Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dV6aUkIW1ya9RR5PxJISitWpuBs.roa
File: dV6aUkIW1ya9RR5PxJISitWpuBs.roa (raw, json)
Hash identifier: Cdm5mRpNKB6bI+Mzw5j3HJlAFuVIUHYdSEPj2hAcL7A=
Subject key identifier: 75:5E:9A:52:42:16:D7:26:BD:45:1E:4F:C4:92:12:8A:D5:A9:B8:1B
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BF424D0CE9E8508E81D9BE26F14D18EF
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dV6aUkIW1ya9RR5PxJISitWpuBs.roa
Signing time: Mon 30 Jun 2025 05:14:42 +0000
ROA not before: Mon 30 Jun 2025 05:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 30 Jun 2025 06:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:42:4d:0c:e9:e8:50:8e:81:d9:be:26:f1:4d:18:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 30 05:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=755e9a524216d726bd451e4fc492128ad5a9b81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:bd:b7:2f:11:ce:3f:ae:58:6c:d1:0f:74:
61:6a:b0:78:95:cd:9f:dd:44:65:57:de:40:f8:c3:
e7:78:02:d8:99:2a:2e:7c:33:20:17:37:06:b6:5d:
5f:20:38:33:4f:22:13:8c:85:66:24:b3:db:9c:3c:
18:6f:4c:91:5f:01:fd:c2:83:79:8a:f9:3e:49:30:
9b:27:f4:72:a3:48:d4:57:13:ae:6f:40:44:a1:19:
86:14:03:0b:31:54:0f:be:0d:85:e0:8f:ef:00:c7:
57:3d:ef:37:f1:85:77:b0:4e:b6:27:bd:26:58:c5:
f5:d2:e6:cb:7a:48:65:74:80:b4:c7:ad:96:2f:7c:
0e:9d:e3:46:9f:23:0d:54:cf:ce:c6:25:bb:33:4f:
04:70:54:5d:9b:04:1b:dd:d4:f2:6a:02:ab:22:7b:
e1:80:dc:8f:92:10:d3:fa:8d:a3:33:a1:92:69:dc:
11:07:c8:28:7d:49:0b:db:2c:1a:5f:be:d4:3c:62:
62:bb:1d:f6:7d:26:a5:d6:57:4c:6c:49:c3:40:9b:
1c:a3:67:b0:72:11:21:aa:05:26:e7:77:1c:12:14:
4c:fa:2e:7f:87:99:b8:fc:63:ec:e9:98:b7:91:73:
42:1f:ea:cd:ad:ce:57:bd:22:5e:d7:55:b0:81:36:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5E:9A:52:42:16:D7:26:BD:45:1E:4F:C4:92:12:8A:D5:A9:B8:1B
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dV6aUkIW1ya9RR5PxJISitWpuBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
24:30:c6:fc:14:b9:c8:b7:63:7a:6f:7f:17:43:b6:1b:57:d8:
cb:5c:6d:30:0e:a3:57:62:04:69:4a:62:6e:50:39:22:81:1c:
50:f1:40:4a:05:f7:41:e4:9c:b1:6a:14:47:0a:cc:e1:89:21:
5e:78:b7:0b:8c:57:2e:16:06:2d:cb:17:f6:7f:80:44:49:67:
09:b2:6f:70:29:31:f5:11:b3:d2:b4:68:37:51:81:aa:81:2b:
42:17:c8:2d:df:f9:e4:68:43:5f:31:8e:65:d1:8f:2e:51:c8:
11:c8:44:99:20:b1:8e:a8:e2:35:c2:b1:06:36:1d:79:3c:77:
d2:ba:20:e3:2d:c0:ea:f9:8c:30:33:9d:eb:dc:38:91:d4:1a:
75:05:2a:94:01:74:c0:c4:af:5b:3c:ae:17:ef:a3:91:cc:bc:
fb:28:52:bb:3d:ad:cd:ad:7e:22:69:08:ca:85:85:f0:06:20:
9e:f2:36:d2:79:03:ea:b4:ad:a4:0c:c6:19:f4:3f:af:2a:90:
6d:92:b8:11:77:3d:6b:f3:b9:c8:fd:3c:af:2d:38:81:b1:66:
68:d7:19:9e:fe:cb:2b:89:b3:ad:11:79:2b:03:1a:ec:83:95:
1d:8c:92:6a:a5:75:70:04:57:93:63:ff:01:9d:1d:9f:9d:13:
a8:6b:e2:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:40:32 2025 by rpki-client