Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W3TORbeRKiPhiCWtEGijTkA9VwA.roa
File: W3TORbeRKiPhiCWtEGijTkA9VwA.roa (raw, json)
Hash identifier: Txg57IiPeE/3nyONnqwptxXJn8X4qjm29jExW+NAOb0=
Subject key identifier: 5B:74:CE:45:B7:91:2A:23:E1:88:25:AD:10:68:A3:4E:40:3D:57:00
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B3E116B82EF83D3E4156FBB6C9CC29E5
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W3TORbeRKiPhiCWtEGijTkA9VwA.roa
Signing time: Sat 28 Jun 2025 00:12:42 +0000
ROA not before: Sat 28 Jun 2025 00:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 01:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b3:e1:16:b8:2e:f8:3d:3e:41:56:fb:b6:c9:cc:29:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 00:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b74ce45b7912a23e18825ad1068a34e403d5700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:a1:8a:73:c6:bc:d9:69:ca:63:6b:e9:0a:
ef:ea:6d:0f:77:21:6e:e9:07:ed:6c:6e:91:b5:f4:
93:4d:64:86:3e:40:e4:16:8b:51:9b:0e:d6:95:77:
30:54:f2:28:49:49:9a:a6:90:fd:dd:51:dc:a5:2b:
9f:26:5a:f7:76:e8:a9:0b:49:d5:9a:5d:ed:f9:d0:
37:42:b7:4f:d7:8e:0a:5e:f7:70:9b:53:61:c6:ab:
04:f1:be:51:60:79:de:ae:fb:c1:11:82:34:06:dd:
a3:62:3e:81:0e:37:d1:4d:9d:21:7b:c3:8d:64:09:
9f:1f:25:c3:be:9f:3e:3e:6f:a6:84:0b:27:27:83:
70:68:45:6a:1d:2d:8e:5a:f6:44:74:f2:0e:10:bb:
00:a6:83:39:88:b5:1b:0f:5c:a6:69:31:12:71:e7:
a5:a7:af:37:9d:95:91:06:f7:32:16:ba:a2:0b:5a:
c3:2e:b0:a2:02:48:87:2d:85:95:a3:ca:ed:12:70:
50:3a:cf:3e:34:c4:4d:28:07:9a:6f:8d:60:ae:22:
26:67:33:3a:95:1d:2c:59:bd:86:49:68:2b:d3:22:
f7:a7:18:41:8a:5b:bf:96:2d:08:bf:f5:2a:6f:05:
57:45:6e:ce:7c:63:be:ff:9d:b2:9a:0a:21:2c:e2:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:CE:45:B7:91:2A:23:E1:88:25:AD:10:68:A3:4E:40:3D:57:00
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W3TORbeRKiPhiCWtEGijTkA9VwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
55:ed:c5:31:f3:2f:69:98:dc:04:a7:2e:71:2b:ab:23:6e:fa:
5b:06:b7:3a:0e:65:e2:47:94:47:94:06:4a:55:37:a8:a5:a3:
6e:84:56:f9:e5:86:30:a8:83:a4:53:6e:7d:d8:77:aa:4a:5e:
55:b9:0f:ba:2c:05:0c:58:41:c7:90:ba:62:5d:57:bf:e0:87:
d9:5c:ed:c5:a5:5e:12:c7:83:78:5b:b3:fb:f5:00:90:10:b9:
40:4d:06:e9:d9:f6:e6:ad:b3:90:9d:27:d2:3c:df:bc:a3:84:
14:d7:2d:db:02:74:fc:ff:6b:96:5e:8b:0e:15:64:52:b5:ea:
8e:1b:1f:ad:e4:f8:7c:dd:5a:77:6d:bc:70:23:84:ac:ef:3e:
0a:d7:c1:05:06:cc:3e:bb:11:10:98:7a:69:70:fd:07:f0:c0:
b9:c6:45:c6:f2:3c:3f:77:83:a3:6c:a8:bb:82:f2:7f:61:e1:
bb:3c:39:38:6e:94:e7:17:f0:7d:ca:05:f3:95:2f:46:c6:26:
91:e0:cf:1e:44:dc:08:bd:7f:f9:de:f6:ab:b6:e6:31:de:51:
02:87:1a:f2:a7:bf:21:bb:70:99:38:16:fa:22:4a:a4:3f:cb:
d1:b3:57:ef:08:1d:ee:b3:77:21:09:e4:55:70:eb:65:e9:91:
68:9c:d9:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:36:52 2025 by rpki-client