Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/hqdaefiSrWs5S60GfXAZzGunCPs.roa
File: hqdaefiSrWs5S60GfXAZzGunCPs.roa (raw, json)
Hash identifier: wNns6PdkApVBufoXmUUWxNyM6bfnvt7HtOlBdjnCY4s=
Subject key identifier: 86:A7:5A:79:F8:92:AD:6B:39:4B:AD:06:7D:70:19:CC:6B:A7:08:FB
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197ADA8126591E5E2F1AC79547FA237738D
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/hqdaefiSrWs5S60GfXAZzGunCPs.roa
Signing time: Thu 26 Jun 2025 19:12:42 +0000
ROA not before: Thu 26 Jun 2025 19:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 20:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:a8:12:65:91:e5:e2:f1:ac:79:54:7f:a2:37:73:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 19:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86a75a79f892ad6b394bad067d7019cc6ba708fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:71:bc:03:ae:99:ce:b4:d4:a6:9e:d2:8d:
6d:d4:8f:75:88:54:7f:b0:79:3f:ab:ba:18:f0:3b:
25:c4:d8:4e:31:2c:a2:96:c1:e9:59:be:9a:2a:02:
da:36:80:b2:73:51:fb:a8:de:ac:cd:96:7b:e1:e7:
a1:f1:a0:ed:68:e9:9a:c8:b6:3e:d7:a3:d5:bb:e5:
d6:eb:a6:1f:ee:3e:b2:05:37:b6:68:ba:df:71:87:
66:dc:f4:42:a2:a9:9d:9d:bf:06:20:dc:9c:7c:49:
39:8d:db:91:55:6e:c4:ba:e4:a7:d3:bc:56:f4:d9:
69:b1:a1:1b:d4:e2:5e:bf:ba:66:1a:90:48:b2:7d:
45:15:11:20:a3:ee:01:5a:b8:92:cb:4f:fb:f0:fa:
d2:48:6e:e3:78:d3:fa:33:69:e3:a3:83:c5:ed:ee:
8a:c5:bc:f0:3b:cd:8b:8a:66:bc:9c:7a:fc:75:f9:
f2:e5:ba:56:55:3f:a8:db:85:95:3a:e2:76:63:57:
2f:23:ac:8f:c6:55:0b:9f:06:7e:a6:77:b2:c4:18:
00:76:21:9a:32:e8:60:2b:e9:c1:2f:f2:2b:fd:ff:
4d:4a:9c:78:59:f3:b8:32:7a:5f:20:e0:20:a0:da:
66:bf:d8:9d:3c:ee:3c:b2:13:3f:26:0f:f3:da:24:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:5A:79:F8:92:AD:6B:39:4B:AD:06:7D:70:19:CC:6B:A7:08:FB
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/hqdaefiSrWs5S60GfXAZzGunCPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
23:37:a7:d6:62:c5:7b:db:cd:e9:b2:06:a1:25:15:09:9b:8d:
d3:6b:5a:40:5a:b6:86:28:f8:a1:32:70:84:71:f3:29:07:5b:
0c:5d:51:c0:ce:e6:61:7d:3f:6d:fb:12:11:3d:ab:20:21:3f:
38:57:01:4f:38:fb:a3:6f:59:88:c9:1b:5d:db:bc:d1:ad:f4:
e5:d5:8d:42:b7:ce:80:b5:81:71:05:e0:d9:76:eb:d9:51:cd:
27:77:ee:6e:4d:2c:48:19:d0:f8:50:7d:fa:aa:99:b1:83:fb:
8a:a0:f5:ec:dc:60:64:27:20:ef:3b:66:e8:98:09:27:3a:35:
b9:40:0b:eb:88:0c:e9:de:77:47:15:8d:04:eb:a4:b2:8e:bb:
76:f1:85:f2:15:19:fe:c3:9d:08:77:23:ea:fb:fb:ed:85:85:
1f:82:b5:21:37:48:8b:ff:2d:22:2a:09:f6:be:62:2a:04:71:
77:79:2c:b3:da:30:d4:fa:45:fa:95:f2:5b:8e:0b:97:f6:d1:
e5:87:0e:67:ae:fc:7a:5b:f9:a8:59:98:28:bd:17:a2:c6:6f:
b7:98:68:ce:26:d9:1f:c8:91:62:bb:7a:84:0d:a6:fd:2f:89:
d8:13:fe:95:e0:37:46:b7:94:b2:f4:aa:80:c1:c8:3e:e5:eb:
cf:32:6c:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:01:11 2025 by rpki-client