45:C3
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019785F64185D6891238EC051F616FB1BA34
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QD3sxk5lzwWAbgkb6vLZa5bmRcM.roa
Signing time: Thu 19 Jun 2025 02:13:17 +0000
ROA not before: Thu 19 Jun 2025 02:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 04:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:f6:41:85:d6:89:12:38:ec:05:1f:61:6f:b1:ba:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 02:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=403decc64e65cf05806e091beaf2d96b96e645c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:91:6e:47:19:53:68:03:b8:fa:7b:b7:87:
ca:5d:54:ca:b1:9e:21:2f:67:60:85:dd:1f:63:28:
ee:28:ca:b2:97:2e:d8:8c:57:51:a4:a0:e0:95:16:
e1:12:8c:73:37:ef:b0:d3:9a:b2:ca:f5:03:e6:54:
24:43:0b:94:23:47:09:53:67:6d:da:27:78:4f:04:
56:67:9e:ce:8e:61:38:54:75:15:2a:69:42:3c:76:
ab:56:7c:5f:e9:5d:cf:ab:05:dd:f7:cd:e5:1b:bc:
a6:8c:df:22:c9:19:4d:fe:38:11:b5:78:c7:91:75:
0c:f3:84:71:4a:9c:5a:2f:5c:7a:39:ad:54:68:17:
9e:10:8c:b5:cb:a1:25:6e:44:07:8f:e1:de:6f:d9:
b6:b0:0b:1d:53:71:48:d2:ab:56:79:4f:83:db:80:
5e:9c:e0:f1:7a:8b:61:bb:1c:31:da:ae:fa:a2:9a:
1d:70:83:37:41:4c:20:81:af:82:24:83:b6:7a:e3:
a2:de:14:8b:a2:a1:55:01:31:06:cb:76:8d:85:f1:
0b:72:d1:6f:b1:2f:4f:f9:c6:d3:06:27:5d:5f:11:
c0:b0:55:03:c8:7f:a5:f2:c9:ab:b6:66:5e:3d:5b:
c2:80:51:7d:c1:e8:f1:e3:c0:b4:75:75:fd:fc:21:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:EC:C6:4E:65:CF:05:80:6E:09:1B:EA:F2:D9:6B:96:E6:45:C3
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QD3sxk5lzwWAbgkb6vLZa5bmRcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
7b:9c:83:2f:f5:a4:7b:2e:3e:29:a2:6e:e3:54:d4:ad:b2:78:
99:e5:a3:a7:b0:5f:dd:21:3e:77:0a:ef:d8:58:cb:0a:b2:50:
d7:a7:cb:c5:5b:82:de:4e:bf:ae:da:51:9a:04:6a:c5:58:c3:
22:6b:ed:46:02:8a:7b:8d:42:0d:92:8c:c4:8f:dc:d3:40:aa:
a6:db:bc:d8:e1:e8:e5:e0:a1:16:78:8f:40:b7:96:81:62:e4:
03:67:74:87:27:0e:63:ab:9f:c0:e1:aa:b9:94:e5:43:e5:5e:
3e:8c:46:4d:2d:c9:66:3b:fe:4c:68:64:db:ee:6d:9d:12:15:
17:ad:94:be:bd:db:62:32:4e:42:54:ba:af:84:c4:19:35:50:
3e:7d:19:a8:c0:c1:a2:d6:df:a1:fa:c4:30:0e:33:c6:07:63:
2a:b2:af:30:4d:d9:c2:6c:ad:75:6d:db:bf:d9:3b:9e:54:95:
30:5e:c5:f6:15:ce:73:e4:c6:16:08:db:ab:93:98:74:ac:7e:
2c:91:3d:95:2e:07:56:ff:21:94:4a:7b:1c:0f:b7:5a:4b:61:
21:0c:95:3c:c5:71:2c:12:be:c3:3a:d8:f2:f0:34:97:4c:08:
84:66:62:d0:7f:de:7f:79:ca:ee:fd:2b:10:9c:d8:00:05:18:
f0:b7:ab:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:06:51 2025 by rpki-client