Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fU8kwqsm2gJNPBAHtPHRdSEVe_4.roa
File: fU8kwqsm2gJNPBAHtPHRdSEVe_4.roa (raw, json)
Hash identifier: 7BoavpiodwU7RjONiw9dToNI6CoT+Xxb6h1ycnlRkWw=
Subject key identifier: 7D:4F:24:C2:AB:26:DA:02:4D:3C:10:07:B4:F1:D1:75:21:15:7B:FE
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BC3E82659BDA6C9DA27563C7AC17A005
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fU8kwqsm2gJNPBAHtPHRdSEVe_4.roa
Signing time: Sun 29 Jun 2025 15:11:42 +0000
ROA not before: Sun 29 Jun 2025 15:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 16:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:3e:82:65:9b:da:6c:9d:a2:75:63:c7:ac:17:a0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 15:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d4f24c2ab26da024d3c1007b4f1d17521157bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:c2:22:0f:48:50:16:87:aa:fa:02:e7:bc:
9c:ce:5a:85:20:b7:3e:d8:dd:0c:24:22:db:74:2c:
60:03:de:ff:0d:c7:fc:99:59:d3:84:2c:71:b1:a5:
12:49:d4:f0:27:53:29:10:b8:98:46:0b:c4:e8:52:
fe:dd:fd:60:0c:23:4a:3a:b6:d4:37:1b:d3:51:06:
e3:7b:21:fc:7b:2d:f4:50:01:03:7d:08:c8:bb:24:
fc:6f:b8:1f:c4:c2:83:7a:36:67:d7:b8:a8:9a:df:
1b:e6:06:d2:77:84:f3:14:c6:b9:22:45:cf:62:18:
31:2d:1c:7e:5c:7d:7b:2b:96:95:72:8d:30:2f:6d:
b4:d9:ed:f6:2f:f4:2d:c6:99:f7:d5:5f:8f:fe:75:
09:59:c9:f6:71:59:eb:9b:1c:1e:0e:e6:62:1d:bd:
1b:17:27:c4:90:09:da:7a:dc:10:d5:19:e6:9b:c1:
60:c4:9e:19:6f:7e:14:8a:06:4f:a9:c4:2a:c0:cf:
1f:b5:19:7e:83:00:0a:fa:4b:c2:23:8b:e6:02:bb:
ad:a7:18:18:ba:31:76:c2:6a:a6:7a:dd:de:3c:cb:
52:bb:9e:8e:bb:9f:65:d9:e6:db:55:88:84:ff:36:
3a:68:f5:7b:4b:b2:1e:11:65:f9:79:ba:d8:91:a2:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:24:C2:AB:26:DA:02:4D:3C:10:07:B4:F1:D1:75:21:15:7B:FE
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fU8kwqsm2gJNPBAHtPHRdSEVe_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
74:63:2b:fc:bd:dd:a1:f6:06:db:d4:e3:e9:30:12:ff:75:f4:
ce:b8:62:2f:a5:7d:0c:20:38:cf:a0:26:b2:ee:08:bd:bd:54:
e5:66:6b:db:86:1e:b3:c9:0a:71:28:42:0a:88:6d:73:06:b4:
0b:8c:e2:69:70:3b:2d:b3:ee:a4:98:65:68:78:b1:15:91:ea:
a1:9c:f8:19:51:41:80:0f:86:81:4f:a3:40:4d:07:9e:1e:9c:
63:7a:14:58:c5:3a:05:2e:bd:c4:85:72:4f:ce:8f:ea:8b:bc:
53:a5:cd:bb:b1:f1:c7:bf:0d:7e:11:b3:e9:1b:6d:9f:ab:0d:
f9:04:e4:3b:c5:e2:e3:91:ee:09:b9:81:7a:e1:c1:22:c2:64:
b9:26:a8:eb:fe:4c:0b:67:06:46:22:f7:f4:77:66:07:f5:27:
94:63:ae:35:fd:8d:95:89:c1:ed:de:39:55:bd:3f:84:fc:33:
34:e3:65:14:bf:5b:4b:71:ab:54:c0:cd:b4:cd:a2:54:dc:bc:
39:1d:6a:6c:69:e3:19:59:44:48:85:5b:88:6d:14:ca:10:04:
9b:28:55:4f:10:e3:76:1e:c0:05:42:62:c9:6d:4d:62:bd:91:
ea:7f:26:b9:95:16:1a:9d:9b:4d:1d:b5:47:87:ba:c3:18:4b:
09:20:f2:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:32:13 2025 by rpki-client