Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/UJMZ885io2m11krWPJ7Y1XGFNbE.roa
File: UJMZ885io2m11krWPJ7Y1XGFNbE.roa (raw, json)
Hash identifier: ztqXBDG1jOsw1m4EHFGFkT9BR2HeBXd914ZYCaWcXFE=
Subject key identifier: 50:93:19:F3:CE:62:A3:69:B5:D6:4A:D6:3C:9E:D8:D5:71:85:35:B1
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019771C9C4044B0B607403E4F153AD590F15
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/UJMZ885io2m11krWPJ7Y1XGFNbE.roa
Signing time: Sun 15 Jun 2025 04:12:17 +0000
ROA not before: Sun 15 Jun 2025 04:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 05:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:c9:c4:04:4b:0b:60:74:03:e4:f1:53:ad:59:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 04:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=509319f3ce62a369b5d64ad63c9ed8d5718535b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c1:59:65:4f:c8:f6:17:8c:8f:2c:db:e5:cd:
c3:41:e8:bf:10:5f:da:08:12:1e:14:e4:9f:71:31:
9d:3d:c6:47:bc:8b:01:4c:20:d1:33:39:d8:f3:a3:
f5:ba:be:3e:bf:10:2c:eb:38:3a:08:e9:8b:c1:7c:
34:81:59:e7:27:81:2d:4f:3d:f0:6b:30:5f:46:25:
a9:4c:2e:1a:39:5b:49:c7:04:ed:ec:36:98:bf:0f:
1b:73:0e:27:72:4d:3f:87:57:4a:e0:e7:3d:b0:d6:
a7:3d:2b:8e:d0:59:f9:86:6a:62:a9:6c:cd:a4:42:
53:8a:73:49:9e:19:b1:50:07:3f:bc:c7:bc:d6:e8:
95:44:69:cc:7e:57:0f:ab:0f:17:16:b1:12:bb:90:
81:08:d5:12:35:9a:3c:f3:7b:f2:ad:e6:34:06:82:
7a:39:b6:3d:a5:78:0f:45:c2:cd:2c:6a:99:de:8c:
b7:e9:67:fb:1f:39:5c:24:42:dd:ee:42:bb:57:bc:
4d:42:2b:64:31:a8:70:18:ea:91:96:1d:ef:17:0a:
e7:20:bd:47:86:53:77:21:15:54:f8:4e:f4:4c:56:
fa:59:ae:d9:2f:45:85:34:8f:0e:78:25:81:c7:bd:
68:76:22:20:a5:5e:5e:55:62:5a:a1:b0:d6:1d:01:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:93:19:F3:CE:62:A3:69:B5:D6:4A:D6:3C:9E:D8:D5:71:85:35:B1
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/UJMZ885io2m11krWPJ7Y1XGFNbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5e:eb:53:e2:00:b8:f7:d2:c1:b0:ab:e3:7e:dd:c7:67:0e:7a:
73:51:fd:ab:3d:33:5b:7a:23:30:2d:88:10:22:29:ca:e0:29:
4b:ee:37:b7:12:d5:da:51:6d:3f:64:62:51:1c:73:1f:eb:1a:
80:ac:9a:1a:f7:8d:3e:f9:1e:ea:96:a0:7b:07:1e:58:60:a4:
90:78:67:b0:0a:af:0d:fe:7e:39:01:5a:38:95:12:2e:5e:62:
ff:37:6a:9a:67:28:08:11:96:c2:03:69:85:fb:49:88:70:d7:
73:24:a8:8a:e0:95:73:95:e2:f9:48:bd:32:b6:9b:70:21:3f:
49:d3:7f:03:74:4e:8d:28:60:f2:48:a2:0d:2c:79:61:3c:e8:
61:e5:ea:b2:60:9c:dd:52:61:db:0b:cf:2d:57:8b:a5:9f:6c:
17:1d:af:34:a6:09:ff:b3:bf:e3:dc:7d:f5:8f:fd:74:3e:3f:
7e:cb:c8:bb:df:91:30:03:d0:4b:a7:e5:a4:b9:1b:d7:98:f6:
dc:59:87:9e:ea:8f:f9:fd:5f:dc:bd:ea:5d:0f:cd:b3:db:02:
96:04:21:7f:4c:9e:7b:44:de:ee:d1:2e:c3:d5:aa:1d:4b:cd:
1c:69:a3:d6:93:e4:ea:cd:44:be:31:08:bb:e4:00:10:ef:d1:
bd:fd:f4:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:00:25 2025 by rpki-client