Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/RTgyveQmFT2qpXykYPF-XFZhVKg.roa
File: RTgyveQmFT2qpXykYPF-XFZhVKg.roa (raw, json)
Hash identifier: PDig87KvENQBILRpH8vFOA2czmhvlec4h3R3N0/F4UU=
Subject key identifier: 45:38:32:BD:E4:26:15:3D:AA:A5:7C:A4:60:F1:7E:5C:56:61:54:A8
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197ABF18850C971169986FC126724C0D1B0
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/RTgyveQmFT2qpXykYPF-XFZhVKg.roa
Signing time: Thu 26 Jun 2025 11:13:42 +0000
ROA not before: Thu 26 Jun 2025 11:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 12:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:f1:88:50:c9:71:16:99:86:fc:12:67:24:c0:d1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 11:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=453832bde426153daaa57ca460f17e5c566154a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:d8:e5:39:1b:04:aa:f9:81:27:26:d2:86:
08:75:a4:c3:63:8d:0f:20:c6:d0:a5:63:77:fe:91:
9c:83:1f:2a:58:cf:99:1a:ba:7e:18:9e:98:25:f9:
c0:56:89:1d:b6:06:ed:a1:23:01:1b:fc:e9:b5:35:
e2:cb:fc:d7:92:62:80:c4:3c:4a:e1:ef:cc:21:a6:
1f:b7:a9:43:80:e5:61:e2:d7:9f:da:16:c3:bf:3d:
1c:3a:5e:70:0d:7f:34:ef:74:11:ea:f3:37:67:b4:
2e:32:63:ce:62:55:90:fe:cf:78:a1:88:f1:b6:0a:
9e:dc:7f:e3:7e:76:c5:fe:9c:c6:f0:cb:ed:f9:e4:
43:65:ab:e3:79:db:ef:e2:95:a2:03:0e:66:09:8d:
40:70:79:1b:80:23:62:81:c4:76:1c:5b:81:a6:d1:
5f:0f:cf:6f:dd:5a:d7:73:44:65:c9:4f:71:cf:af:
b6:e7:bf:21:3a:04:ad:a8:ff:18:65:91:2f:0f:8f:
51:f5:d4:69:76:7f:2b:cb:b6:d8:4a:e2:e7:a1:f1:
3f:2a:6f:b5:c5:14:e3:5c:ad:81:10:ed:e5:99:ad:
44:73:28:66:fe:a5:df:37:3c:06:02:1e:00:ad:4b:
32:73:fb:4b:0c:cf:c8:21:32:16:f5:ca:9a:e4:a8:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:32:BD:E4:26:15:3D:AA:A5:7C:A4:60:F1:7E:5C:56:61:54:A8
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/RTgyveQmFT2qpXykYPF-XFZhVKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
1d:80:e2:92:eb:de:51:bd:b7:f3:a2:a1:80:01:91:83:42:c0:
a9:58:f8:78:d0:fc:54:00:6e:54:cc:01:d6:6f:4c:1c:b3:39:
29:0c:18:7b:db:62:8a:cb:3f:a9:45:18:8c:7a:6f:79:52:0e:
8f:ce:bd:81:ea:72:97:98:70:ba:a1:35:41:63:e6:98:ef:26:
61:3c:f3:c3:86:8c:63:55:7a:d8:6d:33:65:6e:b7:32:36:fb:
f7:36:b9:a6:15:28:b6:61:43:94:cf:48:51:c4:6b:c4:3e:d5:
c7:5f:a4:96:cb:1f:2e:80:0e:c8:c6:d0:be:31:e1:7e:de:d8:
96:61:bc:ab:00:5d:14:f0:c3:d1:41:53:d9:26:51:2a:1a:89:
1d:a9:98:d0:78:df:7f:1e:56:dc:99:3a:03:a6:fd:f8:18:c8:
a1:2f:da:18:84:77:76:72:3d:0b:28:46:23:c3:05:47:b9:c0:
0c:b3:44:6a:72:35:ee:95:e4:e0:cf:37:19:5b:01:ad:6f:b3:
ff:df:53:de:ed:a8:35:05:39:49:0b:67:87:bc:a1:ed:6c:06:
49:0c:7c:d3:90:14:75:60:c4:99:a1:30:e5:01:85:97:46:cd:
27:59:cf:06:10:98:bb:a2:be:71:6e:3e:50:5c:c0:2c:ac:06:
61:34:54:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:43:42 2025 by rpki-client