Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Vkh9gbxA11FlEHe6r8DVC23-m0g.roa
File: Vkh9gbxA11FlEHe6r8DVC23-m0g.roa (raw, json)
Hash identifier: E3FnCSllJxqK61CD5t2TI/2cLt4vkGYqDRlqR66d2+4=
Subject key identifier: 56:48:7D:81:BC:40:D7:51:65:10:77:BA:AF:C0:D5:0B:6D:FE:9B:48
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197888BF632678C114F1FEEE6CB3971C1D6
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Vkh9gbxA11FlEHe6r8DVC23-m0g.roa
Signing time: Thu 19 Jun 2025 14:16:03 +0000
ROA not before: Thu 19 Jun 2025 14:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 15:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:8b:f6:32:67:8c:11:4f:1f:ee:e6:cb:39:71:c1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 14:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56487d81bc40d751651077baafc0d50b6dfe9b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:f7:a8:79:ed:b5:a6:6f:bf:c1:45:5d:3a:
75:95:7f:14:24:1c:c7:c7:b0:12:ac:42:8f:dd:0f:
91:a7:56:05:7e:a5:cb:35:64:06:2e:48:1e:49:f5:
e6:99:f5:f5:df:bf:ab:08:60:ec:bf:7b:48:e6:39:
e0:25:fe:7b:da:ec:ad:74:48:d6:7a:60:f8:41:4d:
63:c9:49:b7:4a:09:1b:55:9b:50:5b:fc:61:99:d4:
b7:f2:86:42:25:38:a7:53:0a:ad:94:22:0f:aa:d6:
1a:b8:7f:9b:a9:76:ae:21:74:08:f7:3c:c0:9f:12:
0f:96:a6:7f:f2:67:c5:3c:c6:b4:5f:3c:d7:22:77:
9e:51:6f:9e:57:bf:94:eb:d1:85:50:31:0c:bd:d3:
74:7b:7d:6a:26:01:ea:e2:18:6c:f8:2d:b1:b6:db:
e9:3d:17:30:81:f2:2a:cb:4f:df:07:15:f0:f1:71:
30:eb:cc:48:11:a7:47:35:2b:f6:ef:00:4e:b9:7e:
df:4d:29:cd:60:30:4d:60:7c:69:45:aa:15:12:92:
b9:89:ed:2a:79:76:18:ed:c6:a3:8d:79:8c:18:99:
d5:5b:83:89:fa:56:ec:3e:59:7e:0e:52:2d:05:36:
76:0a:45:2c:f4:c9:ef:85:48:03:30:b0:44:b3:c0:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:48:7D:81:BC:40:D7:51:65:10:77:BA:AF:C0:D5:0B:6D:FE:9B:48
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Vkh9gbxA11FlEHe6r8DVC23-m0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
6a:8f:38:ed:5a:75:af:be:ad:8e:37:1a:83:c5:47:3a:46:a8:
ed:60:ff:c0:a5:56:3c:47:7e:59:ef:b9:5a:ce:1f:78:2a:71:
42:44:c1:11:1b:56:d0:c7:9b:75:1a:3d:11:c1:d0:e0:e2:87:
f2:8f:c1:80:a7:ca:3b:b6:a1:38:10:3d:d4:ee:42:04:c8:87:
7d:b0:4d:87:1d:8d:37:92:a6:ed:89:9b:d2:12:f3:b6:aa:40:
dc:15:67:a9:e1:35:f0:46:25:5b:ae:a3:3c:a5:40:06:80:79:
f3:b7:a2:e3:7e:42:1e:99:94:8b:19:28:67:03:dc:04:d4:1f:
72:93:34:e7:ad:bc:d0:ca:1b:4b:30:24:75:00:8e:34:20:94:
8a:0a:e4:b7:ae:04:d5:c8:b8:bd:fa:58:8d:65:35:cc:00:2b:
d6:86:9a:e1:da:68:4f:0b:54:53:c9:a0:00:2d:e1:e1:0e:8c:
5e:a1:8f:f0:1d:ea:5d:5f:bc:bf:bd:6a:5a:52:19:50:40:ee:
a7:bc:b9:15:32:5c:76:28:a3:e7:93:ff:78:fc:f6:69:f8:d9:
a8:9a:f3:64:c1:bf:75:8e:48:99:63:63:d1:29:3d:f9:02:37:
be:f1:31:24:fe:18:bb:a3:99:99:d6:11:1c:c3:0a:51:74:2b:
7e:23:27:de
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:14:37 2025 by rpki-client