Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Qvmh5IP6Bt5XlnQPhJ-ByIsJG2o.roa
File: Qvmh5IP6Bt5XlnQPhJ-ByIsJG2o.roa (raw, json)
Hash identifier: aUrXEVarcNyOqKyAo4jl0gxQuTwBeB5IsbTFLlbTLmg=
Subject key identifier: 42:F9:A1:E4:83:FA:06:DE:57:96:74:0F:84:9F:81:C8:8B:09:1B:6A
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019770ED20230D4C643ECF67EE2D133514BD
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Qvmh5IP6Bt5XlnQPhJ-ByIsJG2o.roa
Signing time: Sun 15 Jun 2025 00:11:17 +0000
ROA not before: Sun 15 Jun 2025 00:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 01:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ed:20:23:0d:4c:64:3e:cf:67:ee:2d:13:35:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 00:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f9a1e483fa06de5796740f849f81c88b091b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:f2:14:42:c4:4b:32:49:ec:b1:82:40:5a:
d4:55:b4:22:09:26:21:50:58:75:e0:c9:db:5d:cd:
a7:fe:40:37:bf:ed:d1:2d:78:7f:82:4b:56:61:86:
45:6c:8c:5c:2f:05:38:bb:de:c7:81:09:fb:64:b5:
06:44:a3:59:21:7c:d6:46:38:7d:a3:41:6e:7a:63:
c8:e2:c8:1e:9d:25:c3:4a:a4:71:0c:0d:4d:5e:6a:
64:07:17:5b:3e:c7:93:bc:4b:b3:06:6e:91:e7:88:
87:fd:84:c2:8b:ce:0f:60:78:63:87:d3:f9:89:78:
9d:94:11:cf:52:85:26:e2:3f:b0:91:02:ba:a1:26:
c2:94:72:3b:c6:45:58:ad:36:ad:4f:f2:e2:c1:18:
65:e7:6d:25:ad:4e:38:02:80:79:c1:7a:7f:f4:45:
7b:c8:d6:77:7b:83:90:df:ed:5b:4c:55:ec:20:a0:
79:7b:eb:89:46:db:83:15:48:2c:89:e7:2a:19:25:
35:42:de:40:96:da:05:e1:61:c0:b2:ce:3c:1a:cf:
dd:8d:b1:52:12:f7:59:87:94:49:35:3f:a2:f6:59:
ba:4a:3a:ef:76:19:88:d5:9e:18:7c:ff:3f:17:22:
8b:65:5d:32:3a:4c:fc:bd:dc:7a:a6:42:36:d1:cc:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:A1:E4:83:FA:06:DE:57:96:74:0F:84:9F:81:C8:8B:09:1B:6A
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Qvmh5IP6Bt5XlnQPhJ-ByIsJG2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
0a:1e:20:39:5d:2c:8c:60:19:a9:8e:8c:fc:2d:57:11:2b:ab:
d8:e2:b5:5d:1e:5e:b3:cb:82:a3:6b:46:12:09:f3:d9:97:75:
ef:9a:59:8e:3f:16:4b:95:ed:d3:e8:06:59:f1:01:1c:ca:5d:
81:86:31:3e:87:83:e8:17:d5:bb:2a:8a:bf:f3:f8:33:d5:db:
24:0a:03:18:6e:9d:34:66:a1:7c:f7:68:50:99:b7:83:a3:db:
cd:43:78:a7:d2:dd:a3:b9:f9:92:86:aa:64:25:a2:01:23:2b:
93:41:b4:1e:f9:50:b6:64:7d:da:56:e5:3b:07:67:9a:1d:de:
34:50:41:1c:28:15:1b:a6:32:36:26:6c:72:3e:23:b6:eb:1d:
9a:84:f7:66:cb:6f:e3:0f:f1:ff:5c:22:4a:74:0f:da:a2:4e:
ec:c5:28:dd:5f:b9:89:81:b5:34:7f:67:08:bf:0d:fd:72:f7:
d5:42:8d:36:e2:2e:78:13:13:d1:92:fc:61:1c:6b:41:81:5e:
56:28:06:2d:75:e6:45:95:30:7a:e7:eb:f8:73:50:73:dc:ee:
ec:bd:59:01:9d:19:b8:2c:f0:be:04:c0:df:0b:1e:9b:49:ef:
37:71:c0:d3:a7:da:53:6d:33:97:63:23:4a:86:e8:39:26:39:
fd:3c:62:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:01:55 2025 by rpki-client