Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W41VqB_HNxzDT5zlQQNUc63HE1A.roa
File: W41VqB_HNxzDT5zlQQNUc63HE1A.roa (raw, json)
Hash identifier: 1CxWSFLtsvCvNeHQc5m17tedTmpF7QlQAngFRXLLssE=
Subject key identifier: 5B:8D:55:A8:1F:C7:37:1C:C3:4F:9C:E5:41:03:54:73:AD:C7:13:50
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019772DB83147CE36CC028DA0745E109A698
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W41VqB_HNxzDT5zlQQNUc63HE1A.roa
Signing time: Sun 15 Jun 2025 09:11:17 +0000
ROA not before: Sun 15 Jun 2025 09:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 10:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:db:83:14:7c:e3:6c:c0:28:da:07:45:e1:09:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 09:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b8d55a81fc7371cc34f9ce541035473adc71350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:c0:bf:48:13:47:f2:e9:67:21:4d:c2:42:
5f:99:5f:0d:c6:21:a7:f3:0c:ba:12:04:fb:34:2d:
a6:c3:09:0c:0e:11:98:b6:dc:83:a2:11:11:9f:e0:
46:b9:10:a0:5b:fb:70:94:bb:f9:db:91:1a:25:c7:
39:cf:56:9e:fa:02:8d:00:fa:d5:ee:d1:86:bb:f7:
7a:3d:0d:82:83:ce:1c:df:ba:2d:b2:fc:60:8a:5f:
eb:29:fc:3c:e1:40:4f:2d:69:ab:20:f2:1a:4d:95:
30:35:54:63:bf:a2:18:cb:f3:00:4d:d5:0d:e0:b6:
50:df:be:30:98:85:5a:92:49:0c:31:be:65:b4:cf:
fb:ca:e3:9f:f8:5c:25:24:03:36:fc:d7:4e:4f:99:
87:ca:4b:30:23:30:c4:21:86:21:5b:2d:ce:a9:b2:
90:4d:56:f7:c5:bb:96:87:dc:8d:b9:76:4e:9e:f5:
3d:a4:16:be:bb:fb:f3:b3:d0:fd:20:66:49:ea:48:
12:ad:8a:64:d6:79:c5:1a:57:c9:13:f8:43:26:08:
1d:eb:d4:28:74:dd:2a:c8:b4:8e:bc:eb:1e:39:07:
7b:ab:71:bc:8d:2a:12:5a:b6:2a:2f:99:32:77:c8:
6b:bf:b3:0f:53:f3:19:63:64:96:52:72:63:80:3a:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:55:A8:1F:C7:37:1C:C3:4F:9C:E5:41:03:54:73:AD:C7:13:50
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/W41VqB_HNxzDT5zlQQNUc63HE1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
42:36:be:c8:ed:85:68:70:69:9e:4f:de:45:f5:6c:e0:75:69:
10:d5:7c:f9:27:02:fc:f6:60:b5:67:ce:8d:fd:d8:51:14:ce:
45:b6:ac:8b:7a:85:3c:47:ca:8c:0f:cc:dc:01:36:94:d9:71:
31:a3:f4:35:96:12:83:96:b8:35:d5:42:8a:7f:03:b3:1a:cb:
28:d8:ff:d0:02:56:b8:df:a4:39:ba:2a:4f:40:48:70:03:a6:
70:77:5f:57:16:2c:89:ae:67:5e:fe:39:d0:86:68:50:8d:83:
60:6b:6b:bc:30:e8:d7:bc:b6:b7:ee:10:c2:8c:bb:d1:9c:7e:
74:d9:e3:cd:e8:a4:28:d8:38:1b:15:f9:22:5f:2f:fe:d4:5b:
a5:f4:67:ae:b7:86:53:0a:e3:34:0f:b9:51:40:91:21:86:e5:
8e:ea:eb:4c:3a:7c:a0:c7:f5:9c:81:98:7c:d0:ab:59:2c:65:
68:8a:11:85:33:bf:cc:f0:b6:e0:f8:df:45:1c:4b:fd:8a:46:
88:37:b2:23:0b:98:09:eb:3d:bb:9e:60:ee:7e:ab:a6:6b:f7:
b9:13:48:5c:38:66:0d:8b:b9:30:53:93:3f:fb:8c:e3:f5:40:
2d:a7:4a:b6:1b:82:c8:52:eb:c7:dc:9d:5c:d5:80:6a:04:0f:
a3:d8:74:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:42:17 2025 by rpki-client