Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fS-ZWxlc-s0GFSSVf2H9dNO302w.roa
File: fS-ZWxlc-s0GFSSVf2H9dNO302w.roa (raw, json)
Hash identifier: 6uytRD3t6GImQtpp/mYMnBxIiYmiFqO8ggINMeSscMA=
Subject key identifier: 7D:2F:99:5B:19:5C:FA:CD:06:15:24:95:7F:61:FD:74:D3:B7:D3:6C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AC973E3D2A10081169DACB7A436F430E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fS-ZWxlc-s0GFSSVf2H9dNO302w.roa
Signing time: Thu 26 Jun 2025 14:14:42 +0000
ROA not before: Thu 26 Jun 2025 14:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 15:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:97:3e:3d:2a:10:08:11:69:da:cb:7a:43:6f:43:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 14:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d2f995b195cfacd061524957f61fd74d3b7d36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:b0:45:60:8e:59:c3:c2:80:b7:cc:bc:00:
5a:dd:4f:dd:ff:07:22:bb:40:90:c5:f2:89:7f:ef:
ed:47:b6:d8:7f:f1:e1:a9:07:8c:dc:1a:b4:76:97:
00:45:e6:47:32:3e:0b:fe:cb:17:a0:dd:d2:d8:11:
f6:4a:3e:c2:36:2e:cd:17:a6:a0:dc:b7:30:6e:5d:
a2:a4:96:ae:5f:9e:ea:6d:4f:8c:d0:dc:fd:d3:48:
3e:d5:84:9d:e0:af:f4:fb:36:02:ee:4d:a8:69:c2:
cc:e7:b1:d9:74:a7:1b:6a:cf:e8:e0:b5:d3:cb:80:
4d:d2:51:c0:29:eb:08:55:15:00:82:32:62:1a:ed:
e5:2c:30:f5:25:0d:64:c0:13:8f:20:10:54:b4:db:
db:3a:4a:c3:76:3f:ca:31:fd:7e:28:24:37:c1:09:
54:f8:91:b6:a9:a0:20:a3:2d:32:8a:54:5a:c1:23:
d1:44:83:bd:d8:79:b1:1d:e6:15:09:fc:34:c8:3a:
0a:64:af:9f:07:f1:d8:37:47:41:a3:48:fe:d4:34:
f9:b9:d7:f5:6b:cb:c8:25:18:7e:d8:65:13:32:ce:
a9:d7:8e:db:ed:fb:c9:c7:e7:cd:50:b3:e5:84:69:
01:78:f1:6a:40:15:0e:04:b0:30:f5:ef:66:88:dc:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:99:5B:19:5C:FA:CD:06:15:24:95:7F:61:FD:74:D3:B7:D3:6C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fS-ZWxlc-s0GFSSVf2H9dNO302w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
89:3a:38:93:00:60:4a:0f:9f:b2:ca:be:34:7c:6b:93:09:db:
1a:78:ff:c1:b0:60:31:29:9d:89:2f:0c:df:b1:4f:25:95:ba:
b6:7f:c0:db:1e:55:d0:1a:15:91:c1:f8:a5:f0:38:cf:a2:b9:
5d:06:16:04:28:19:47:4e:3f:6d:30:19:66:f2:d5:bf:28:ec:
c6:8c:05:61:32:4e:c9:61:20:0f:c3:f4:88:9d:e0:e2:53:06:
ea:47:b4:f8:63:ab:6c:a5:de:2c:90:83:11:e0:0c:39:49:b9:
b7:49:8f:1f:0a:6d:cd:2c:a1:92:ca:2f:f4:22:d0:64:95:eb:
f1:a8:77:ac:74:25:99:09:f8:cb:bf:26:e2:47:94:93:2c:c4:
38:16:61:2e:bc:5d:9e:e0:1a:8e:00:0b:75:78:3a:e1:f0:60:
83:f1:c4:29:9c:e6:93:be:15:45:92:22:27:85:90:25:03:0c:
e3:91:41:3b:ba:aa:23:e6:1b:33:1d:e4:4c:1a:b6:9f:97:3b:
df:b3:38:21:03:ca:ee:fe:30:8b:1d:2e:94:0e:d3:f9:5d:5c:
e6:ec:e5:88:ba:0d:56:12:34:c3:8d:b6:34:60:61:a7:85:9d:
21:60:b2:74:9a:8a:05:63:ed:7a:9f:3a:e1:4d:fe:b0:14:bf:
08:80:34:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:31:08 2025 by rpki-client