Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ZM4AOG7ZJnRRP3RjpDr5fGlYYBE.roa
File: ZM4AOG7ZJnRRP3RjpDr5fGlYYBE.roa (raw, json)
Hash identifier: lr4i6n1UVeNX7vjrHGAR1W+xDnnMnZDGub4/OK/otQw=
Subject key identifier: 64:CE:00:38:6E:D9:26:74:51:3F:74:63:A4:3A:F9:7C:69:58:60:11
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019773B9FAFD79AD1CE0462DCF43C6165E18
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ZM4AOG7ZJnRRP3RjpDr5fGlYYBE.roa
Signing time: Sun 15 Jun 2025 13:14:17 +0000
ROA not before: Sun 15 Jun 2025 13:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Jun 2025 14:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:b9:fa:fd:79:ad:1c:e0:46:2d:cf:43:c6:16:5e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 13:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64ce00386ed92674513f7463a43af97c69586011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:5e:1d:63:4c:b8:26:b5:e3:28:f8:3b:91:
17:7f:cc:d5:e7:f8:bb:ae:0b:41:f7:94:22:e0:7a:
db:de:a9:71:5d:c9:38:58:16:38:ab:28:f2:e4:17:
2d:82:be:4c:bf:d0:d2:4b:19:6e:d1:4f:67:21:a5:
c5:42:a4:ce:94:26:56:76:c1:06:6c:dd:f9:e6:9e:
d6:a7:f3:cb:12:2d:e3:cf:a8:f3:03:47:7c:4d:26:
ad:c3:36:4f:67:10:f4:9d:c0:93:66:25:79:1c:ce:
44:f5:88:76:79:7c:88:fe:67:2c:cb:25:c3:d8:67:
7d:79:a8:f9:e3:c5:74:da:d2:89:00:b6:d7:cb:dc:
60:3a:a6:fd:84:cd:d1:68:06:29:34:81:b9:ce:dd:
c0:ca:3f:3e:63:44:40:67:c6:e0:76:31:0b:8e:9d:
3b:3f:d8:02:05:4b:f2:8b:c7:54:96:1e:fe:b6:45:
9e:a5:e9:c2:4e:a3:70:d5:37:90:28:8f:0e:cb:75:
6e:a0:66:8b:5f:b0:97:44:3c:51:56:af:a4:cf:a3:
ce:13:88:70:92:d0:e7:3a:9b:b8:6d:20:de:cc:03:
e3:f2:e3:0d:9f:5e:01:14:b3:8c:f6:5c:b6:ba:a8:
fb:0c:56:86:f4:a8:fb:af:61:cf:2c:88:68:69:2b:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:00:38:6E:D9:26:74:51:3F:74:63:A4:3A:F9:7C:69:58:60:11
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ZM4AOG7ZJnRRP3RjpDr5fGlYYBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
26:f2:d5:da:04:79:42:3e:12:3f:e4:fe:ea:37:2b:df:b2:86:
02:0c:05:c2:18:26:8e:23:ab:d1:0a:07:41:a8:20:f0:01:da:
86:ef:a3:f2:39:cf:93:e4:e1:87:57:96:db:94:41:13:db:f7:
8a:25:b8:1a:2b:af:4c:89:1a:05:f3:c5:e3:49:4e:47:95:8f:
a3:b9:9b:7f:88:c9:66:e7:e5:ca:47:75:aa:5e:e8:9a:9b:4c:
e6:61:cc:18:e6:bd:63:0f:d5:44:5a:be:70:2b:ea:1c:a9:70:
e1:64:f0:08:e4:09:18:b5:6f:4e:d0:3e:0c:b5:08:48:36:ac:
11:21:13:84:f5:b4:36:87:94:fc:c1:57:34:4d:81:23:3b:0e:
a5:c9:eb:f7:12:94:84:8e:32:8c:f0:dd:f1:2a:40:4e:48:c0:
d5:51:77:1c:dc:4c:9c:ae:8c:24:80:3a:28:8b:fd:77:3b:e0:
17:c8:da:13:8d:8b:8a:9c:da:8b:8a:d1:56:ad:a3:90:e0:26:
25:e6:c8:7b:0c:c5:f6:39:94:9b:92:de:3a:49:78:4c:d4:e1:
c9:47:f6:0e:db:18:1c:18:f3:31:9d:09:a4:ca:5b:92:22:97:
91:9c:1f:41:94:5a:3d:a3:63:10:da:0e:36:a8:cc:f4:60:3c:
86:7f:c3:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:07:42 2025 by rpki-client