Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gEs97j_4eRtNxRwKgWSgq8gLj6A.roa
File: gEs97j_4eRtNxRwKgWSgq8gLj6A.roa (raw, json)
Hash identifier: tGAy3iT0uNiQxbBHixgezdjvvBhLQL+oGn4Ff9FfvH4=
Subject key identifier: 80:4B:3D:EE:3F:F8:79:1B:4D:C5:1C:0A:81:64:A0:AB:C8:0B:8F:A0
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B63D5781BBF8D2751EB98C37A90A790D
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gEs97j_4eRtNxRwKgWSgq8gLj6A.roa
Signing time: Sat 28 Jun 2025 11:12:42 +0000
ROA not before: Sat 28 Jun 2025 11:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 12:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:3d:57:81:bb:f8:d2:75:1e:b9:8c:37:a9:0a:79:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 11:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=804b3dee3ff8791b4dc51c0a8164a0abc80b8fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:0d:7d:a1:f1:d3:50:9a:79:36:61:9f:2d:
53:fd:bc:05:3f:22:54:57:ec:ce:1b:77:c8:22:d9:
e4:d7:83:b3:45:58:48:c3:f8:05:ab:dd:41:a7:6c:
37:f3:e0:01:e5:bd:48:46:1e:e0:7a:a9:be:71:a3:
25:05:88:1d:21:af:d5:25:b3:2f:44:34:1a:d2:ef:
77:7c:68:17:34:30:bf:56:eb:53:47:95:8f:c6:37:
d6:0e:08:7d:13:05:7f:05:7b:19:ff:36:41:50:9b:
5b:08:45:32:41:39:03:15:9b:3c:6f:5f:28:45:80:
0c:0e:1f:76:fa:90:70:7b:9a:d2:fb:7d:ba:9c:2e:
d6:77:98:45:9f:9c:d6:1e:ff:a4:73:e5:09:e9:01:
20:68:4d:9f:0f:de:a0:de:c3:d9:f7:d0:aa:82:27:
b3:51:e9:3d:3e:3d:d1:e3:30:8f:5e:de:b0:aa:fd:
67:e8:2e:66:71:af:1e:04:13:b5:dc:f6:2a:9d:20:
d1:5b:71:38:6e:a7:c3:80:8c:85:63:c2:bd:bc:cf:
e4:17:e9:b4:ee:c2:e1:a4:2d:58:43:92:36:1b:ae:
bc:ee:c3:09:9a:e9:23:03:87:93:b6:6c:69:44:e0:
28:22:77:d0:a3:3c:87:ae:be:c9:4c:e9:fa:04:54:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4B:3D:EE:3F:F8:79:1B:4D:C5:1C:0A:81:64:A0:AB:C8:0B:8F:A0
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gEs97j_4eRtNxRwKgWSgq8gLj6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
02:51:05:b7:47:8b:8a:95:e0:09:b9:1f:54:dc:f3:61:65:c3:
1e:09:d8:87:14:0b:45:8f:3d:ca:19:13:74:47:40:49:c7:fc:
0e:20:f2:ed:7e:1f:d5:dc:ed:34:94:5e:84:a5:f2:f0:3f:c7:
1d:90:0a:87:9f:78:48:92:1d:0d:82:5c:34:a3:b5:81:4b:88:
e4:88:c6:c3:e6:84:6c:e2:ce:ba:d0:27:67:b1:c5:ad:cc:28:
61:72:13:ec:e6:d6:72:51:3e:3c:da:7b:02:ed:51:ff:41:62:
ba:dd:5a:b7:2c:f8:6a:7c:e4:d8:2a:ae:28:ba:39:63:e5:ea:
1b:55:ca:46:85:38:b9:81:30:50:0b:c8:c9:e6:75:4a:8d:ff:
a4:4b:68:90:84:35:c5:99:33:45:11:dd:35:32:71:fd:55:d4:
20:73:ff:1a:0a:05:3a:19:90:cb:b3:8d:e3:dc:57:66:8a:16:
67:6e:fa:35:f4:e9:1a:d7:ba:07:0f:82:01:2c:0d:e1:bd:94:
46:c0:d6:9a:8d:30:f1:72:cf:a5:6e:c1:d9:d3:cb:56:41:e2:
51:69:7a:c2:13:b6:58:b9:6f:33:44:20:f5:8e:72:1d:b4:b2:
dc:c6:ad:64:6f:00:7a:38:cf:43:3c:62:49:11:f1:8b:f4:f4:
53:62:2b:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:08:17 2025 by rpki-client