Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QeFxfOqgz4APZ66-FhNDncC8Dqs.roa
File: QeFxfOqgz4APZ66-FhNDncC8Dqs.roa (raw, json)
Hash identifier: mf0OQSuEZ4+AubcIARShwlA5DThZ63gdTWqvEy2zYq8=
Subject key identifier: 41:E1:71:7C:EA:A0:CF:80:0F:67:AE:BE:16:13:43:9D:C0:BC:0E:AB
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A8EEA9713071DD46DF0612DFCB3D0F72
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QeFxfOqgz4APZ66-FhNDncC8Dqs.roa
Signing time: Wed 25 Jun 2025 21:11:42 +0000
ROA not before: Wed 25 Jun 2025 21:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 22:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:ee:a9:71:30:71:dd:46:df:06:12:df:cb:3d:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 21:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41e1717ceaa0cf800f67aebe1613439dc0bc0eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:54:7d:ff:7e:c2:e5:3e:55:a5:dd:69:86:
5c:09:97:18:f1:85:a8:20:d1:34:26:50:c9:4d:0d:
a5:8f:d7:c8:e5:be:6e:02:fb:fb:b5:03:e4:cb:00:
35:3f:e8:5b:72:5f:63:79:3c:62:72:58:f5:08:9c:
12:46:af:62:99:7c:dd:4c:24:28:32:68:54:e6:c1:
88:97:af:0f:38:0d:33:85:70:78:0e:38:e2:43:ec:
81:b8:ad:ce:66:62:51:69:a6:fa:a4:e5:65:91:54:
0a:76:3b:14:aa:71:4a:7d:63:28:98:a4:6f:74:d7:
85:64:9d:20:0d:05:0f:4e:ac:5d:1b:e8:f2:89:10:
e5:3e:5c:5e:78:50:a4:4e:73:8f:d2:b4:cc:73:50:
76:5c:6b:50:c4:28:9e:93:da:59:14:0f:84:99:da:
03:92:cc:19:0b:38:6e:a5:50:34:09:48:73:11:32:
2b:77:27:f5:cd:d0:c5:e4:ee:c4:c3:30:5c:8b:9a:
4f:8d:44:1c:1f:c1:6f:a9:55:fe:72:56:73:89:1c:
fa:40:77:05:47:d2:79:1b:87:14:31:95:94:e1:67:
d3:55:b3:41:23:fc:ce:64:48:5a:87:9e:a0:1f:c6:
9e:f3:d1:cb:54:6e:a4:6d:3d:67:91:8c:99:71:1f:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:71:7C:EA:A0:CF:80:0F:67:AE:BE:16:13:43:9D:C0:BC:0E:AB
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/QeFxfOqgz4APZ66-FhNDncC8Dqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2e:96:e7:58:0e:a6:1c:2a:ca:a3:c1:6b:13:0c:5f:96:9e:43:
be:82:c8:bd:8d:2d:bd:eb:cb:38:22:7f:2b:00:fa:8d:fa:98:
51:26:cf:83:19:f7:b0:97:38:91:f8:7d:e5:80:c6:88:48:08:
9f:e9:25:53:3a:fd:84:60:83:e6:23:29:a9:f5:b7:32:84:40:
11:5e:77:cf:ef:d6:d0:32:ce:41:c4:e8:89:f6:8f:f3:18:89:
1c:70:41:07:1f:c3:1e:71:8e:9f:fe:a9:3a:dc:63:c6:69:39:
06:f3:8b:71:bf:87:86:f0:43:47:1b:78:42:3a:08:a1:5d:ca:
48:07:0f:c9:d3:88:4a:fd:a3:b8:9b:b2:4b:cd:f2:40:6e:88:
ca:77:ac:59:5e:7c:ea:0c:68:fe:9f:45:ac:87:e6:16:93:55:
f3:11:e0:3e:00:ce:47:89:46:fc:53:00:9f:35:52:ff:b8:a4:
45:77:2b:7d:80:1c:16:a8:13:80:35:e3:eb:6d:89:58:29:3c:
64:98:13:b5:d4:65:72:e3:28:c9:d4:6e:a3:b6:23:1c:a4:45:
d9:1b:26:63:16:b8:bb:bb:36:d9:91:4c:5e:db:e3:98:c4:9c:
30:56:5f:71:7d:05:19:81:c0:65:40:89:a0:ca:4c:d1:29:f2:
dc:87:a8:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:41:29 2025 by rpki-client