Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/c60Gc-S3moGFQLW3_httVU831gA.roa
File: c60Gc-S3moGFQLW3_httVU831gA.roa (raw, json)
Hash identifier: rBVCrfEW6/JogpNqvMGeOa2cyv3Bi4466NsjVgUb3lY=
Subject key identifier: 73:AD:06:73:E4:B7:9A:81:85:40:B5:B7:FE:1B:6D:55:4F:37:D6:00
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AAAAB0BE07B8DD0A5C0E5AC940153558
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/c60Gc-S3moGFQLW3_httVU831gA.roa
Signing time: Thu 26 Jun 2025 05:16:42 +0000
ROA not before: Thu 26 Jun 2025 05:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 06:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:aa:aa:b0:be:07:b8:dd:0a:5c:0e:5a:c9:40:15:35:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 05:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73ad0673e4b79a818540b5b7fe1b6d554f37d600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:db:0e:c1:b9:11:ed:6a:c4:ac:8a:39:d9:
e6:3b:a2:84:06:13:ca:2b:85:91:ce:a5:ce:03:f9:
52:fe:a8:e9:f2:2b:a1:92:08:ef:d5:9b:48:61:e3:
21:4b:bd:73:d4:29:34:46:e3:83:3f:68:c1:a3:4a:
8b:3c:ce:7c:61:fe:59:0b:fb:6f:e3:49:02:ed:df:
29:70:3d:97:0c:d7:57:53:cb:00:6d:52:96:da:3f:
99:ec:d8:e5:07:f7:94:32:b5:59:d4:b5:93:e6:0b:
7b:e6:cb:f1:73:aa:85:10:a2:cd:9d:9e:73:01:14:
71:cf:69:1f:c3:48:2a:99:ba:6c:9e:ff:75:64:2b:
56:2e:3a:50:b1:42:d1:cd:ec:04:80:d8:7f:d7:d9:
82:2c:cf:b3:4d:e2:7f:42:28:cb:1c:8a:e7:bb:7a:
c9:5a:fe:9e:d3:40:59:3d:fd:c7:6e:2d:36:cc:b2:
76:78:cd:9f:67:e5:db:63:78:7b:94:06:a6:42:c0:
86:3e:6d:01:64:bd:4d:f0:b0:d8:89:c4:9f:b2:9c:
51:ce:1c:47:96:67:40:f1:46:b6:b5:65:5d:33:80:
4d:cc:9a:39:76:a2:b8:dc:3a:d1:c5:6e:bf:97:2e:
fd:38:1e:03:c9:3e:33:c5:e5:cf:bf:e1:b5:24:db:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:06:73:E4:B7:9A:81:85:40:B5:B7:FE:1B:6D:55:4F:37:D6:00
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/c60Gc-S3moGFQLW3_httVU831gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
68:90:03:e3:8e:2a:59:a8:3b:e2:18:13:ac:c2:fc:50:c7:2d:
eb:88:da:54:6f:3f:fb:0b:56:a6:28:f4:b1:87:58:1a:22:93:
26:16:45:67:50:11:5b:e7:56:5b:c4:6a:a2:83:f1:06:3e:32:
91:a5:b6:e1:22:30:41:0b:ad:20:f2:1e:35:19:3d:73:df:50:
5b:0f:24:4a:01:7f:9e:eb:f3:d7:c5:4a:7c:dc:82:18:f7:b3:
e3:ed:81:09:1d:5e:6d:28:f4:06:15:23:cf:d4:6e:1a:fd:0e:
ce:ea:00:56:f2:30:82:76:b4:9d:02:d8:db:cf:a2:96:e3:e0:
41:14:79:ba:91:e1:e0:07:83:b9:83:9b:50:b7:ac:ab:5e:28:
6b:d3:d3:b4:0e:0a:65:2f:0a:06:b9:a5:11:e9:d8:8b:41:fa:
ee:ff:e3:f5:d6:0e:fe:b3:88:34:99:d4:7f:cf:59:0e:6e:f6:
70:6b:75:a6:c4:48:2f:4e:af:4e:60:74:8b:4c:c3:19:68:b9:
d0:25:18:f8:fe:4b:47:79:28:72:ac:a2:0f:52:92:4b:87:99:
fa:2b:e5:d1:fb:67:71:ae:1b:73:a2:8a:3c:99:09:be:ce:f2:
58:2f:01:82:f7:35:35:eb:ec:81:f9:46:fa:9b:e2:eb:09:16:
72:e2:a8:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 14:59:38 2025 by rpki-client