Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ceVqcIEGeO9naGEwaujDxZYHb5Q.roa
File: ceVqcIEGeO9naGEwaujDxZYHb5Q.roa (raw, json)
Hash identifier: uc0PQ569vfa5P788KVcU8fTkrT/UvrkJvK0dvhPEO1c=
Subject key identifier: 71:E5:6A:70:81:06:78:EF:67:68:61:30:6A:E8:C3:C5:96:07:6F:94
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019792D8AE6480E7792AB406555C8E19D3E8
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ceVqcIEGeO9naGEwaujDxZYHb5Q.roa
Signing time: Sat 21 Jun 2025 14:16:03 +0000
ROA not before: Sat 21 Jun 2025 14:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Jun 2025 15:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:d8:ae:64:80:e7:79:2a:b4:06:55:5c:8e:19:d3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 21 14:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71e56a70810678ef676861306ae8c3c596076f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:06:c0:8b:13:32:fa:45:7c:a2:76:17:a4:
c7:9d:dd:eb:c1:c9:f7:f6:80:63:2b:55:70:4e:47:
61:ec:c8:b1:8e:33:39:2c:cb:d4:bb:a0:22:31:e1:
2b:03:13:98:14:d8:cb:11:c1:16:b4:bf:2a:e9:a6:
65:d1:3c:30:9b:96:4a:ac:eb:e9:4d:1d:16:07:c0:
bf:50:d6:96:27:e8:22:20:81:6b:bc:8b:4b:74:6a:
e8:ce:82:22:cf:cf:f2:37:2e:a6:c5:46:a7:b3:e8:
a3:18:bf:ce:df:70:48:1c:94:b8:09:aa:85:41:b3:
01:0f:b3:98:8e:40:4b:56:a8:03:5e:e5:66:5c:1c:
f6:21:88:71:64:84:b8:bf:d0:ea:1f:10:fe:8c:f9:
50:8b:b6:37:65:ed:95:2a:82:a7:9a:a3:61:5c:c8:
79:b6:e9:6b:a3:df:2a:e9:de:46:cc:ee:05:e2:20:
77:77:4d:bb:28:25:24:1d:4f:f1:47:fb:39:bb:5c:
c9:f9:d6:1f:d0:b3:4e:ef:4f:50:85:13:04:25:00:
22:b2:10:82:e2:26:b4:2c:2f:5d:b4:a3:b6:5b:6e:
48:f6:31:66:6a:81:c7:f4:a5:6c:56:c3:b3:84:94:
b1:8a:d2:35:ed:e6:64:ff:d8:52:27:91:7c:09:08:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:6A:70:81:06:78:EF:67:68:61:30:6A:E8:C3:C5:96:07:6F:94
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ceVqcIEGeO9naGEwaujDxZYHb5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
08:cc:25:62:ae:b1:7b:33:a8:1e:46:01:01:9e:7a:81:13:28:
55:c3:f4:cc:ed:a3:e4:57:6d:fd:13:e4:c5:e7:dc:50:cf:dd:
4c:72:ef:b7:64:81:2e:87:93:c4:4c:cd:77:d0:d4:9c:62:a6:
32:fc:03:f7:89:ae:a6:29:fb:86:d4:9c:b5:64:b4:e0:7c:85:
c9:51:50:2a:67:8b:f7:02:87:44:a0:92:4e:09:85:53:d1:4c:
97:56:38:43:70:15:b8:a8:06:12:4f:99:d7:aa:0f:74:fa:29:
9b:10:4b:c9:5a:09:90:d1:40:37:e5:ac:99:cb:c8:f6:74:8c:
4c:c5:69:09:e8:da:84:e2:4e:fe:a2:ea:32:4f:8e:a6:db:67:
63:06:e8:c6:88:c4:a7:ee:4c:c8:b4:d9:06:d5:13:a1:d3:04:
cf:73:9e:c1:7f:e5:cd:74:d6:2e:06:ed:05:92:8a:a1:01:45:
cc:5a:94:6d:96:60:09:c0:a6:3c:4e:ef:ff:66:30:a1:cf:2d:
f5:7f:e4:09:3c:64:7d:1f:8a:36:89:fd:a8:34:e1:ab:c2:77:
df:97:d5:7d:24:16:b3:76:02:85:b6:23:c7:c2:d7:62:bd:2c:
e6:12:f8:bd:c6:da:2d:0c:35:1b:e6:b8:ce:bf:03:38:9f:ee:
91:d0:c1:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:05:59 2025 by rpki-client