Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W3OyZGBHknjECaiNi6yyWFSCwgw.roa
File: W3OyZGBHknjECaiNi6yyWFSCwgw.roa (raw, json)
Hash identifier: KilbracstkVHnsNZINkxLDgJswFMLHUGZG1M+xqjmTw=
Subject key identifier: 5B:73:B2:64:60:47:92:78:C4:09:A8:8D:8B:AC:B2:58:54:82:C2:0C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979E3810A922FBE8847B80DCCB6A5256AF
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W3OyZGBHknjECaiNi6yyWFSCwgw.roa
Signing time: Mon 23 Jun 2025 19:16:03 +0000
ROA not before: Mon 23 Jun 2025 19:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 20:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9e:38:10:a9:22:fb:e8:84:7b:80:dc:cb:6a:52:56:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 19:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b73b26460479278c409a88d8bacb2585482c20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:67:87:80:e0:ef:8b:78:f5:e1:3d:11:81:19:
bd:c9:96:66:e4:ca:71:9b:32:e1:2a:b1:26:d9:21:
91:24:cc:68:11:36:3c:36:13:30:10:f9:c8:20:ad:
37:9a:00:95:f9:b2:ae:9e:a3:35:e7:60:b6:56:9e:
38:f7:af:07:b3:05:4b:45:a0:bb:30:35:b9:bc:f8:
3e:f4:30:e5:fd:6f:2d:c6:b7:15:4d:58:bb:77:21:
88:3f:ac:5e:80:0c:6d:62:ff:cd:2e:6e:73:c5:61:
80:e6:3e:ea:d1:a7:2c:53:f6:95:cf:d2:71:f8:6a:
45:4e:c5:da:36:f1:ea:c5:4a:82:57:e3:95:7f:9c:
3c:d4:1c:9b:84:08:79:82:37:58:3a:76:9b:37:0b:
f1:77:08:7c:4b:ad:f0:7c:07:9e:3e:19:c2:7a:dc:
2d:fb:22:26:08:dc:79:f0:a1:e6:bf:96:a6:ee:22:
86:e1:2b:3e:23:80:21:52:76:9d:8a:e2:79:1f:9b:
b7:a2:9a:bc:18:f9:cb:e7:0c:be:cd:ac:12:7c:72:
24:ce:2c:db:64:17:9b:99:a8:e5:a5:03:20:12:3a:
20:70:8b:cb:9e:0d:fc:a0:4b:80:96:ec:9b:47:c5:
3b:7b:1f:94:d7:d6:ce:a1:aa:69:c4:b2:99:fd:5f:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:B2:64:60:47:92:78:C4:09:A8:8D:8B:AC:B2:58:54:82:C2:0C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W3OyZGBHknjECaiNi6yyWFSCwgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
06:01:d0:db:4f:40:64:f0:8a:e6:be:f0:19:69:5c:77:0b:56:
7d:9d:4f:1d:84:be:32:a6:22:67:b7:87:f6:c9:aa:c9:0b:5d:
c6:35:ec:fd:9b:f2:6b:7e:b0:24:6f:1b:66:ea:26:87:80:75:
0c:76:b5:8d:72:e4:b1:03:69:7d:1f:07:92:b3:c2:be:fa:be:
51:d3:9b:99:24:5a:82:d8:ef:09:0d:24:70:41:16:ed:68:7e:
59:9d:a1:e8:01:7b:fe:91:90:b9:d7:67:e9:3f:51:b9:cd:3f:
18:15:5c:64:15:34:b2:f9:5b:23:d2:2a:51:05:20:04:56:0e:
32:ea:a3:97:ce:5c:fa:53:b0:07:08:78:a4:fa:25:5d:89:2a:
3b:7f:b3:37:74:15:55:8e:d1:5b:86:28:a9:6a:65:b1:e0:b0:
67:17:7a:9b:a0:8a:2c:be:40:e7:23:64:51:08:23:cf:e1:d7:
82:98:28:52:f9:28:15:d7:76:f6:d9:c1:b3:64:f4:7d:3a:52:
20:95:2b:5b:78:6d:54:e6:68:92:b5:6f:b7:4a:04:2c:a2:58:
94:d3:9a:b0:dd:b3:18:da:24:70:3b:90:1a:86:74:0e:da:58:
77:6e:06:bf:ac:5e:92:8e:a2:cc:35:b4:04:2c:9d:23:39:f0:
b9:53:7e:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:55:08 2025 by rpki-client