
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dFfhaQ0w6yaqxKtoIGHFZuPxNNk.roa
File: dFfhaQ0w6yaqxKtoIGHFZuPxNNk.roa (raw, json)
Hash identifier: mEuhSLf81CM6rNDN2Xsr6oAMi8u3WZeGnX2DkwDEIKI=
Subject key identifier: 74:57:E1:69:0D:30:EB:26:AA:C4:AB:68:20:61:C5:66:E3:F1:34:D9
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019784A558326D92DE5399316EA314058023
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dFfhaQ0w6yaqxKtoIGHFZuPxNNk.roa
Signing time: Wed 18 Jun 2025 20:05:17 +0000
ROA not before: Wed 18 Jun 2025 20:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:84a4:8ace/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Jun 2025 20:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:a5:58:32:6d:92:de:53:99:31:6e:a3:14:05:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 18 20:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7457e1690d30eb26aac4ab682061c566e3f134d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:c6:40:ee:95:a5:fe:fb:11:7a:94:e6:77:
5a:4e:f6:58:52:a0:c3:08:a9:df:94:8a:5d:37:e3:
2f:d1:f0:50:58:0a:bb:27:d1:ce:ff:2a:b5:81:e4:
cc:e4:08:be:99:a9:b3:04:b0:71:b5:de:ad:26:b8:
c3:cd:91:d6:d1:61:2a:30:47:8e:1f:08:d2:13:1c:
35:df:33:6a:f4:6f:77:c3:7d:38:c1:7d:aa:fc:db:
7b:17:62:c2:84:66:ea:8c:3e:a2:4c:ec:7b:17:b5:
5b:e3:e9:e6:f0:cc:84:2c:82:a0:8c:73:02:a2:0c:
2d:e5:9d:19:4d:9e:94:bb:6c:ec:50:ee:e0:6d:8f:
c8:a2:ca:d0:d2:2b:c4:ec:93:d4:b9:ba:5e:e0:1d:
a4:70:ae:fe:1e:d9:91:64:dc:f8:44:a3:8a:e2:48:
3a:a6:9d:25:ae:7e:fe:1a:dc:42:a7:d3:ea:d3:c4:
1f:08:01:eb:0b:cb:07:24:5b:1d:b5:bb:f6:7d:5e:
7b:91:cc:19:27:ce:51:fe:c8:0e:86:bb:5d:52:6d:
71:f1:68:52:c0:bd:6e:6b:7b:11:ca:93:2b:e6:ca:
94:d1:ef:ce:b5:a2:7f:79:2c:6a:78:8f:3f:94:97:
14:92:df:fd:a2:fb:48:dd:3a:0f:52:0f:1e:d0:10:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:57:E1:69:0D:30:EB:26:AA:C4:AB:68:20:61:C5:66:E3:F1:34:D9
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dFfhaQ0w6yaqxKtoIGHFZuPxNNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:84a4:8ace/128
Signature Algorithm: sha256WithRSAEncryption
04:27:b3:2a:c9:18:c3:b8:5e:2f:1d:fb:39:d8:99:46:5e:60:
7c:74:62:2e:9f:82:5c:82:53:30:96:1f:e3:67:9d:68:db:0d:
07:46:70:f2:57:c2:84:71:c8:31:fa:d6:65:1c:10:2d:54:25:
39:56:a5:0b:59:50:4f:77:96:0a:ce:6d:a4:7a:51:7c:4f:30:
ee:26:45:c2:41:82:d4:87:38:f7:a3:52:0a:27:df:87:ff:b5:
a4:21:99:2f:76:18:3f:d8:ae:08:e2:1c:84:9a:10:1d:1d:85:
54:e5:de:6e:7d:0b:73:e8:8b:c8:ab:c2:8b:83:e8:3b:1c:2c:
d5:41:9d:50:69:7d:47:00:32:c0:0a:6c:9d:c3:1c:5d:16:3d:
d1:92:b9:31:a6:79:b9:00:8c:2c:d0:fc:54:be:69:61:5b:cd:
7e:13:37:36:02:0e:ad:3b:3e:75:53:76:06:21:cf:5a:24:d7:
e6:5e:a7:5d:f1:6a:1d:30:72:07:d4:53:89:76:c0:b4:c8:47:
0e:d5:ee:21:d0:49:4d:fa:90:8b:d9:dd:50:d5:eb:64:3f:20:
80:44:f1:23:c3:0d:2f:b0:ac:27:bd:ea:04:7f:31:2d:25:d2:
64:2b:82:02:57:25:fb:ef:11:6b:71:2b:5a:cb:1b:1b:4f:cd:
e8:c1:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:45:21 2025 by rpki-client