Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/cmTPhBoAoEcExZfKBYwmMWEYegU.roa
File: cmTPhBoAoEcExZfKBYwmMWEYegU.roa (raw, json)
Hash identifier: /rrrjn+i+oyNOPU1ieUtEHfJmed4xjK5ctoTFUlXGnk=
Subject key identifier: 72:64:CF:84:1A:00:A0:47:04:C5:97:CA:05:8C:26:31:61:18:7A:05
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B5D14F0686B6AE1E51E7B22312D7A42A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/cmTPhBoAoEcExZfKBYwmMWEYegU.roa
Signing time: Sat 28 Jun 2025 09:14:42 +0000
ROA not before: Sat 28 Jun 2025 09:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 10:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:d1:4f:06:86:b6:ae:1e:51:e7:b2:23:12:d7:a4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 09:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7264cf841a00a04704c597ca058c263161187a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:02:5c:7d:56:6d:73:c4:a9:be:de:ad:41:
87:03:7b:b3:56:b2:40:cf:24:f0:ad:fb:cc:bb:21:
ad:bb:a2:31:62:d7:ad:3a:10:cb:53:90:46:ac:0e:
f0:b4:c1:8b:40:9b:f4:02:52:f5:91:ea:7a:24:3d:
f6:7c:6d:31:29:61:e7:3e:7f:db:d4:3d:45:f8:0c:
69:28:e1:f3:70:13:bd:40:d1:c2:ae:42:7e:40:9c:
90:cd:76:13:0a:00:5b:d9:03:64:4e:d1:0a:90:e4:
e0:8a:d9:0f:7b:82:f7:88:05:b5:ac:4a:bc:3f:8b:
71:96:dd:4f:b3:6f:8c:75:0b:c6:55:1e:dc:9f:44:
27:6a:31:cb:c6:cb:81:61:7c:b6:ad:6f:4c:5b:d3:
41:c2:06:5b:23:da:ef:b7:94:60:34:68:2c:5b:c4:
95:4a:01:2f:a5:d7:1c:fc:68:32:6f:b4:f6:99:7a:
c2:6d:6b:56:cf:f2:ac:62:67:6b:96:4a:08:7b:27:
a3:82:d7:78:10:fd:6f:18:88:4b:b0:5a:0d:54:49:
8b:8c:ae:a8:77:ba:c8:2e:5c:c2:20:d7:38:2c:23:
89:d9:b3:48:0d:fe:30:29:e3:a9:18:c3:05:9a:2c:
3a:28:60:bb:92:87:ae:07:3d:e4:fb:9f:23:68:cc:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:64:CF:84:1A:00:A0:47:04:C5:97:CA:05:8C:26:31:61:18:7A:05
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/cmTPhBoAoEcExZfKBYwmMWEYegU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4a:62:e9:aa:fd:6e:7d:b9:98:04:14:4f:a4:63:76:4b:19:9e:
90:f2:bd:3c:a8:ee:04:92:0d:2e:43:c8:65:6a:94:2b:1f:e2:
8b:73:16:1a:c4:24:61:66:84:64:5d:72:4e:db:db:89:12:c3:
d6:94:38:3c:34:41:14:12:9f:68:4b:7d:33:e2:62:b4:5c:72:
76:36:42:28:60:40:4a:b4:97:44:e2:69:34:ea:17:0b:06:46:
c3:00:17:46:9a:43:b9:f6:c3:11:d0:96:fe:26:32:c0:60:fd:
c7:73:95:d5:b7:f8:1b:0b:07:da:39:85:ba:15:a2:c8:b7:78:
64:13:f0:e3:39:d3:21:51:df:ee:92:86:86:db:57:02:04:a7:
82:95:fa:27:cb:3f:9d:53:b3:2d:1f:97:f5:8e:72:35:31:23:
68:86:34:ad:37:c2:d9:8d:3e:7d:db:b2:5d:54:ea:37:c6:a0:
04:1f:63:bf:18:11:e3:23:01:7f:d2:32:31:95:dc:b1:ed:cd:
74:be:e3:b0:3f:d8:42:1c:ed:a8:04:6e:fe:e8:5d:98:a2:4a:
d8:fa:51:15:2e:0a:ed:30:88:14:ff:0b:44:3d:8f:98:10:96:
b7:b2:1b:7d:4c:66:76:c5:66:6d:0b:8d:fd:11:36:a5:aa:c5:
ec:fc:67:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:19:17 2025 by rpki-client