Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_SWGOknMcZ3KO_QWy3ZsgHDr8xI.roa
File: _SWGOknMcZ3KO_QWy3ZsgHDr8xI.roa (raw, json)
Hash identifier: 7wNegpSHw/XdVTKRREI/JDL9Eh5a5aoTIUavfhICaFk=
Subject key identifier: FD:25:86:3A:49:CC:71:9D:CA:3B:F4:16:CB:76:6C:80:70:EB:F3:12
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C6FA0144A47B38960C445EF48D5B0B7E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_SWGOknMcZ3KO_QWy3ZsgHDr8xI.roa
Signing time: Tue 01 Jul 2025 17:12:42 +0000
ROA not before: Tue 01 Jul 2025 17:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 18:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:fa:01:44:a4:7b:38:96:0c:44:5e:f4:8d:5b:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 17:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd25863a49cc719dca3bf416cb766c8070ebf312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:45:8e:fc:5f:44:87:01:a8:31:6a:dd:9e:
54:5f:72:fa:e0:3e:79:74:50:85:3d:3b:c0:78:79:
0a:46:7f:07:60:7e:48:bf:82:cc:7f:ee:25:d4:d5:
5a:b9:0e:e2:30:63:7a:cb:fe:6a:58:ae:75:e3:66:
c3:50:c9:8b:ba:1f:10:85:45:ba:ae:a5:7f:7c:6e:
ab:b4:64:82:9e:f0:dc:ae:35:0f:cb:2d:ef:cc:e4:
e6:0b:59:5a:1d:b0:96:7f:7e:fa:78:56:aa:60:fe:
af:d1:98:2f:4e:cf:ff:01:05:b6:80:02:f5:89:dc:
7e:fa:d8:95:3f:49:02:9f:00:04:aa:21:e3:41:11:
2c:a8:52:69:5f:28:4b:6e:e2:b0:d8:c5:9d:2d:23:
a8:5c:a7:4a:01:26:03:65:13:08:58:95:1a:f1:86:
b5:c7:96:d5:e2:84:e4:f0:7c:d3:54:da:04:b0:d3:
4d:f5:14:0a:c4:0e:99:4f:fa:83:c9:1d:60:18:05:
86:2e:b7:5c:1e:32:85:c7:11:bc:f6:6e:6e:db:3e:
99:f5:89:cc:14:1b:9a:e8:b5:83:58:8e:c5:46:e9:
a0:c5:51:82:a2:22:4c:b1:13:93:15:2e:9a:9a:10:
36:b6:35:18:aa:7b:dc:d1:bd:43:26:b8:c9:b1:f4:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:86:3A:49:CC:71:9D:CA:3B:F4:16:CB:76:6C:80:70:EB:F3:12
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_SWGOknMcZ3KO_QWy3ZsgHDr8xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
47:66:bc:0a:1e:ae:36:16:14:87:2a:48:91:5d:07:df:a8:f6:
05:2c:61:19:1f:38:f5:dc:cd:82:2a:c7:d7:57:80:74:5a:5f:
5b:ef:c2:e7:9b:11:82:35:e2:34:15:2d:5f:45:d4:ec:05:fe:
f3:72:cc:2f:77:ee:8a:97:e2:57:3b:dc:ca:0d:ef:d8:05:f2:
a2:e6:7f:c2:10:2d:ec:3b:fd:69:73:c1:e6:3a:ea:e7:83:8f:
73:84:bf:e6:63:1f:d9:b6:f7:7e:66:dd:6d:65:ff:da:49:25:
0d:f4:9d:6a:99:f3:89:5b:68:7e:b8:1c:cf:b3:09:f2:e0:0b:
0b:f1:9e:40:3a:0d:03:10:a2:9f:bf:f8:1d:01:df:27:de:a1:
9f:57:b2:1d:21:69:a2:f5:0e:bb:65:53:39:87:c5:5b:58:5d:
50:43:e1:46:af:89:d5:d0:9f:c9:bb:ab:62:ca:cd:98:d7:0e:
65:15:01:46:5f:66:83:59:2f:16:51:25:1c:72:f1:ac:15:c6:
71:dd:04:17:d6:62:52:ae:97:9d:cc:86:a9:10:d4:12:ae:33:
18:0e:6c:8a:e8:01:fc:2b:b2:1f:db:75:0e:a9:9d:0e:91:53:
16:e6:74:11:a5:6a:3e:09:d4:f3:a4:52:43:fe:95:20:e7:1e:
64:98:36:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:38:30 2025 by rpki-client