Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VCe0FGTMggL5MAp6rrGeP7DEgHA.roa
File: VCe0FGTMggL5MAp6rrGeP7DEgHA.roa (raw, json)
Hash identifier: In6eKv1uPbalFUCmLMkvJ1+D8DV5Lp/ASXyvyCk5lmc=
Subject key identifier: 54:27:B4:14:64:CC:82:02:F9:30:0A:7A:AE:B1:9E:3F:B0:C4:80:70
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019791C3468BECDA0CC7210DC3E254E5CB53
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VCe0FGTMggL5MAp6rrGeP7DEgHA.roa
Signing time: Sat 21 Jun 2025 09:13:03 +0000
ROA not before: Sat 21 Jun 2025 09:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Jun 2025 10:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:c3:46:8b:ec:da:0c:c7:21:0d:c3:e2:54:e5:cb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 21 09:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5427b41464cc8202f9300a7aaeb19e3fb0c48070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:4f:8e:07:02:c2:78:c0:07:11:b9:90:42:
9a:7b:9b:d9:c8:1b:84:fb:d6:77:7a:0b:0c:e6:3b:
7a:70:04:73:f0:ec:26:89:e4:da:ea:78:1f:0f:cb:
7f:27:0f:b6:c4:01:ed:c9:34:d0:ae:05:64:75:a7:
5e:6d:c9:ae:13:eb:42:8f:28:b3:3d:e3:6f:6a:d1:
2f:ed:38:7e:ae:6d:2a:b8:5b:43:1b:ad:3a:7f:25:
42:91:c7:74:0b:3a:11:da:57:07:7a:5f:ef:bf:54:
9f:7f:31:0c:f3:ff:9a:07:f6:d7:72:a5:5b:0d:a0:
f7:f7:6c:86:89:82:a3:5d:14:39:df:a9:5d:c2:ee:
bd:1d:0f:5d:e6:5c:37:59:f5:0a:3c:23:9a:f3:14:
55:27:9d:58:7b:e8:9c:da:92:3f:23:25:2d:dd:7b:
5f:4a:3e:ed:c9:49:62:f3:f7:df:02:80:5b:dd:6c:
61:25:ab:d2:ae:10:42:5c:d4:58:1d:97:04:83:09:
ac:8f:f7:da:56:02:7c:05:d4:b7:76:8b:72:73:d7:
4d:3a:6a:15:43:39:4b:ce:5a:bc:c2:4f:85:49:a0:
e9:7f:d6:a9:dc:f1:ef:86:1d:41:16:9a:14:2c:79:
45:79:e2:1a:36:b9:c6:1a:66:a7:65:7f:21:64:e8:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:B4:14:64:CC:82:02:F9:30:0A:7A:AE:B1:9E:3F:B0:C4:80:70
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VCe0FGTMggL5MAp6rrGeP7DEgHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
28:74:05:16:62:46:b2:04:ed:e1:a0:f3:1f:17:f3:43:d4:b2:
7e:3d:2d:fb:64:52:cc:f6:89:e1:0a:d8:ee:ed:9c:55:65:ad:
49:f7:b4:0e:bf:3b:eb:bb:3a:e5:ec:16:e7:a4:dc:91:0f:dd:
cf:c8:0c:5e:e6:02:d6:52:cc:6e:0f:35:97:62:ba:9c:96:ec:
7e:b2:28:2d:52:bb:db:12:0c:a9:38:91:0e:58:ca:0d:24:14:
3f:90:27:f3:35:da:55:cf:39:55:5a:e3:79:d2:40:4f:60:4c:
14:fb:dd:6c:a6:94:25:92:0b:59:e4:bc:b9:53:52:8b:70:90:
c6:de:a0:a1:d0:4d:75:af:82:fb:bd:6a:1c:8d:8c:ec:b5:b7:
81:67:b9:17:87:6b:21:8c:81:ce:57:c5:e8:ee:f9:2e:1e:8e:
81:78:22:7c:20:25:10:d2:aa:4d:8e:d1:ef:3f:12:38:9a:07:
90:fd:fa:e8:fd:fb:ad:c1:e9:29:50:3a:69:40:55:d4:e8:3d:
5a:37:4c:0c:fa:c0:a7:9b:0d:95:0c:0a:ef:87:33:84:ed:d9:
da:ba:31:40:97:c9:89:90:2f:9d:a8:44:dd:32:7a:1a:91:91:
2c:ba:99:1a:46:e5:80:c8:cc:8c:54:1e:2b:91:8f:e6:70:54:
b7:cb:31:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:02:44 2025 by rpki-client