Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VUUo4MM_fzLk66KpyQ33R3dQ5BI.roa
File: VUUo4MM_fzLk66KpyQ33R3dQ5BI.roa (raw, json)
Hash identifier: ib5Cv4O4lEDTwLHBU2SrQVsc41wvyhqfHSd7ZqZG3bo=
Subject key identifier: 55:45:28:E0:C3:3F:7F:32:E4:EB:A2:A9:C9:0D:F7:47:77:50:E4:12
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B863936E04BF9E7277A38BC995E552B1
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VUUo4MM_fzLk66KpyQ33R3dQ5BI.roa
Signing time: Sat 28 Jun 2025 21:13:42 +0000
ROA not before: Sat 28 Jun 2025 21:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 22:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:63:93:6e:04:bf:9e:72:77:a3:8b:c9:95:e5:52:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 21:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=554528e0c33f7f32e4eba2a9c90df7477750e412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:6e:6a:21:c7:78:ed:9b:74:e1:b3:d6:1d:
98:24:ad:59:cf:e9:ec:6f:f8:bc:a9:3d:0e:2c:93:
a1:39:26:cc:47:11:1e:43:d1:d0:94:ae:df:a4:c1:
90:5a:c1:73:af:81:0b:da:a3:18:15:3b:a1:70:10:
c1:6d:80:c0:87:f4:96:86:c0:e4:fd:a5:05:02:23:
11:f1:6e:dd:85:37:e4:0b:3f:8e:1b:8d:0b:8b:3e:
2c:b4:e5:41:0c:b0:34:2f:6a:ed:00:25:fb:26:15:
a6:93:e4:19:19:94:63:47:33:a4:b9:12:8b:4a:8f:
5e:12:d1:8a:15:3b:84:db:e6:14:40:1b:76:51:47:
54:42:94:80:61:5f:d1:fb:71:03:a5:34:91:fe:24:
8b:c4:c2:b6:d6:6c:ad:a2:69:74:50:11:c6:cc:dd:
52:81:d2:9d:65:a9:38:79:16:3f:bf:1f:3c:e2:96:
9f:69:36:de:93:09:f0:f9:f5:96:db:40:7f:cc:84:
c8:1d:f1:13:db:94:48:f4:0b:ad:03:95:93:bd:a7:
b0:14:56:20:54:0c:39:2b:60:ec:8f:95:a3:01:df:
1e:51:50:af:77:a7:1f:4e:fc:76:b4:bc:2b:56:f7:
d2:1d:b2:1c:c8:91:f1:92:c5:aa:2d:8e:5f:eb:c1:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:28:E0:C3:3F:7F:32:E4:EB:A2:A9:C9:0D:F7:47:77:50:E4:12
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VUUo4MM_fzLk66KpyQ33R3dQ5BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
2f:16:85:be:21:5e:ae:5d:5d:b0:8a:8b:2f:cc:8b:d6:7d:fe:
cf:0a:bb:65:76:8d:e9:ef:88:96:8a:fe:51:eb:62:bf:28:f1:
b4:89:7a:cf:f5:69:e7:6a:92:e6:d5:81:d4:33:3d:f1:9c:e2:
bf:b5:6e:3b:a4:96:9c:bd:a8:29:5b:7c:5a:f1:c8:5a:d5:65:
e7:fb:f4:fc:15:79:2c:f6:47:e0:99:df:31:b9:49:bd:ce:dd:
96:c0:36:53:49:0e:de:47:6f:26:3a:17:73:61:64:d4:c4:f7:
49:c4:d4:60:ea:84:f6:d7:f2:67:ec:4a:a6:2e:f1:9f:c1:00:
a8:c1:91:57:42:2e:6a:49:3a:fd:1a:6e:7c:a9:0d:74:34:1d:
5b:5e:b2:d9:a7:ab:c6:c6:d6:0f:82:64:47:96:c0:6f:80:0a:
3d:d0:7d:74:1f:75:8d:62:e7:12:c2:ea:2a:10:d6:ff:70:19:
f5:5e:4c:e1:09:55:cf:7d:d3:37:08:0a:03:ae:48:e0:d9:9a:
0b:55:18:66:0c:99:b3:71:f3:b7:48:f9:f5:f9:35:20:93:00:
32:9b:e2:de:15:2d:92:aa:38:c6:45:a1:94:ea:be:f9:68:a0:
3d:11:56:cd:6a:1a:ea:7f:cf:42:80:82:2a:97:30:71:33:53:
f8:11:60:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:01:11 2025 by rpki-client