Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dRQR4l4RKVl8TZ5d0dre5vUMVX8.roa
File: dRQR4l4RKVl8TZ5d0dre5vUMVX8.roa (raw, json)
Hash identifier: HvY3irov6ikWQWXpYaUmFQzcKdvjVAhvB+NWbawqu9g=
Subject key identifier: 75:14:11:E2:5E:11:29:59:7C:4D:9E:5D:D1:DA:DE:E6:F5:0C:55:7F
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197764A6B1B4F39E6062D8137DBC300910C
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dRQR4l4RKVl8TZ5d0dre5vUMVX8.roa
Signing time: Mon 16 Jun 2025 01:11:17 +0000
ROA not before: Mon 16 Jun 2025 01:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 02:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:4a:6b:1b:4f:39:e6:06:2d:81:37:db:c3:00:91:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 01:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=751411e25e1129597c4d9e5dd1dadee6f50c557f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:cc:f5:c5:d1:a9:a0:4f:70:a4:ec:7d:8b:
0c:85:10:72:b2:33:fa:62:53:25:1b:bf:b6:20:7d:
9f:b9:a8:06:7b:c5:ea:9a:6a:98:33:bf:a3:5a:e6:
e5:41:55:2d:24:8e:41:00:e5:b0:45:3c:53:4d:33:
92:a0:0e:d3:02:d8:68:dc:97:20:e1:91:f2:e2:d1:
1d:61:b5:f6:9a:d4:79:f3:ac:fd:bd:3e:3a:d8:f0:
61:7c:e7:f0:6c:59:ec:bf:aa:6c:e8:8d:bd:50:30:
2a:ce:00:b0:de:47:7d:1b:41:c1:00:f1:ba:c2:e4:
42:35:2c:88:9e:eb:7b:a2:3a:ae:82:36:a5:8f:0e:
8e:40:fe:ca:b2:13:3b:07:a3:5c:40:ce:05:29:f0:
b7:17:d2:1e:f0:d0:5c:4f:a4:94:a2:26:e7:bd:32:
99:02:ba:39:0a:17:ea:d5:58:6c:84:15:1e:5d:7b:
e5:8b:c9:02:58:9e:bc:66:b9:07:24:24:ca:c0:0b:
77:8d:ff:ef:11:e8:23:37:54:a1:89:ec:07:8a:8a:
f7:b0:b8:18:11:d4:38:f1:f4:0e:4c:d1:e8:8b:32:
cc:94:dc:a5:20:ca:a7:b3:d8:fc:66:7a:13:cc:97:
fc:c1:d8:6f:3f:16:cb:70:95:20:49:00:7c:c3:e8:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:14:11:E2:5E:11:29:59:7C:4D:9E:5D:D1:DA:DE:E6:F5:0C:55:7F
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dRQR4l4RKVl8TZ5d0dre5vUMVX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
37:ed:97:6a:ba:58:e1:c3:37:8d:2c:b1:99:a4:90:17:2c:b1:
02:27:62:d2:04:1e:02:fe:78:d6:af:fd:b8:f2:f4:cf:47:9d:
34:6c:9e:02:34:8c:62:59:84:4b:8a:59:e3:55:6f:92:1d:39:
d6:40:7d:a9:06:6d:17:da:c7:a8:94:64:1d:fd:84:8e:b4:45:
ae:cb:f2:a4:b0:08:67:af:5e:4a:28:fa:47:99:ab:5c:aa:a7:
f5:36:cf:39:8c:55:b5:ad:c1:f7:83:a6:25:18:94:81:a4:70:
62:7b:47:5b:c6:6b:8c:d9:81:86:6f:53:5f:e2:77:90:2a:92:
96:a6:a8:b7:8e:10:a8:03:b7:74:81:79:65:d6:eb:64:f2:41:
cb:da:e7:6a:1a:12:48:fa:a6:fe:2d:24:e9:ee:44:d2:2f:ad:
53:b8:f9:69:1b:a7:69:c4:65:9d:10:2d:0a:17:7c:17:7a:25:
d1:4e:f1:69:cc:e3:5d:9b:3e:8e:8f:2d:de:89:cf:c9:35:94:
55:37:d9:4b:23:4b:e6:06:36:a8:4e:ae:4e:27:30:44:2c:35:
c5:4f:79:bd:bc:f1:b2:4b:7d:e9:87:c3:6f:54:b4:4d:ab:b2:
a1:e3:4d:a2:88:ee:b3:5a:23:19:10:6f:ad:32:08:5d:cb:dc:
41:55:86:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:38:29 2025 by rpki-client