Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eIAXDZWaSaEy4v2Hxv2s0edIhbU.roa
File: eIAXDZWaSaEy4v2Hxv2s0edIhbU.roa (raw, json)
Hash identifier: Cb0GOi5jhmV+Fnva4Sq0JfgxhOFGk95g6SSzFTWrcr8=
Subject key identifier: 78:80:17:0D:95:9A:49:A1:32:E2:FD:87:C6:FD:AC:D1:E7:48:85:B5
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01992415AC194DB12AA39B9E3AD399D1C1CD
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eIAXDZWaSaEy4v2Hxv2s0edIhbU.roa
Signing time: Sun 07 Sep 2025 12:10:23 +0000
ROA not before: Sun 07 Sep 2025 12:10:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:198:55a3:fcb4/128 maxlen: 128
2001:67c:64:ffff:0:198:5ff0:79dc/128 maxlen: 128
2001:67c:64:ffff:0:198:ad2f:c10a/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 07 Sep 2025 13:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:15:ac:19:4d:b1:2a:a3:9b:9e:3a:d3:99:d1:c1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Sep 7 12:10:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7880170d959a49a132e2fd87c6fdacd1e74885b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:6f:1a:7b:3d:f1:af:06:d3:6c:61:0f:9c:
55:ae:8e:87:02:3c:ad:0c:e9:00:a8:da:ca:d4:12:
7f:0d:34:c0:d0:fa:27:aa:76:91:60:51:78:52:7b:
a7:26:14:64:8a:ef:9b:af:f9:61:ae:ac:ef:2e:91:
a3:6b:11:e5:60:b9:0a:e7:fd:bb:56:d5:3d:1b:94:
37:85:cb:23:1d:c9:57:2a:51:35:ab:8f:a0:1d:5c:
b9:d9:2e:b6:75:80:57:1d:20:0f:7d:7c:59:40:6e:
85:8c:ee:3c:55:24:f1:85:e6:0d:c1:f4:25:9b:2d:
af:00:00:17:fa:ed:c1:4b:16:94:ce:9f:d8:51:fa:
9c:46:66:c0:7f:0d:bd:c3:a9:ed:ba:64:bb:0b:34:
f6:d5:65:9c:af:26:1e:39:9d:8f:b6:2f:d1:35:88:
cb:df:ef:32:76:05:ee:35:77:ed:8b:c3:c3:b5:83:
b8:c5:8f:8a:b6:e1:ec:ca:81:f7:bb:85:ec:b1:09:
a3:3f:df:43:d3:fa:75:15:58:c7:41:9d:f7:cf:d1:
65:5e:5f:8a:38:aa:31:94:a2:21:ff:9c:0a:77:ef:
88:d6:ba:34:5b:b8:d7:0b:a0:33:d0:3e:40:55:8c:
ce:ae:ca:e3:d9:27:60:bc:a1:99:4b:5e:09:88:57:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:80:17:0D:95:9A:49:A1:32:E2:FD:87:C6:FD:AC:D1:E7:48:85:B5
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eIAXDZWaSaEy4v2Hxv2s0edIhbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:198:55a3:fcb4/128
2001:67c:64:ffff:0:198:5ff0:79dc/128
2001:67c:64:ffff:0:198:ad2f:c10a/128
Signature Algorithm: sha256WithRSAEncryption
41:83:1f:e6:0c:d1:6c:f1:68:7c:ba:d7:d3:05:2e:10:4e:4f:
a3:8f:4d:71:3a:20:c3:f9:f1:c7:ed:7b:a8:4c:e1:60:3a:12:
30:13:28:ca:4a:2f:e5:84:01:67:c1:ea:a8:67:80:d7:f5:ab:
dd:26:80:c8:28:11:87:06:6d:9b:91:bb:08:56:f4:59:5d:6a:
aa:bf:33:03:7b:37:4a:6b:64:70:2b:6b:42:cc:c3:b0:b4:1d:
19:a6:54:f2:54:c3:f4:1c:ba:e5:fb:f9:07:30:d4:72:19:20:
77:f2:46:0c:59:22:38:4a:5e:60:7f:ea:1e:71:25:d9:3a:cc:
a7:a2:75:da:b1:bf:d9:8a:08:b5:01:4e:5d:04:81:a5:40:f4:
f7:c2:f3:39:c8:73:bb:68:bf:d0:fc:fd:e8:18:d9:de:0b:3a:
f1:e7:57:b8:a2:60:2a:2e:98:9e:8a:49:ef:b8:89:55:f1:73:
c5:b3:85:ed:89:fe:0e:d1:48:9e:e1:ab:93:fc:54:a9:82:3b:
ec:04:65:43:a5:3a:99:0c:85:f9:97:b0:cf:97:e4:7e:dd:c9:
e7:e5:7d:dd:d6:33:17:ca:5c:68:af:d1:aa:ef:f7:1d:ca:67:
7a:83:bd:98:0f:93:cd:84:6e:c9:86:5d:27:c5:1d:df:07:dc:
eb:89:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:23:38 2025 by rpki-client