Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/TQS7OJ9bPKkGmHwRkOxVB6O5018.roa
File: TQS7OJ9bPKkGmHwRkOxVB6O5018.roa (raw, json)
Hash identifier: LcbRciVH2cb14f9CVtf3OmMONM0eydjC14YMD0qLM24=
Subject key identifier: 4D:04:BB:38:9F:5B:3C:A9:06:98:7C:11:90:EC:55:07:A3:B9:D3:5F
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C8799D0D115E4AB4F3EA7FCAE6A5F9BD
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/TQS7OJ9bPKkGmHwRkOxVB6O5018.roa
Signing time: Wed 02 Jul 2025 00:11:42 +0000
ROA not before: Wed 02 Jul 2025 00:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 02 Jul 2025 01:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:79:9d:0d:11:5e:4a:b4:f3:ea:7f:ca:e6:a5:f9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 2 00:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d04bb389f5b3ca906987c1190ec5507a3b9d35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:0b:99:b7:c2:1e:7d:af:a8:a7:0d:d5:50:
f8:55:71:56:83:16:64:7e:3e:88:b0:64:00:c5:ca:
e3:40:67:fd:6f:5e:ed:ed:98:21:60:fa:16:99:96:
b1:df:1d:00:88:4e:de:7e:97:19:63:d9:ad:3a:15:
22:df:88:9d:2a:f2:ee:fb:86:32:bf:df:af:15:4f:
6d:a9:8f:3b:ba:40:4c:6c:c0:18:27:db:38:1f:cd:
f9:0e:b8:e6:40:dd:3a:b9:85:39:f2:20:c7:0c:08:
96:37:f8:76:68:8a:d6:2c:a3:69:11:22:5f:67:0a:
9f:83:92:d0:ef:41:fd:d6:61:f2:01:a3:72:91:e1:
9f:1f:4c:0b:77:60:0d:38:ee:eb:08:38:fb:27:c1:
39:c5:20:1c:0d:43:6f:e8:f1:89:a3:66:63:f0:f9:
25:e3:bc:69:ca:38:55:37:bd:32:3b:8e:fe:ff:5e:
6a:56:64:bb:32:37:66:c2:30:e4:b7:61:47:6c:dc:
a8:c9:66:3c:b5:8c:38:9f:33:30:38:77:1f:78:d3:
06:c4:1c:73:ae:ab:4f:a3:82:7c:17:bd:23:fe:48:
9a:5f:20:94:90:70:f0:3e:79:5c:fd:62:09:2b:7d:
b7:60:e4:33:bd:65:38:08:52:5e:64:9a:a5:98:fd:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:BB:38:9F:5B:3C:A9:06:98:7C:11:90:EC:55:07:A3:B9:D3:5F
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/TQS7OJ9bPKkGmHwRkOxVB6O5018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3f:ab:9b:d6:89:eb:a0:da:b1:dd:15:31:2c:0d:ba:6c:73:b8:
09:1e:a8:b0:7f:e6:5b:d9:98:7a:f0:7d:08:d2:ff:a6:af:ce:
f4:26:49:ee:86:b7:4a:c2:77:7c:1d:c2:88:7f:c0:20:30:13:
fb:99:dc:90:e2:e3:fa:6b:d8:3a:b3:d6:ca:fd:3d:be:3b:38:
a5:35:ea:bb:16:49:7a:ae:05:65:63:bf:3b:6b:4b:ec:c0:31:
fe:f4:d9:9e:a2:3e:19:a6:95:1e:76:ce:61:0e:78:34:1c:92:
cb:6c:e3:e9:b9:dc:64:ce:fb:95:9f:a2:8a:a5:33:c1:79:df:
72:be:fb:d9:8b:d5:42:6f:31:0a:4c:42:3c:a3:9a:d6:9e:27:
21:bc:04:44:f8:aa:c8:0b:ab:c2:dd:d1:c1:b2:71:18:a3:bd:
f8:71:d5:f7:c7:f4:ec:25:cc:b0:3c:fc:80:01:3e:a0:18:ac:
92:68:c5:f0:b8:9e:c8:17:e1:9a:28:54:f8:1d:57:6c:fc:33:
2d:d5:3e:7d:45:1a:48:dc:b9:2f:3b:96:b2:d2:f7:4c:6e:ef:
33:a5:4a:ec:d4:0c:c6:65:cc:ba:ea:5f:50:80:3f:6a:ea:67:
d7:03:d9:51:a3:5a:64:0b:8e:7e:60:7f:0f:a5:54:3e:e8:12:
c2:03:8a:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:13:09 2025 by rpki-client