Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gyja1TpQJ1xTiB_fh-64AW6uEBg.roa
File: gyja1TpQJ1xTiB_fh-64AW6uEBg.roa (raw, json)
Hash identifier: f5K2RUyF3a7KUXfI0ATcU2ZfohjKTLIGihcE2fwZKX0=
Subject key identifier: 83:28:DA:D5:3A:50:27:5C:53:88:1F:DF:87:EE:B8:01:6E:AE:10:18
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978FD5CEBA0813F9C1B43BD3A1BE6D7A76
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gyja1TpQJ1xTiB_fh-64AW6uEBg.roa
Signing time: Sat 21 Jun 2025 00:14:03 +0000
ROA not before: Sat 21 Jun 2025 00:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 21 Jun 2025 01:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8f:d5:ce:ba:08:13:f9:c1:b4:3b:d3:a1:be:6d:7a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 21 00:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8328dad53a50275c53881fdf87eeb8016eae1018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:fb:dc:f5:40:45:3a:4c:2a:6f:78:96:78:
28:85:dc:c9:23:ad:f8:2d:13:4f:76:5a:28:a6:84:
7b:e8:94:10:8b:95:a7:7f:74:a5:a5:55:67:27:9a:
6c:bb:2a:1f:46:a9:7d:c7:4d:79:83:92:9e:df:2d:
15:6f:db:99:03:90:94:02:f9:6a:d6:e7:61:8d:55:
7e:3a:65:09:c7:2a:66:16:54:5f:62:f1:0d:80:2a:
c2:30:e3:21:27:f5:14:1d:37:71:bc:0a:a2:0b:4a:
27:c4:71:78:0e:d3:97:57:a3:e0:db:b5:e3:88:da:
2e:61:66:2b:f3:f0:ce:87:61:f7:c2:3b:d0:d9:7e:
20:80:16:05:f4:44:11:79:b7:4b:c0:cf:7a:5d:0d:
04:7c:67:9a:12:37:d7:42:91:e1:c4:1f:be:2a:b7:
71:85:b9:64:0a:ce:da:dd:d8:47:3a:11:a8:dd:65:
1c:c7:23:2c:6f:ff:b5:2c:b2:11:14:68:67:e1:5a:
b4:58:55:47:05:91:79:23:5d:5f:70:ee:cf:7d:17:
f8:b8:36:6d:91:31:d8:4f:0e:92:dd:9c:de:75:e9:
6f:35:ca:d7:d4:64:b5:1f:3e:b3:fc:b0:25:d3:98:
bf:ac:6d:69:72:63:ea:49:7c:89:59:2a:3a:42:11:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:DA:D5:3A:50:27:5C:53:88:1F:DF:87:EE:B8:01:6E:AE:10:18
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/gyja1TpQJ1xTiB_fh-64AW6uEBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
65:41:6a:2e:ae:3c:f7:5b:5d:d5:02:34:af:e1:bd:b1:79:45:
31:b0:7b:7c:83:48:05:35:4f:da:95:e7:f5:de:b4:16:b5:9c:
80:bc:2b:14:2f:42:98:aa:64:d7:4b:92:d3:98:03:bf:90:3a:
97:3c:f6:1f:3f:08:9e:74:6a:71:7e:f0:91:05:c4:88:0c:b8:
2b:c1:0e:69:23:eb:e9:95:8e:72:68:e0:90:aa:da:b8:24:f5:
b4:83:0b:f9:b4:c0:5e:66:09:49:e5:a0:47:ce:5f:98:8c:10:
19:1d:09:60:bf:28:22:94:d4:13:b5:17:f7:41:a2:a3:1c:0e:
3f:20:d6:07:06:2b:a0:75:32:fd:42:79:c8:75:72:ba:75:62:
11:29:67:ee:30:b6:23:3b:59:aa:32:f6:a0:83:4c:78:09:7f:
eb:3b:19:72:11:71:6c:c1:f0:99:f8:08:d0:bc:56:29:43:93:
f6:22:33:ea:50:a0:d2:97:db:20:76:dc:70:3e:d9:4e:38:6e:
c5:3e:cc:9a:e7:8c:ad:a8:34:99:31:13:22:3f:96:6d:df:1f:
98:0c:04:94:37:fa:c6:74:c7:a0:74:84:d4:f4:e6:98:34:68:
cc:a3:8b:9f:83:16:0b:97:97:07:1b:77:01:de:ec:be:f3:38:
8d:48:2b:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:50:53 2025 by rpki-client