Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dmQElj0ajcexZfgLiku4o5KQsvg.roa
File: dmQElj0ajcexZfgLiku4o5KQsvg.roa (raw, json)
Hash identifier: p1oaDnM7NEhNkxNikUsFsZJ+m4QZ9RGOSUeRWOMpR6Y=
Subject key identifier: 76:64:04:96:3D:1A:8D:C7:B1:65:F8:0B:8A:4B:B8:A3:92:90:B2:F8
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019775DE6230A514355F13F116688A6B27E0
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dmQElj0ajcexZfgLiku4o5KQsvg.roa
Signing time: Sun 15 Jun 2025 23:13:17 +0000
ROA not before: Sun 15 Jun 2025 23:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 00:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:de:62:30:a5:14:35:5f:13:f1:16:68:8a:6b:27:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 15 23:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=766404963d1a8dc7b165f80b8a4bb8a39290b2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:aa:65:ed:96:d0:64:bc:18:dd:9e:a6:e3:
a3:23:e3:a0:d6:90:2f:08:f8:ba:ea:df:76:62:b0:
60:ae:c6:55:f9:d9:ef:71:5d:1f:2a:a9:32:1f:9f:
6f:18:35:1a:2b:1d:4d:36:d6:b9:57:75:b9:cf:7d:
e0:d2:c1:22:01:91:aa:69:8e:5a:46:f0:29:54:0f:
50:e2:03:95:66:3d:04:43:a0:c2:47:22:81:08:33:
44:ce:fb:c9:1a:e2:27:db:34:74:6a:22:82:16:02:
5c:ec:69:0f:6b:79:c9:82:25:b2:98:5e:71:ca:6e:
9b:47:b7:b5:8e:00:e9:e0:8d:62:39:a0:f1:5c:a0:
17:01:8a:b3:f1:60:fe:52:28:53:70:bb:fa:39:ce:
94:d9:31:b5:51:a5:03:8b:45:3a:95:c3:d4:b3:3a:
7c:51:1b:54:55:a7:61:9b:59:a0:df:3c:0b:4b:c6:
d5:48:4d:14:6c:70:cf:0e:8f:1a:d0:c0:40:e5:82:
a8:80:3d:dc:2b:8f:26:dd:64:85:1a:48:10:22:6b:
0e:86:0f:66:8f:95:f9:58:06:c1:6b:db:5a:7f:3c:
12:c2:fc:34:3c:7a:81:e4:84:60:0b:a5:9d:01:08:
aa:85:bb:b0:f3:4d:45:da:a8:4c:c6:d9:40:70:96:
01:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:64:04:96:3D:1A:8D:C7:B1:65:F8:0B:8A:4B:B8:A3:92:90:B2:F8
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/dmQElj0ajcexZfgLiku4o5KQsvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
00:ca:b8:8b:f0:41:52:24:f3:9d:77:1d:69:93:bd:5f:97:b2:
43:21:41:12:bd:fa:c7:d8:99:ae:45:5d:4a:09:bc:f8:b8:1b:
f2:05:de:5a:16:40:e7:56:05:b0:20:66:2f:c5:2a:48:9c:cc:
b8:8e:3b:e7:12:05:2d:96:6d:4f:25:31:3a:0d:53:be:ce:6d:
fa:d6:77:dc:b6:ea:42:2a:52:db:65:a0:c4:2d:ee:59:25:50:
8a:06:5a:b1:f1:9e:f0:84:cf:70:e1:5b:17:74:d5:5d:4a:24:
1f:9a:57:89:8f:8b:17:df:fe:5c:38:68:71:5c:a4:37:d6:79:
95:c7:e2:2c:de:69:99:bc:9d:92:16:a9:f9:76:e9:07:de:72:
81:1e:6d:6a:ac:63:01:6b:27:9e:98:ba:f7:d0:ff:c2:f0:eb:
92:a1:1b:f9:30:48:be:e8:63:5f:09:64:de:3d:3b:08:b3:2c:
dc:ce:ae:fa:f7:9f:c7:3b:dd:c4:f1:8a:b3:08:c3:78:9e:2c:
c5:32:3c:f9:c9:d3:53:21:cd:f7:31:b5:8c:14:4a:9a:89:75:
d6:65:d5:a1:05:c4:c7:a8:03:07:b2:50:06:af:45:f2:4e:7f:
f6:72:a9:cd:f1:28:78:0b:e2:e6:df:9d:d7:ff:09:1b:cc:25:
c2:13:90:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:53:48 2025 by rpki-client