Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/aRh3pgAnBOeT3se-G3JY4xHj9AQ.roa
File: aRh3pgAnBOeT3se-G3JY4xHj9AQ.roa (raw, json)
Hash identifier: imR/xqUGVnA81hEvT8UKOH4FF2W8vl0lTDsxL/242j4=
Subject key identifier: 69:18:77:A6:00:27:04:E7:93:DE:C7:BE:1B:72:58:E3:11:E3:F4:04
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977EE182CB2E10D23EE6FF74CB27C53939
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/aRh3pgAnBOeT3se-G3JY4xHj9AQ.roa
Signing time: Tue 17 Jun 2025 17:13:17 +0000
ROA not before: Tue 17 Jun 2025 17:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:e1:82:cb:2e:10:d2:3e:e6:ff:74:cb:27:c5:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 17 17:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=691877a6002704e793dec7be1b7258e311e3f404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:3a:77:41:4d:37:f0:d7:ed:91:24:a6:74:
59:08:96:95:c7:e6:c5:d9:73:7e:e7:50:63:b5:44:
e1:1e:3e:56:16:34:14:ec:58:22:0c:24:b0:c3:e2:
6a:f3:c2:1b:93:96:5b:56:cb:9a:b3:b1:45:e5:38:
19:2a:c6:d3:5d:c2:91:40:b8:da:d4:00:a5:e0:d2:
0b:76:90:38:8a:3f:ce:f2:ce:88:90:b4:8a:b4:8c:
d6:4c:3f:2b:27:73:9b:cd:56:18:4e:3c:23:7b:54:
68:1d:54:ad:63:a3:be:c0:e9:db:6d:c4:21:e2:83:
80:c7:0a:f3:67:cc:69:0a:20:af:35:ac:fe:73:64:
a8:7e:30:1f:d5:b2:42:38:b8:53:c6:7c:40:26:e1:
7f:8d:f3:94:14:d7:d4:a1:5e:99:3e:0b:97:b2:b3:
13:02:1f:20:e2:c0:3a:fa:fd:df:90:7a:f2:44:a4:
fc:92:65:aa:5d:83:e9:fd:5a:68:b9:f7:0f:7a:cd:
3a:b8:e1:53:f4:83:5c:dd:1e:21:e9:be:26:b9:c2:
6e:29:22:99:f7:4b:46:da:fe:52:51:31:f6:14:1a:
28:21:fc:60:59:2f:46:fc:fc:3c:6c:e7:78:e7:e4:
53:c1:25:98:ec:8a:68:a9:8c:c4:fd:72:6c:c6:b8:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:77:A6:00:27:04:E7:93:DE:C7:BE:1B:72:58:E3:11:E3:F4:04
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/aRh3pgAnBOeT3se-G3JY4xHj9AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
60:5d:74:0b:62:a6:04:60:aa:5e:33:17:5f:30:55:97:b5:4a:
ab:f3:2b:08:9c:dd:28:59:b6:16:f4:7c:89:1e:df:36:64:79:
be:f9:d3:d9:d1:df:c6:9e:29:39:f1:7d:eb:9b:92:c4:73:04:
cb:ca:1e:98:2e:e3:ef:b6:22:8e:2e:71:4c:8f:9f:f6:ac:dc:
e4:56:25:ba:87:51:42:8c:28:2d:f0:3d:ed:1f:a6:dc:14:b8:
92:f7:00:d8:e9:30:a3:fd:6a:12:8d:76:d4:78:d6:47:f3:66:
d6:8d:15:8a:be:3f:e7:39:b8:22:60:2e:1f:c1:1f:7f:45:9c:
48:a4:3c:83:3e:cb:b6:5f:e6:2c:61:cd:91:6c:20:37:28:e7:
0b:11:83:f9:93:e3:6e:34:42:bd:6a:20:49:25:36:cc:7c:0f:
b3:f0:cf:31:33:b9:bf:5e:41:d1:0b:ff:9a:a1:26:90:e7:9e:
dc:60:db:f4:eb:d9:d1:56:d7:7b:09:b5:59:ae:51:d3:7b:96:
31:08:81:d3:6d:de:92:c6:dd:5e:4c:43:54:5b:62:52:ec:94:
1f:c8:12:b9:44:e1:35:ea:c6:c4:49:37:88:45:bd:9f:b4:7f:
a5:b8:85:7a:f9:f5:ae:79:a8:a7:80:4a:b4:de:e0:4e:83:9f:
20:12:51:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:14:36 2025 by rpki-client