Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VlvrAZLl_eWQ3uGAy6qT-sA12h4.roa
File: VlvrAZLl_eWQ3uGAy6qT-sA12h4.roa (raw, json)
Hash identifier: h/qZW6c9E1bD89q3e7v2lGSw0EuHpf9XctW82Txk4Pg=
Subject key identifier: 56:5B:EB:01:92:E5:FD:E5:90:DE:E1:80:CB:AA:93:FA:C0:35:DA:1E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C20D536673428C2E6D6766727E5CBDB8
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VlvrAZLl_eWQ3uGAy6qT-sA12h4.roa
Signing time: Mon 30 Jun 2025 18:15:42 +0000
ROA not before: Mon 30 Jun 2025 18:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 30 Jun 2025 19:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:0d:53:66:73:42:8c:2e:6d:67:66:72:7e:5c:bd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 30 18:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=565beb0192e5fde590dee180cbaa93fac035da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:a5:42:fe:6a:2a:b6:d4:b5:92:4a:6c:1d:
d8:ec:8d:a2:60:b5:a7:bf:31:ce:a5:70:fd:a3:af:
12:13:48:9c:24:43:39:1d:98:96:95:c8:04:b5:d4:
de:ff:a0:d0:f0:d4:0b:bf:05:60:bb:0b:63:ee:b1:
57:c8:30:3f:4d:ec:53:b0:64:a8:c6:52:77:c2:0f:
a6:98:56:68:84:ea:d2:09:c9:0d:f9:83:49:60:33:
e5:c9:2a:e3:cf:06:8f:3b:c8:75:6e:c3:da:96:78:
f9:84:e2:45:93:61:f3:dc:ac:dc:5f:b8:d2:46:82:
c0:b4:fb:92:4a:59:ed:10:05:33:74:5d:80:bb:04:
06:51:46:c1:1d:df:c4:8a:d2:8e:2c:e6:f2:c1:49:
73:54:ed:48:25:c5:d0:58:1c:1b:f2:e8:ce:a7:c6:
53:ca:5b:85:eb:cf:dd:09:e3:cb:86:a6:8a:98:fe:
4f:fe:37:00:e8:c1:15:80:96:6a:13:c9:99:af:4a:
5e:89:de:29:5b:52:13:76:ef:14:1e:8c:3c:54:79:
dc:b6:1d:96:5c:33:7e:ea:3c:87:cd:d7:73:ff:80:
7b:6c:af:a7:04:c8:4c:f0:9f:ef:df:fe:4f:9d:87:
73:41:68:7d:16:5f:70:44:0c:0a:a0:f7:51:b9:3f:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:EB:01:92:E5:FD:E5:90:DE:E1:80:CB:AA:93:FA:C0:35:DA:1E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/VlvrAZLl_eWQ3uGAy6qT-sA12h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3a:5c:2f:5e:f8:05:e0:5b:92:d1:06:51:02:f8:96:75:29:23:
29:98:11:4c:35:bc:dc:82:ea:5c:8f:34:cf:a9:13:19:3d:4f:
37:72:1e:78:e4:df:6a:89:2d:8a:3e:78:8c:58:3f:35:64:1e:
28:5b:14:3f:24:2e:81:c2:05:c9:e3:43:aa:f0:67:25:d4:84:
44:43:f9:83:7d:d3:51:29:3c:88:24:0a:9e:9f:4c:50:65:e7:
25:5b:bb:de:b1:e4:2f:7f:9f:a3:80:0d:21:ee:b2:ff:4b:b7:
8e:8e:cd:e7:9d:ac:91:a6:f1:49:ef:73:54:61:97:d8:dc:b4:
dd:79:d5:bf:43:10:be:bd:20:b0:04:93:dd:72:a1:45:f2:cf:
ca:f7:86:e2:1e:95:f3:38:e8:36:f4:07:5a:a5:86:45:75:f0:
a9:70:d3:d3:60:12:3a:cd:e1:89:9b:ba:b9:86:f9:3d:12:95:
b5:3e:46:48:f9:04:f6:d8:8d:b2:b2:6b:6a:5f:6f:78:af:eb:
59:bc:ed:74:bf:91:05:5e:45:54:b6:71:4a:10:c0:c3:53:40:
6e:85:30:ec:1a:2e:b3:cf:71:0f:f4:60:3f:d5:08:1c:88:61:
81:03:36:97:a1:62:51:08:53:2b:f8:93:77:87:c1:85:23:13:
f3:b1:8e:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:53:01 2025 by rpki-client