Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fyllmOBcSOucaxnffDAzAGUjsJc.roa
File: fyllmOBcSOucaxnffDAzAGUjsJc.roa (raw, json)
Hash identifier: 92md5IRzUFfIKxeQJVkW9CEurkHUeACzVkCFhMXzv9I=
Subject key identifier: 7F:29:65:98:E0:5C:48:EB:9C:6B:19:DF:7C:30:33:00:65:23:B0:97
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C8E94DFF342B5D7FF675F4C0458DD52C
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fyllmOBcSOucaxnffDAzAGUjsJc.roa
Signing time: Wed 02 Jul 2025 02:13:42 +0000
ROA not before: Wed 02 Jul 2025 02:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 02 Jul 2025 03:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:e9:4d:ff:34:2b:5d:7f:f6:75:f4:c0:45:8d:d5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 2 02:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f296598e05c48eb9c6b19df7c3033006523b097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:fc:2e:fe:23:fa:2c:80:25:f6:4f:d5:5b:
d0:31:e2:ac:cc:ed:e0:fa:d2:93:5c:31:6a:7a:0c:
bc:6d:6b:c0:92:54:1b:40:ce:16:bb:5e:40:1b:12:
23:9f:48:d3:c1:a1:9f:0f:60:79:a8:29:c1:0d:84:
df:da:e7:8e:dd:70:c1:da:ab:97:6a:fe:32:5c:7d:
ee:01:d7:e6:91:35:76:ef:42:06:2d:63:7f:6c:e8:
8d:9b:6a:e2:78:dd:b1:52:8e:b8:2e:21:b1:27:60:
1a:fe:7e:52:bd:20:9e:b0:b7:e0:16:6f:ce:27:5c:
44:d6:ef:ea:07:8b:f6:45:84:6a:c3:a7:0e:4e:19:
f6:45:0e:d8:7a:27:bd:ab:84:76:17:a0:fc:b1:f7:
a1:b2:ac:84:b0:d9:31:2a:81:59:c0:b1:5b:8e:d0:
15:86:99:5b:6a:a6:59:91:cc:ef:8a:4e:4f:8d:45:
70:b4:11:fb:e2:48:07:a1:c8:4a:2b:36:69:dd:1c:
c4:b5:1e:0f:2d:8e:f0:bf:83:ce:78:d0:b4:5b:67:
2f:25:0d:91:c4:97:e7:c3:b0:f2:e1:0d:1f:00:c4:
15:8a:13:c7:87:8b:49:81:8a:ff:18:15:b8:fe:f4:
c1:83:fb:37:ae:9a:79:42:ca:93:3f:82:72:29:37:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:65:98:E0:5C:48:EB:9C:6B:19:DF:7C:30:33:00:65:23:B0:97
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fyllmOBcSOucaxnffDAzAGUjsJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
8b:80:a4:69:8c:97:5d:83:50:41:96:3e:b8:94:fe:70:bb:14:
80:96:24:d2:5c:e3:95:9d:75:d0:92:54:00:9e:d3:63:bb:6c:
03:61:72:a2:d1:30:76:34:d3:47:8b:0b:83:fd:99:79:5d:42:
75:67:aa:4d:f7:5f:00:ce:6a:14:77:b0:f7:d4:c5:e9:72:1a:
b8:2b:85:75:21:9b:f8:5e:b4:f1:06:eb:fe:df:04:1c:ed:8e:
c2:95:e8:5f:63:cd:8e:67:4f:ee:1c:3b:b0:38:01:e2:3c:64:
c3:61:1f:4c:66:c2:64:d3:f4:ea:c4:fb:70:83:38:28:3f:2b:
86:c0:60:df:c4:c6:e9:cf:b0:6a:a5:64:0e:50:92:71:97:43:
e7:ac:9b:d5:eb:81:9b:ac:f2:03:80:50:e8:b2:da:a3:e8:d2:
6e:9a:12:31:b1:ac:45:a9:83:8e:dc:45:d8:c3:a1:34:61:07:
66:87:4c:7e:5e:97:ca:0a:26:63:9d:30:55:7d:ca:9b:a5:b2:
c2:f2:3e:08:4c:cf:31:ff:0e:92:d2:36:a4:35:61:65:7a:52:
aa:13:f1:c5:11:1c:9a:08:6c:c8:d9:30:d6:5c:25:07:5e:2a:
a1:a0:8d:73:d8:17:60:05:e5:a5:1d:9f:ea:bb:f6:eb:90:c4:
0b:e2:fb:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:02:45 2025 by rpki-client