Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gD_7LYv59rSnqAKJFjf9Tg9GHF4.roa
File: gD_7LYv59rSnqAKJFjf9Tg9GHF4.roa (raw, json)
Hash identifier: oKM/yQ0UXms15bZV1Tj4OJT4EjRAi00sG0xkMjDgyd4=
Subject key identifier: 80:3F:FB:2D:8B:F9:F6:B4:A7:A8:02:89:16:37:FD:4E:0F:46:1C:5E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978D459EA9FB6AADF4A7D6CF8AE44175FD
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gD_7LYv59rSnqAKJFjf9Tg9GHF4.roa
Signing time: Fri 20 Jun 2025 12:17:19 +0000
ROA not before: Fri 20 Jun 2025 12:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 20 Jun 2025 13:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:45:9e:a9:fb:6a:ad:f4:a7:d6:cf:8a:e4:41:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 20 12:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=803ffb2d8bf9f6b4a7a802891637fd4e0f461c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:2d:bd:3d:3a:a2:71:f9:d4:bd:f6:2c:40:
aa:88:39:fe:23:e7:56:b8:09:6e:f5:86:2e:93:44:
07:5f:8a:3e:3d:94:ce:fc:a0:07:fd:c4:c6:fd:76:
be:52:20:86:9d:6a:62:62:48:88:fb:06:87:ad:fe:
33:61:f2:d2:33:ac:9d:14:4f:d5:ad:12:65:66:e7:
d4:55:67:05:cc:30:6a:19:9b:88:cb:35:d4:b9:2a:
ba:02:eb:57:48:2c:28:30:b1:2e:54:44:a0:8d:bd:
76:30:6d:45:91:9a:bd:53:0f:ba:55:d1:28:4a:b5:
df:e4:29:89:cb:56:98:f5:8d:a2:bc:c4:15:e9:85:
0b:58:00:17:5b:ff:f9:3d:47:4a:fc:90:e2:3e:9b:
78:1d:5c:79:67:71:10:9c:cb:64:af:16:b3:86:86:
38:71:3f:fe:5b:a8:74:c2:e7:d7:cf:78:9c:ac:d0:
b5:ba:9a:cb:bd:d0:72:29:43:66:08:6d:76:b3:4c:
e2:e2:a4:95:4c:8d:0c:b2:88:c2:63:0a:cc:b7:24:
a2:77:36:8d:25:a2:10:97:ef:28:71:e7:6d:23:43:
61:09:55:05:8f:7d:5b:fa:f0:cc:b4:51:77:e4:0a:
7d:29:3d:03:c9:7c:01:fe:68:28:ec:a9:eb:0d:b7:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:FB:2D:8B:F9:F6:B4:A7:A8:02:89:16:37:FD:4E:0F:46:1C:5E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gD_7LYv59rSnqAKJFjf9Tg9GHF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
19:08:c3:e3:12:3f:dd:df:de:a0:cd:40:67:13:6a:b4:4b:e7:
a4:db:1a:f7:60:d0:e5:52:66:24:6c:f7:45:e1:21:b5:4c:62:
0b:0d:c8:95:9f:19:ef:34:e8:d0:aa:91:10:cf:6b:fc:e0:0a:
fe:b0:2c:80:35:f9:d0:48:b5:e6:1d:4b:6a:6b:58:62:d4:74:
3f:79:e9:42:6f:d1:be:91:71:a1:22:fa:ae:ec:62:d3:17:3a:
6f:f3:29:0c:5c:be:8b:bf:4c:fe:8a:7e:04:9e:fd:e5:7c:ce:
01:5d:71:d3:14:08:85:36:8e:1b:45:99:9f:1d:0e:da:06:c5:
f1:58:c6:1f:ba:67:19:7c:2f:d8:22:d0:8d:4e:0c:b6:30:14:
c0:09:f9:f2:60:e9:ab:1d:9a:0a:25:90:d6:cf:4f:1f:af:8d:
97:ac:41:84:21:b6:de:6e:70:e0:3a:a8:04:74:83:f9:2e:07:
49:e8:77:e8:cb:75:18:37:d9:a0:eb:a1:d1:b2:db:6b:1b:20:
f1:07:38:ca:9a:f5:54:42:46:b1:95:17:8f:9f:a4:ea:1c:e9:
6d:75:fe:41:d1:83:2c:c7:cd:86:1c:b5:8a:2f:b0:92:81:e3:
9c:c6:ff:f4:76:e2:d6:00:16:1f:03:3e:8c:c7:d6:b0:3f:48:
1a:41:db:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:20:48 2025 by rpki-client