Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WOROR7vDkMhU0p6L3I5mUhgiMlU.roa
File: WOROR7vDkMhU0p6L3I5mUhgiMlU.roa (raw, json)
Hash identifier: MGMa5TPji9Qr8JD34uAhfxRgaA9Y7O9kcxLtvni44N0=
Subject key identifier: 58:E4:4E:47:BB:C3:90:C8:54:D2:9E:8B:DC:8E:66:52:18:22:32:55
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977B04BE076CE459BD0DD2077771BFA00B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WOROR7vDkMhU0p6L3I5mUhgiMlU.roa
Signing time: Mon 16 Jun 2025 23:13:17 +0000
ROA not before: Mon 16 Jun 2025 23:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 17 Jun 2025 00:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:04:be:07:6c:e4:59:bd:0d:d2:07:77:71:bf:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 23:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58e44e47bbc390c854d29e8bdc8e665218223255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:69:46:4c:80:2f:7f:2d:05:8d:53:8a:89:
5b:64:2f:ee:45:97:99:cb:7c:32:18:27:b5:ac:a3:
f0:4f:9c:fb:cf:49:2e:25:3b:db:a5:64:41:5b:65:
5c:1f:f3:04:9c:ab:b4:cf:da:c2:ee:24:be:6f:c6:
9e:b1:12:59:f7:72:8d:9e:7a:33:ef:5b:94:c0:ce:
05:df:0b:f4:74:d2:4a:b6:af:37:38:32:2b:36:a0:
fd:a1:6c:38:36:1b:83:05:15:a9:26:38:e3:01:c3:
3f:af:20:0f:d9:00:5a:0a:9c:d9:52:21:a4:de:f1:
3c:f9:72:83:f5:a0:27:01:ac:1b:02:e0:87:13:0d:
b0:49:02:d3:f9:2e:09:8c:05:f5:83:f3:ed:fe:4c:
a9:0a:b3:b4:42:90:a2:d6:c8:43:bd:4d:40:a3:6e:
80:4a:d8:f1:3e:bb:17:85:89:4a:b1:da:14:a3:0f:
58:62:6f:31:23:86:b8:9c:f9:b2:57:34:b2:39:a3:
16:6d:02:44:50:a2:b5:9f:94:f1:c2:77:91:82:c3:
b3:08:ba:a9:c2:c4:15:ed:92:f4:6d:4f:2b:ab:43:
d2:cb:70:06:86:7a:19:1a:8f:0b:7b:cd:58:be:76:
89:2f:8f:01:da:64:6c:e8:f1:16:fa:66:44:29:6d:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:4E:47:BB:C3:90:C8:54:D2:9E:8B:DC:8E:66:52:18:22:32:55
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WOROR7vDkMhU0p6L3I5mUhgiMlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4a:22:42:bc:88:fd:ba:2b:af:f9:f3:10:65:6f:6d:9f:f1:10:
86:27:6f:92:5e:b0:57:06:d9:15:2d:82:68:d9:e0:1f:b1:ba:
7b:28:11:86:c4:aa:cf:11:ae:40:a5:26:92:cb:e5:f0:fd:41:
e3:7e:ab:de:c7:c3:71:d2:ec:9c:e6:7c:aa:a1:b6:34:1f:86:
db:c4:97:55:fb:b7:c6:2d:91:54:ea:28:db:4e:ae:9a:23:16:
99:56:22:d5:c7:49:17:ab:35:5e:9e:41:37:7a:5d:89:b5:42:
33:fa:a8:41:12:8b:31:6c:10:c3:dd:94:ed:37:3e:86:4b:48:
0b:1a:0f:43:8a:af:21:94:a5:85:74:fe:c4:86:9c:41:e4:b7:
cc:34:e9:05:30:3d:7d:d4:85:c7:48:4c:09:58:20:5f:9a:85:
fe:a9:7b:e4:d9:40:b0:34:b0:2a:49:4c:5e:5f:1c:64:0e:8f:
08:7b:5e:fe:a1:00:d1:e4:57:7c:37:34:ca:2a:bd:25:7c:07:
80:44:ea:27:dc:ce:92:db:47:d9:94:32:40:62:b8:3b:39:75:
da:ed:df:f6:b9:7e:ad:a7:0f:5d:b7:d8:f6:8b:1b:4d:02:11:
df:21:45:60:99:23:01:e0:54:f7:c1:17:33:98:6f:9b:4f:bb:
9f:67:5c:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:19:08 2025 by rpki-client