Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Rt1Z5HkQiCu0CwPZIQPLk5FaBdE.roa
File: Rt1Z5HkQiCu0CwPZIQPLk5FaBdE.roa (raw, json)
Hash identifier: ghnbM+eCHZN/gbuGuoUueBEB7QYEJ4EWbWxVStdrGEA=
Subject key identifier: 46:DD:59:E4:79:10:88:2B:B4:0B:03:D9:21:03:CB:93:91:5A:05:D1
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019783622AD95E3CC1FB843C9607EBE7E6DC
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Rt1Z5HkQiCu0CwPZIQPLk5FaBdE.roa
Signing time: Wed 18 Jun 2025 14:12:18 +0000
ROA not before: Wed 18 Jun 2025 14:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Jun 2025 15:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:62:2a:d9:5e:3c:c1:fb:84:3c:96:07:eb:e7:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 18 14:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46dd59e47910882bb40b03d92103cb93915a05d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:d7:f7:f8:44:ed:f7:24:b7:b5:fd:25:70:
39:a3:5e:d6:2a:f8:cf:0d:b6:86:c6:a3:c9:ee:b4:
0e:6d:6d:f3:12:69:e4:33:15:dd:fa:69:19:fc:df:
3d:93:02:e7:30:7d:01:b6:23:b4:7b:4c:09:8f:96:
af:ef:b8:0b:05:c4:49:96:7e:6a:a5:f0:dd:49:a9:
71:e1:c8:fd:0e:98:1e:ea:ea:db:c1:78:bd:1d:2e:
b8:85:3e:e8:ff:12:fd:f4:5d:fc:1f:6f:79:21:9c:
54:29:2f:f6:a9:f1:7d:99:10:4b:6c:a5:96:a2:56:
83:7c:fe:c7:59:1f:b9:07:62:36:07:a7:0e:e4:f1:
88:2d:12:a9:37:e5:98:5e:88:68:93:0a:f0:8b:e2:
95:4d:a1:1e:4f:03:c7:4c:4b:37:4c:ea:6d:d1:f4:
ce:95:c6:5a:3e:92:22:dd:82:78:db:d1:03:84:1f:
d0:69:b6:8e:5c:65:61:d0:ce:d4:04:fe:b6:05:ab:
a7:cc:21:86:4d:b1:11:c3:65:26:3a:96:9d:95:22:
fb:ac:3c:1d:e6:e9:78:6d:67:c3:bd:66:5f:fe:5c:
6b:a8:27:e6:9d:a4:bd:fd:bd:2e:c0:cb:eb:b0:27:
ce:61:3e:6f:44:7c:b0:cd:ca:13:5c:e4:f8:50:36:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DD:59:E4:79:10:88:2B:B4:0B:03:D9:21:03:CB:93:91:5A:05:D1
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Rt1Z5HkQiCu0CwPZIQPLk5FaBdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4a:ba:1f:c1:09:62:41:05:3e:e7:aa:49:85:d5:bf:d6:1b:7f:
7c:b2:b5:33:40:8b:b2:82:39:95:8c:f5:3d:1b:a6:35:9e:c5:
ea:69:bb:89:04:b6:b8:39:7a:37:44:a0:9e:07:46:cc:e6:c8:
82:32:d8:3f:23:f7:5a:bf:25:46:71:2e:68:d3:0a:07:96:ed:
0f:11:f7:aa:df:f0:53:46:a0:35:64:2d:75:56:87:33:49:0a:
35:70:d0:46:a2:f7:ec:a3:4b:20:25:fd:71:d3:17:9e:a9:e8:
c7:0f:85:6b:61:dd:b5:a5:6c:6c:c3:59:16:89:61:66:ea:6c:
31:d3:cb:3e:6f:8d:df:51:be:66:0d:8f:46:df:db:58:08:c2:
a7:86:34:90:76:c6:f9:d5:fd:58:f5:32:59:c9:d7:5d:7f:57:
4b:4f:30:4b:be:e0:2b:c0:c1:0c:2d:c5:e5:89:4b:84:ef:d3:
06:52:ad:ef:c0:53:4b:49:91:88:40:9d:a6:9d:86:ba:2c:8c:
71:29:c1:9d:c6:08:fe:d6:4d:34:6f:bf:cc:d2:bc:bd:0e:09:
c3:f5:9f:63:a3:0b:93:35:80:92:c0:ee:4e:ca:22:b4:3a:29:
8c:0a:9b:5f:9c:4b:61:51:02:45:70:a7:e7:27:e5:31:90:6d:
70:cb:18:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:06:15 2025 by rpki-client