Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Z51jcAREru0llKBvloL7Q5hbZJg.roa
File: Z51jcAREru0llKBvloL7Q5hbZJg.roa (raw, json)
Hash identifier: 3NtPccLBBDLtPPTTw3Ez5lqqnokX5eQ9GNy87f+CQt4=
Subject key identifier: 67:9D:63:70:04:44:AE:ED:25:94:A0:6F:96:82:FB:43:98:5B:64:98
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BD89045A83BBB12E6D2124858E26D805
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Z51jcAREru0llKBvloL7Q5hbZJg.roa
Signing time: Sun 29 Jun 2025 21:12:42 +0000
ROA not before: Sun 29 Jun 2025 21:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 22:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:89:04:5a:83:bb:b1:2e:6d:21:24:85:8e:26:d8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 21:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=679d63700444aeed2594a06f9682fb43985b6498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:41:bf:8d:1a:e7:90:de:c8:9c:f2:a4:15:
36:50:4a:5e:a6:36:6a:8c:24:8c:f8:0e:cf:32:d7:
a9:66:ec:6d:33:7e:b3:a3:17:e0:7f:ec:fb:73:b6:
a5:86:fe:77:bc:db:7b:f8:46:f6:3f:e4:ff:2b:28:
bc:f7:f7:72:bb:be:61:60:9b:c9:19:a3:35:d1:98:
ce:4d:cb:f2:0a:16:4b:9c:86:44:7f:3e:96:bc:56:
6a:9a:96:ed:47:24:c8:bc:16:27:7b:0c:b5:a0:79:
1a:44:d6:a5:9b:b7:67:62:39:fa:b4:62:4f:f4:52:
f5:af:cb:bc:fc:69:40:5d:2a:3e:0e:83:2f:03:79:
a0:0b:6d:9b:7d:a7:61:29:6f:52:13:85:7c:99:a2:
4c:be:ea:b6:9f:1f:48:93:2a:4d:46:ba:57:dd:03:
20:0c:0a:fd:9c:86:3e:9b:a3:4e:c7:3c:de:62:79:
16:f5:37:a0:cf:a8:09:9a:d6:1c:8e:23:a2:21:ff:
88:ea:c8:2d:46:62:d0:e4:4a:be:13:29:c4:33:de:
96:9b:94:fd:83:52:ae:19:80:c3:ad:26:1e:1d:0d:
c5:2c:b0:c7:43:30:d6:5c:97:c0:76:72:01:9a:b1:
1b:fe:5f:2a:30:f8:c6:5b:29:47:38:9e:1f:50:9e:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9D:63:70:04:44:AE:ED:25:94:A0:6F:96:82:FB:43:98:5B:64:98
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Z51jcAREru0llKBvloL7Q5hbZJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5f:99:1c:1f:cf:15:1b:c4:59:c8:d0:0f:b3:cf:28:da:84:ad:
63:d7:6f:36:69:03:39:c7:81:73:1a:a5:4d:18:2a:43:90:66:
fd:75:35:93:d9:cb:79:75:62:11:7d:ff:b0:af:2f:54:88:fc:
bd:31:ae:8b:e6:be:88:f8:79:68:e4:f2:be:0c:a6:af:ee:c7:
7a:6d:fa:19:fd:da:27:f7:eb:83:6e:2c:94:73:7f:fc:88:fe:
46:3d:7a:b9:1b:8d:77:a5:47:f8:86:d2:05:64:ae:7c:79:e9:
3f:7d:bc:73:fe:76:8e:8c:59:f2:e4:5c:38:81:c5:f6:9d:46:
3e:f6:85:4f:e6:66:b8:94:68:a9:e9:2b:73:7b:dc:67:b5:14:
2b:1c:51:35:7c:32:e6:12:ca:0a:4a:cc:96:f5:26:ee:44:bd:
65:fb:c1:96:18:4c:59:45:a9:a2:0d:1b:ba:83:8a:f5:7a:d7:
eb:d7:50:bb:a8:ee:ee:60:fc:3d:12:94:af:08:d9:11:4f:e7:
d8:8e:73:82:2f:22:47:ff:f4:36:ad:41:49:cb:e0:61:3e:b1:
b1:94:6a:bf:4e:ce:1c:bc:43:c2:4e:b0:46:40:39:4c:70:4d:
f1:27:11:12:29:00:89:e4:cf:b8:56:fd:65:fc:61:18:dc:a1:
a0:53:7b:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:29:24 2025 by rpki-client