Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/cHaK_VFJyo9UNJtV_DsRaNcyYSc.roa
File: cHaK_VFJyo9UNJtV_DsRaNcyYSc.roa (raw, json)
Hash identifier: 5IQzbt3XLUv+qwaKh/k6lhwhzNji+KqqxZPOUBMFyXo=
Subject key identifier: 70:76:8A:FD:51:49:CA:8F:54:34:9B:55:FC:3B:11:68:D7:32:61:27
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019799ADFA97E333546B96490B3EDA90A19A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/cHaK_VFJyo9UNJtV_DsRaNcyYSc.roa
Signing time: Sun 22 Jun 2025 22:06:45 +0000
ROA not before: Sun 22 Jun 2025 22:06:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:99ab:87e7/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 22 Jun 2025 22:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:ad:fa:97:e3:33:54:6b:96:49:0b:3e:da:90:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 22 22:06:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70768afd5149ca8f54349b55fc3b1168d7326127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:27:a2:59:8d:db:16:77:c3:cb:d9:e1:0c:
eb:ca:0b:07:e2:f8:a9:21:42:a9:bc:65:b7:9e:6e:
a6:9f:01:de:6f:2d:05:82:6b:e7:d0:4d:92:ea:5f:
0b:83:38:45:d8:9b:5d:01:a0:ae:ab:d5:35:b6:46:
b7:34:3d:28:73:b9:f0:d3:a6:0d:fd:f7:cf:a2:08:
1c:13:ed:88:a0:de:fa:54:90:4f:a8:df:ad:cb:aa:
ee:ce:0d:39:d8:57:dc:1f:e3:2d:4e:74:8b:48:9c:
ba:95:c0:cd:01:61:e8:a6:7e:cd:a2:5b:93:f0:a8:
10:4c:f2:61:50:be:60:f2:5e:1e:ec:a9:7e:b2:f9:
49:40:f9:c4:cc:4c:2d:68:66:dd:40:42:0a:04:2e:
4c:d1:af:9a:e3:2c:7d:89:43:f1:d4:21:b5:ac:50:
9a:60:a5:c8:48:c4:c0:72:18:4b:11:5d:45:ff:8d:
2e:ec:f2:83:ac:06:bf:b2:1b:0f:57:af:75:f9:56:
aa:15:2f:3f:61:46:6e:99:ef:f0:91:cd:75:3d:9f:
d0:b8:f6:a2:e8:c0:ec:be:49:c0:c9:fd:71:d5:66:
e2:da:e2:02:e9:c0:29:69:3c:f8:64:f4:cb:4f:4f:
85:f1:09:40:d8:ad:94:36:1e:ff:d3:4c:68:cb:c3:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:8A:FD:51:49:CA:8F:54:34:9B:55:FC:3B:11:68:D7:32:61:27
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/cHaK_VFJyo9UNJtV_DsRaNcyYSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:99ab:87e7/128
Signature Algorithm: sha256WithRSAEncryption
27:49:2c:19:18:59:11:c9:99:7a:72:bb:23:63:1d:b2:a7:0f:
30:23:90:31:6c:9a:4d:ab:74:31:97:90:8d:b0:0d:77:d7:03:
53:24:0b:cb:1f:96:f3:28:96:01:c2:d5:6c:76:8d:ec:87:02:
06:ee:c2:0f:fd:49:4f:24:84:60:59:27:c4:7d:5a:74:06:ff:
96:49:f2:0d:27:ee:46:b3:cd:10:d4:9b:25:0d:0a:db:28:75:
c9:e1:1d:62:a3:70:c9:cc:93:ba:80:47:7e:c8:7d:23:45:e1:
3b:7a:cd:27:7e:3b:3e:4f:6a:24:1c:66:be:7e:1a:09:6a:a8:
94:3a:b5:c5:29:f6:68:69:c7:c1:a4:6b:51:de:c4:2f:f6:08:
86:21:87:8b:e4:5d:88:c6:ac:19:37:00:f8:ab:ae:71:f7:f0:
c6:c7:e5:d7:a5:96:2c:6d:e8:3c:d4:30:ef:ad:8d:10:d7:2c:
33:35:44:d4:87:84:3b:d2:35:65:2a:03:d6:3f:53:05:fc:17:
38:bd:5a:b9:c2:2b:f9:38:8f:4c:ef:c5:4c:98:24:e8:4f:21:
fd:6c:76:61:8a:a6:a4:6e:48:8b:11:b3:29:7d:06:85:21:10:
85:1b:4f:ce:03:3c:d9:09:2f:2a:31:8b:54:de:f7:08:0f:a9:
6e:2d:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:15:24 2025 by rpki-client