Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gIRyI42KbTcy76d0xbzku9sZIHk.roa
File: gIRyI42KbTcy76d0xbzku9sZIHk.roa (raw, json)
Hash identifier: iDRl3H8EyvLDRDmxh2E3B46T5sNOvBBdxohipysUW1I=
Subject key identifier: 80:84:72:23:8D:8A:6D:37:32:EF:A7:74:C5:BC:E4:BB:DB:19:20:79
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B9763A3F38D8301A0ED13FEF58F8DC42
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gIRyI42KbTcy76d0xbzku9sZIHk.roa
Signing time: Sun 29 Jun 2025 02:13:42 +0000
ROA not before: Sun 29 Jun 2025 02:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 03:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:76:3a:3f:38:d8:30:1a:0e:d1:3f:ef:58:f8:dc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 02:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=808472238d8a6d3732efa774c5bce4bbdb192079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cf:5e:92:34:90:d7:61:90:87:af:80:73:14:
f7:d3:d0:8b:c4:ab:9c:8e:a1:31:8e:96:d4:36:b6:
cb:f3:2f:d1:02:08:ba:51:39:b8:da:89:8b:48:61:
04:3f:85:1d:3c:9d:82:25:4c:6d:4c:01:a9:46:1f:
28:41:73:d7:93:68:f2:9a:69:6d:b3:14:c4:b8:a7:
3e:89:21:7e:70:61:c2:f7:2d:a2:46:85:ff:00:01:
22:e7:6c:96:33:80:1c:7f:3b:ad:11:cf:58:df:13:
95:52:9e:da:e1:25:79:a5:82:07:1a:14:ec:74:16:
f6:dc:66:00:a4:c6:a3:6e:38:2c:64:fe:54:2e:9c:
73:f9:9b:3d:7b:8d:96:4b:45:70:bd:ce:b2:8a:98:
44:39:6b:f2:51:2c:06:18:8d:e1:19:db:dc:e8:dd:
df:93:56:0c:c7:cb:0b:83:ee:08:b3:a4:92:ab:ae:
f6:dc:d4:8d:8d:f2:4a:3f:b9:20:ce:2e:38:3a:80:
7b:a4:96:ce:a1:ec:94:f9:9d:96:cd:a6:a0:ab:13:
52:07:2e:09:4e:f8:57:35:b5:44:00:8f:de:d3:6a:
4e:71:06:6e:51:ab:1c:b9:63:31:51:da:1e:d2:5f:
6e:1c:0a:f7:7c:26:c8:90:e2:88:f6:2b:2e:28:f3:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:84:72:23:8D:8A:6D:37:32:EF:A7:74:C5:BC:E4:BB:DB:19:20:79
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gIRyI42KbTcy76d0xbzku9sZIHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
35:ea:f2:68:44:03:8d:49:49:97:6c:0a:98:17:d2:36:98:d6:
90:eb:fb:36:1b:09:20:e4:cf:24:01:81:f8:57:8b:92:39:2a:
68:a1:cb:f6:67:34:cc:03:21:64:87:bd:d0:47:b4:0d:10:4b:
0b:f0:4a:91:ef:a7:7a:58:45:eb:af:b8:d6:94:59:dc:49:bb:
95:25:45:d3:13:2d:f8:ec:79:02:24:4b:84:11:99:8c:aa:95:
55:d5:67:21:61:97:dd:2e:2f:cb:ec:d2:68:52:a0:6f:eb:f3:
4e:5a:92:6f:31:7b:b6:d4:6d:0d:91:ed:30:e1:ce:98:78:0b:
6d:0a:98:27:2b:3a:4c:5f:59:4b:e0:40:5b:6b:f1:a7:5e:22:
20:f2:79:0c:a0:ec:0e:6d:ea:3a:2f:b4:70:22:c2:85:ea:42:
56:81:d2:8e:95:80:5c:7f:3c:22:23:87:83:d0:c2:b1:e0:4a:
6a:99:66:e4:62:75:5c:58:17:a3:da:fb:8f:c5:5a:66:31:58:
19:04:57:ff:4a:7f:1d:b4:74:39:20:27:50:5d:c7:33:dc:20:
27:ba:d8:af:ca:5a:c9:05:f2:28:37:46:18:d4:e8:4d:ba:04:
e0:69:b9:04:37:b5:9a:d5:4d:c1:90:22:03:81:bf:a4:c4:bb:
02:8b:ca:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:38:30 2025 by rpki-client