Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eeEoonRTpq2J28DJqUkQf9noRkE.roa
File: eeEoonRTpq2J28DJqUkQf9noRkE.roa (raw, json)
Hash identifier: OShyzJp8uKdtDPmFZ8tt3BR63BJ6Jjfv7/RYCwm4drg=
Subject key identifier: 79:E1:28:A2:74:53:A6:AD:89:DB:C0:C9:A9:49:10:7F:D9:E8:46:41
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A46D0FB7FC5242145EDAFF5108E5A72A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eeEoonRTpq2J28DJqUkQf9noRkE.roa
Signing time: Wed 25 Jun 2025 00:11:40 +0000
ROA not before: Wed 25 Jun 2025 00:11:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 25 Jun 2025 01:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a4:6d:0f:b7:fc:52:42:14:5e:da:ff:51:08:e5:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 25 00:11:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79e128a27453a6ad89dbc0c9a949107fd9e84641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:90:89:96:4e:70:4a:b6:e3:cf:31:04:2a:
d1:f4:3c:9f:ce:95:18:47:17:02:b2:79:e3:2c:0d:
88:1c:d9:ad:3d:92:be:0e:25:b0:04:dc:c8:18:6f:
74:49:c4:91:5b:09:58:4a:73:c1:c1:e7:60:b9:5a:
7f:6e:13:0c:a5:64:91:34:db:e8:90:ba:68:39:ab:
23:ac:4e:38:81:3d:06:99:20:21:f3:07:b0:e5:73:
ba:1a:f3:2b:46:4a:b4:9a:3f:cd:42:4f:85:d5:de:
db:e9:ea:a7:a5:a4:ef:7d:9e:ea:01:ff:15:31:9e:
34:e0:bf:43:92:e8:f9:bd:92:70:33:ff:35:a8:08:
1a:52:bd:91:33:37:6d:61:9c:d5:d7:32:b5:97:e5:
a1:d6:7b:61:f1:bc:d1:10:20:c6:85:b6:b4:75:2a:
b1:7c:92:1e:c6:0d:9c:ac:5a:7e:4d:24:1e:bf:eb:
ad:22:26:21:e6:ab:dd:b0:d1:30:84:2e:0c:05:d7:
5b:da:44:2e:32:02:3e:13:db:e7:ff:59:ba:3f:b4:
a9:00:04:2b:58:5a:67:41:cb:17:5d:e8:76:49:67:
d7:a3:87:0f:80:f3:7f:41:89:01:80:c8:bd:97:36:
21:e6:3f:46:01:13:a2:71:e9:5c:3d:24:96:32:54:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:28:A2:74:53:A6:AD:89:DB:C0:C9:A9:49:10:7F:D9:E8:46:41
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eeEoonRTpq2J28DJqUkQf9noRkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
0e:f2:2f:7f:41:2d:74:40:0b:6e:ad:cc:9e:94:6b:84:9d:e7:
a4:fe:ad:f5:1b:5c:98:55:a2:59:b9:9a:1d:7d:57:94:d3:40:
4f:16:aa:5f:e3:a4:c3:89:d4:3f:4f:65:3c:83:0c:13:bd:b1:
14:41:0c:ac:03:43:d3:d9:17:8a:31:f9:b2:68:bf:61:21:02:
1d:38:d6:b0:16:32:c9:af:60:2d:49:c8:ac:4b:3e:64:be:c4:
2a:9c:40:22:89:9a:fa:de:16:a9:80:a5:52:f5:72:99:81:ea:
52:d9:03:38:06:3b:0d:23:0e:89:ff:d0:80:32:8a:ce:ce:8d:
86:45:2d:a2:ae:5e:96:c6:a9:68:d1:0a:af:59:5c:1a:ef:95:
8a:0e:56:5b:83:0f:43:27:3b:dc:5a:d5:bf:d5:ad:84:4d:22:
b8:76:c7:83:07:28:42:bd:7e:1c:fa:b2:0c:af:0f:8f:3a:33:
56:aa:3f:0d:fd:2e:68:22:75:ac:94:71:5a:a5:1c:2a:88:fd:
3f:e8:49:27:d9:ad:0a:1e:f9:15:35:72:91:f3:55:7b:72:58:
13:94:f3:14:9b:82:7d:c2:79:91:cf:5d:12:c7:d8:d4:5c:23:
9c:8f:ed:6f:54:b7:5c:ca:98:02:97:84:3e:af:94:68:85:9a:
f2:06:3a:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:51:29 2025 by rpki-client