Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/d2iDKK_dmkbj46qNFK91gSD19GY.roa
File: d2iDKK_dmkbj46qNFK91gSD19GY.roa (raw, json)
Hash identifier: oOP68WPhfKovYJQDiErJRFuJcvL9gI+cq1AxAOpQT4c=
Subject key identifier: 77:68:83:28:AF:DD:9A:46:E3:E3:AA:8D:14:AF:75:81:20:F5:F4:66
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979D5995DDB1510C0C117DC06263522D89
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/d2iDKK_dmkbj46qNFK91gSD19GY.roa
Signing time: Mon 23 Jun 2025 15:13:03 +0000
ROA not before: Mon 23 Jun 2025 15:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 16:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:59:95:dd:b1:51:0c:0c:11:7d:c0:62:63:52:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 15:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77688328afdd9a46e3e3aa8d14af758120f5f466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:09:fa:21:4b:0d:e2:a5:dd:31:e6:35:8e:
e4:de:f8:7f:12:62:e9:ec:12:c2:db:31:19:e5:3b:
28:7f:15:cc:86:e8:f0:6c:82:30:0b:99:1b:43:5d:
66:10:2d:b6:af:7b:13:43:c9:b8:fd:e2:7c:73:96:
22:04:b2:cb:e5:4a:cc:2d:1b:5c:ba:2e:9c:aa:9f:
9f:a3:14:70:d4:63:3b:06:7b:45:55:70:b4:e0:36:
ac:dd:44:6e:df:ca:d9:a8:30:8c:ed:c5:1e:8b:1f:
64:47:a9:db:20:63:2d:7c:1b:b6:2f:34:88:03:6f:
35:6d:4a:1c:fd:6e:24:4d:bc:a0:7b:9a:09:f9:46:
f2:af:40:29:f3:59:f2:dd:c1:23:cb:78:c4:f4:4a:
7f:c4:83:e4:60:03:51:c4:d1:cc:39:79:29:59:10:
fe:09:0a:e6:0a:48:3e:da:1e:a9:3f:63:1a:ee:e6:
d7:09:ec:d4:4d:f3:19:a6:cb:e8:cf:0f:73:d4:c9:
59:ca:f3:91:a6:b0:49:62:62:20:c8:6d:79:ef:7d:
4d:5e:25:54:3c:7d:ad:50:14:2f:58:89:41:c5:20:
86:79:49:25:5b:ac:11:9e:34:6f:e0:c2:67:21:42:
4a:3c:82:13:81:59:cc:3b:f3:dc:4d:a1:dc:a1:91:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:68:83:28:AF:DD:9A:46:E3:E3:AA:8D:14:AF:75:81:20:F5:F4:66
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/d2iDKK_dmkbj46qNFK91gSD19GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
75:0b:00:a8:39:48:dc:63:10:e4:7a:05:83:e2:41:b6:82:6b:
32:de:d1:6f:df:e3:ae:e3:44:0f:6c:11:f8:60:5c:0f:15:fe:
d1:82:15:3e:2f:e7:bf:9e:aa:4e:d5:eb:00:fa:a7:81:ca:dd:
6f:07:5d:0f:51:34:cd:fa:29:a4:02:80:c7:fc:e4:f7:93:af:
46:87:3b:b7:93:6d:56:d7:92:0a:6e:22:0c:d7:ea:bc:0c:f4:
75:aa:93:65:24:4d:f7:3c:98:4e:39:a4:db:ea:af:ef:d6:e7:
ad:2b:82:ba:6c:4c:4f:84:34:2e:f2:58:b2:2d:0d:19:9c:94:
10:be:83:7c:46:32:8e:a6:eb:3c:c0:74:46:e8:21:f9:72:e5:
f3:02:55:56:16:dc:92:13:e3:56:4d:91:0c:b3:19:38:69:3b:
7c:c1:5d:cb:75:cd:e8:72:69:46:d4:ea:ec:55:51:bc:87:bf:
5e:21:e3:5d:94:69:63:c6:5f:1f:35:89:4e:51:05:f8:13:01:
a4:89:ea:b4:57:54:08:4f:78:f3:ed:6b:8b:22:2f:40:74:0b:
e3:36:4d:87:3b:05:2b:21:39:06:63:13:92:9f:d1:32:3e:3d:
a4:7f:ff:c5:3a:69:05:5a:e0:c4:78:b7:19:75:d7:07:6f:d6:
e0:85:ac:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:24:34 2025 by rpki-client