Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/XlhLiG_0J2K-nFNnwQyXNt9sV4o.roa
File: XlhLiG_0J2K-nFNnwQyXNt9sV4o.roa (raw, json)
Hash identifier: FDG8El8OKCA6afQKKAQOjkNUupTRgMuQy1X6kvVjV5s=
Subject key identifier: 5E:58:4B:88:6F:F4:27:62:BE:9C:53:67:C1:0C:97:36:DF:6C:57:8A
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C01C329D6F84258BFE0642E8D7756966
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/XlhLiG_0J2K-nFNnwQyXNt9sV4o.roa
Signing time: Mon 30 Jun 2025 09:12:42 +0000
ROA not before: Mon 30 Jun 2025 09:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 30 Jun 2025 10:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:1c:32:9d:6f:84:25:8b:fe:06:42:e8:d7:75:69:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 30 09:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e584b886ff42762be9c5367c10c9736df6c578a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:40:50:78:ea:8d:b5:ac:76:d8:23:7f:83:
20:86:78:9c:bd:4f:59:6b:53:64:9b:e9:8c:c1:55:
f9:75:0f:19:95:6e:24:29:cf:4d:fb:21:af:81:42:
7b:88:42:b1:3f:fd:de:59:16:35:8f:1e:17:d2:cd:
25:dc:8b:dc:c9:ef:10:af:7d:a8:8d:43:0d:05:79:
05:4f:c0:c7:6e:6b:55:57:b1:ee:fb:6f:7c:0d:cc:
10:2e:de:17:29:ef:6f:f5:c6:f3:ba:ba:bd:9b:6a:
b4:6e:90:fb:a6:26:96:eb:d3:2d:aa:4b:af:72:7b:
1d:01:2c:b5:7d:7f:2d:a4:e3:d0:fe:5f:6b:ed:f3:
b0:8f:5d:11:00:97:51:2d:87:4d:4a:f3:7f:d6:b7:
f0:33:72:e8:83:48:7b:0d:be:c0:a5:21:ba:14:b9:
8d:b2:d0:a5:6c:bd:dc:d8:22:40:82:42:98:cc:3a:
1b:8f:c6:f0:7e:88:da:c1:16:00:3b:d6:c5:aa:fd:
b8:1c:76:38:24:bc:f6:1f:95:99:11:45:dc:27:cc:
76:00:1c:1a:1c:be:4e:bb:d4:73:f2:de:8d:4d:3d:
66:89:a5:5a:d8:5d:b7:72:e9:fb:2e:ef:30:92:c6:
47:20:12:a1:5d:36:2e:2b:d6:6b:f4:7e:1a:51:97:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:4B:88:6F:F4:27:62:BE:9C:53:67:C1:0C:97:36:DF:6C:57:8A
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/XlhLiG_0J2K-nFNnwQyXNt9sV4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
39:10:44:a4:86:3d:a1:65:e0:37:86:92:9e:14:bf:e3:b4:9a:
59:3d:99:8c:ee:3f:df:6b:c7:c8:e7:22:04:bd:aa:cd:1b:3a:
0d:94:92:1e:1c:7d:86:aa:3c:dd:f2:cc:2d:66:7a:64:18:a7:
ad:2a:f4:6e:83:0d:34:92:03:90:8f:50:32:7a:5d:38:44:3f:
83:f8:2a:48:a3:a1:ee:23:35:88:8b:01:75:a7:5b:f6:e7:4f:
6a:4c:1a:5a:48:82:37:35:2d:53:50:7f:0c:a3:64:cc:e9:96:
c7:7f:af:df:4c:d3:53:94:e2:2c:6a:b9:ad:1e:38:cb:d8:0a:
23:1a:6d:48:95:34:16:45:aa:21:68:b7:68:ca:8c:87:88:49:
59:f5:58:c6:f6:99:e8:8a:4e:7d:64:b4:9f:c0:99:a2:00:14:
40:55:9e:e2:79:3b:7c:61:d8:21:f5:f3:dd:5e:26:95:f2:c4:
aa:cc:55:ae:0b:d9:96:a5:32:73:35:21:69:ac:58:7d:02:b0:
ca:0a:04:70:df:cd:65:b7:1a:00:1c:48:0f:ce:3e:04:2a:50:
c6:5f:64:5f:08:10:29:70:8a:d5:09:6b:4e:7d:19:85:73:c4:
44:df:0e:a4:aa:61:30:de:09:23:8a:c9:9a:a6:21:5b:a5:c3:
ac:00:2d:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:06:49 2025 by rpki-client