Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WR6Eju4lqbeH49XMQRUmQawJtmQ.roa
File: WR6Eju4lqbeH49XMQRUmQawJtmQ.roa (raw, json)
Hash identifier: 7Rh07fuEgmK4C0W4pdQWqv5lraeg0A1l94PKCe60Bhc=
Subject key identifier: 59:1E:84:8E:EE:25:A9:B7:87:E3:D5:CC:41:15:26:41:AC:09:B6:64
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979DC947548740F1D0DEACD58AD633A444
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WR6Eju4lqbeH49XMQRUmQawJtmQ.roa
Signing time: Mon 23 Jun 2025 17:15:03 +0000
ROA not before: Mon 23 Jun 2025 17:15:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 18:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:c9:47:54:87:40:f1:d0:de:ac:d5:8a:d6:33:a4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 17:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=591e848eee25a9b787e3d5cc41152641ac09b664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:e1:c8:85:fb:85:12:af:3f:52:31:ef:4a:
97:61:9c:e1:bc:1c:b0:16:32:09:25:c5:58:a0:51:
b7:e4:c6:53:90:76:40:bb:d2:11:1b:7c:f0:6e:6f:
a7:6b:cc:19:4f:4e:c3:69:4d:71:3a:ea:3f:36:1d:
5f:3e:90:2f:ee:21:e8:7d:04:ce:1f:ea:80:7a:46:
a6:3b:5c:cf:76:90:d3:50:9e:7a:fd:9f:c3:77:49:
be:6c:b0:5b:62:cd:9c:38:c0:fe:e0:ba:95:13:8a:
d7:4c:2e:51:2d:f3:98:ca:94:6f:b3:f6:ec:87:8e:
5a:3d:3e:49:cd:eb:6d:58:8f:10:76:49:df:a2:56:
c5:c0:cb:1d:32:8c:76:46:ec:69:97:93:de:3c:fe:
60:21:d2:2c:88:12:48:71:27:4c:33:c6:80:05:6c:
75:2f:46:33:e8:bd:35:2a:f9:69:58:f5:27:6e:73:
da:d3:68:c7:cf:61:4d:6b:9c:2e:41:fe:94:61:f5:
80:96:e8:b2:e0:0d:38:2d:15:67:46:a2:03:d7:43:
20:99:58:85:32:9a:f8:8f:b4:36:f4:b9:26:ef:61:
97:94:6b:cb:46:3b:69:e6:fc:e0:58:13:88:22:2a:
6c:82:b5:ea:ce:d7:05:26:07:59:98:8f:82:e6:97:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1E:84:8E:EE:25:A9:B7:87:E3:D5:CC:41:15:26:41:AC:09:B6:64
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/WR6Eju4lqbeH49XMQRUmQawJtmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
1f:c0:39:e3:5e:87:cc:bc:e9:64:90:de:13:48:a7:26:61:db:
fe:97:34:1e:59:79:8d:3b:10:cb:d3:e0:b8:0e:65:e4:ec:58:
bc:33:ee:69:c2:8b:d0:f1:7a:33:21:3f:fd:43:da:76:56:3f:
25:b8:e6:ed:db:e6:e1:dd:e6:54:02:5e:d5:72:94:75:7b:4c:
6f:5c:b5:f8:61:ac:47:78:26:cb:d6:8b:86:bc:80:98:be:25:
4f:02:c1:bd:d1:54:e4:77:8a:7b:84:ed:27:11:0d:bf:e5:67:
5d:fa:e8:70:8c:4c:89:5f:c3:2f:e6:02:37:0f:8d:f6:7a:a7:
c1:87:89:db:93:8d:22:d8:d7:fa:b2:82:53:a1:6c:fb:4f:0f:
54:07:9f:6b:9a:fa:15:4b:5d:3f:cc:e9:17:97:ef:ad:00:51:
11:85:35:d5:fa:5f:74:78:2b:5c:92:63:51:cb:6d:90:1d:c9:
bd:da:ef:11:18:01:96:39:d9:2b:b0:4f:1b:7b:8d:df:85:bb:
c5:52:df:f7:7d:0a:59:19:43:18:c9:6d:67:9b:70:e2:0e:ca:
f6:7e:9b:82:ed:f5:a0:ed:f2:eb:58:66:a9:49:22:23:4d:bd:
e2:3f:33:1e:c5:2c:fe:77:3f:7b:46:bb:fa:2d:eb:b9:d2:4e:
60:83:d6:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:37:47 2025 by rpki-client