Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/acMjANOz9JGejA_Fc3_EfXKZ3Tk.roa
File: acMjANOz9JGejA_Fc3_EfXKZ3Tk.roa (raw, json)
Hash identifier: hoT3vjYknzNXcOLlyN4Aa+GogFIOTh9FSNmeHknOUkM=
Subject key identifier: 69:C3:23:00:D3:B3:F4:91:9E:8C:0F:C5:73:7F:C4:7D:72:99:DD:39
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C5B4FDC94157C3DA308E184BF510561A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/acMjANOz9JGejA_Fc3_EfXKZ3Tk.roa
Signing time: Tue 01 Jul 2025 11:17:42 +0000
ROA not before: Tue 01 Jul 2025 11:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 12:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:b4:fd:c9:41:57:c3:da:30:8e:18:4b:f5:10:56:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 11:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c32300d3b3f4919e8c0fc5737fc47d7299dd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:fc:1f:87:71:d4:77:0b:bb:a9:78:46:cf:
87:0a:ea:d8:6e:9d:71:b1:2f:8e:5c:31:61:7a:63:
ed:81:0e:34:a7:d0:05:64:00:72:26:b8:83:fd:bf:
46:d3:ab:ff:7f:0e:a6:9d:0d:fd:ec:09:f6:f8:89:
d7:35:7a:47:88:35:e3:2b:48:58:1f:13:1f:58:f6:
53:b2:4a:eb:a0:16:29:f4:4a:ed:d1:2f:96:ef:b5:
a0:e1:58:37:ef:45:e1:ec:44:b3:be:a5:b3:89:9f:
34:a2:81:4c:92:5b:47:b7:6d:22:39:dd:f8:5d:7f:
57:84:e6:ca:b8:77:4c:ce:52:20:dc:56:89:cf:e4:
89:41:ba:f2:f2:ac:93:83:e0:30:1e:ff:3e:43:62:
49:82:f3:14:d9:bb:82:5a:fd:e0:cf:ec:fc:69:27:
67:de:c5:50:71:11:33:14:e6:84:db:ca:e3:ed:59:
b5:0e:14:ef:5e:01:76:c8:ba:d8:b7:25:f6:73:65:
42:ba:41:57:35:01:47:10:04:df:41:c9:be:0d:c8:
e8:c8:d7:6a:eb:f7:a4:71:05:e9:5a:1c:73:ac:4a:
ce:35:09:ed:be:fd:e3:7d:9c:e5:31:c2:d4:40:65:
16:53:55:f4:9f:f9:85:78:21:96:c9:dd:71:a7:7b:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:23:00:D3:B3:F4:91:9E:8C:0F:C5:73:7F:C4:7D:72:99:DD:39
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/acMjANOz9JGejA_Fc3_EfXKZ3Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
10:f6:72:c6:64:80:69:50:7f:24:5d:43:61:2c:ec:6c:e7:c5:
fa:e5:4d:9f:6f:ea:5c:6e:e8:64:34:7c:6b:ec:15:d2:53:74:
a6:07:e3:92:d8:c8:7d:ed:04:0e:8b:b6:1c:f5:05:a0:fc:74:
81:75:93:27:13:15:7a:52:66:89:f6:c5:bd:ef:12:75:33:47:
ad:88:e3:63:90:1f:32:f0:fa:f3:5c:3c:b2:82:ac:cb:3a:cf:
36:a5:98:76:ae:50:d7:08:f5:49:46:9f:05:de:25:41:7d:9a:
14:ef:46:37:4b:25:47:6c:ed:86:c5:85:85:89:78:d6:12:1d:
bd:87:6d:8b:0d:be:49:64:a0:7f:b3:93:4a:69:4d:2c:eb:dd:
cd:ac:eb:5e:a8:64:42:f2:3b:9f:b2:e2:66:9a:86:8d:98:fd:
8a:09:7a:25:2e:8e:d3:d3:33:ad:9f:31:0f:a1:1c:49:1b:59:
cf:90:8e:88:9d:0c:94:6b:03:12:b5:9b:3d:1f:1f:14:fe:b9:
34:49:c6:08:e4:2b:62:e0:5b:24:5d:a9:cd:be:d0:3e:ce:ed:
c8:07:45:ef:a4:c1:78:76:da:9a:90:8b:8c:71:4f:af:a6:16:
1e:58:fc:67:67:b8:9a:63:44:ec:94:1f:e6:b6:78:e3:47:99:
55:50:a3:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:42:51 2025 by rpki-client