Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QcSCo7FV0E--W45KdM5a0Th0MIY.roa
File: QcSCo7FV0E--W45KdM5a0Th0MIY.roa (raw, json)
Hash identifier: Ei6kiP+1lTF/iPMZ0tzaWTdMxJvfsCsVNnZ87XAQ3tg=
Subject key identifier: 41:C4:82:A3:B1:55:D0:4F:BE:5B:8E:4A:74:CE:5A:D1:38:74:30:86
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977495B602CCF85586E8C5E4229C7DB36E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QcSCo7FV0E--W45KdM5a0Th0MIY.roa
Signing time: Sun 15 Jun 2025 17:14:17 +0000
ROA not before: Sun 15 Jun 2025 17:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 18:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:95:b6:02:cc:f8:55:86:e8:c5:e4:22:9c:7d:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 17:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41c482a3b155d04fbe5b8e4a74ce5ad138743086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:73:a2:60:df:99:67:52:07:89:1d:5d:38:
10:0c:63:9a:c0:f4:00:95:6b:d6:a8:3b:db:e9:39:
73:88:67:fc:2f:77:ea:28:6e:5e:4b:0d:5b:5d:f3:
b5:bf:7a:c7:07:5d:a5:29:6d:09:80:b2:82:b3:85:
4e:c1:4c:9c:31:2b:85:65:65:e3:2b:8c:91:fe:af:
b5:1c:d2:f1:d3:95:88:fa:54:65:80:a4:1c:de:66:
ae:8f:07:51:c6:16:b0:31:cc:32:e1:ae:7b:26:c2:
7d:7d:03:72:d1:96:40:14:2d:ef:02:bb:fe:2a:29:
a1:32:8a:22:61:40:2a:0b:d1:ef:17:b4:e8:ea:a6:
49:32:bf:dc:2f:6d:8a:6c:d3:a2:26:96:87:94:73:
b3:3e:7f:d3:21:0a:93:f4:7d:00:36:39:e2:48:84:
25:ce:b1:ae:a8:d4:1c:79:e9:f7:f4:5e:ff:6b:22:
30:2b:c7:83:c2:49:36:89:67:5d:a6:91:77:16:ba:
e7:f0:ea:0d:40:01:a2:fc:d3:9c:de:93:c4:1b:68:
76:96:5e:6e:49:3e:0f:96:68:43:16:41:9c:db:43:
90:20:8e:cf:8b:0f:f8:b2:6f:9d:41:6e:b8:0b:d9:
ba:f2:e5:93:8e:3d:17:28:6f:cd:a3:ac:5a:28:83:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:82:A3:B1:55:D0:4F:BE:5B:8E:4A:74:CE:5A:D1:38:74:30:86
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QcSCo7FV0E--W45KdM5a0Th0MIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3d:b4:21:51:5a:0b:b4:1c:de:4f:03:1f:3b:96:62:15:bf:22:
00:2e:a2:3a:12:c6:c0:86:11:2f:10:18:20:d3:ad:bf:d7:35:
39:34:63:04:f0:dc:bb:9d:11:d5:c8:7e:da:77:ed:15:62:35:
f4:66:b0:ca:75:d5:05:dc:24:19:25:ab:73:c1:7e:7c:2e:6e:
a6:4c:05:d0:9b:15:c3:d3:24:bf:67:96:bf:8c:47:e2:73:73:
9f:55:23:b8:1f:33:b1:20:e0:2e:87:33:b3:64:41:b5:f0:58:
aa:2f:d5:10:84:c6:bb:85:8b:2a:26:8e:d7:4d:16:25:52:3f:
a7:cf:67:f2:cd:d1:d7:c6:41:58:fd:6b:54:6b:ee:f0:14:8b:
57:b7:cc:a3:a0:4f:ee:2b:0b:60:c5:e7:50:af:38:d6:34:b6:
f0:b0:bc:cb:cf:96:bd:7e:fb:20:a0:42:c1:89:36:2a:a2:ac:
12:7b:e9:62:38:32:8c:76:58:85:4b:43:0e:29:d7:cb:d6:a5:
31:10:7a:9f:aa:75:7d:06:42:6c:2a:6f:33:fe:03:fd:f6:af:
10:6f:3f:cf:23:d2:32:fc:7b:c1:d8:b3:11:5e:45:6e:3e:9c:
c3:f6:ab:ed:e8:93:d6:52:8b:e1:5f:3c:78:a7:f3:c6:bd:bf:
89:cf:f6:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:46:07 2025 by rpki-client