Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/inTxUEefeafsznqH7GWRHZTBzGE.roa
File: inTxUEefeafsznqH7GWRHZTBzGE.roa (raw, json)
Hash identifier: PY0cFaf8S9ivgzYtXecC7u5os0i/LYEz3bZvu/t7Q7M=
Subject key identifier: 8A:74:F1:50:47:9F:79:A7:EC:CE:7A:87:EC:65:91:1D:94:C1:CC:61
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197761725FF71A26587422FA2F59E4688DC
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/inTxUEefeafsznqH7GWRHZTBzGE.roa
Signing time: Mon 16 Jun 2025 00:15:17 +0000
ROA not before: Mon 16 Jun 2025 00:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 01:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:17:25:ff:71:a2:65:87:42:2f:a2:f5:9e:46:88:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 00:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a74f150479f79a7ecce7a87ec65911d94c1cc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:27:00:57:e1:f0:d7:21:c4:3f:f7:4c:3f:ee:
59:3b:e9:06:78:e9:12:d4:a3:5e:d4:1d:68:0c:58:
60:f3:08:17:5d:7b:5f:12:99:fd:b4:d6:2b:b7:59:
28:4a:b2:70:03:ac:74:3e:83:f9:0b:d4:4d:e1:18:
3e:fb:a6:cf:46:7a:da:4e:5b:89:f3:d6:a2:b1:0f:
94:25:cd:a3:e1:90:27:b2:21:34:6a:0b:23:f2:a4:
ff:03:03:02:97:41:7f:91:94:5f:0a:95:2a:4a:63:
97:77:00:61:88:a5:a9:4d:af:3c:4a:36:9e:cc:c3:
10:75:2c:5a:7c:bc:19:27:b4:60:1b:3f:41:b4:ae:
07:f3:19:4e:2b:78:84:d7:cf:3d:01:99:90:06:bd:
cc:44:77:0a:3a:1c:d6:ba:9d:c2:60:cd:aa:d6:b0:
01:67:f4:8e:87:8e:8c:0e:58:1f:9b:cf:e6:3b:38:
5e:3f:f8:97:da:e3:18:2c:ed:a5:92:05:c7:ef:2d:
cf:0c:4b:43:93:08:56:4e:8e:3d:62:d6:eb:45:81:
8f:51:16:5c:f7:e7:b8:da:64:29:2d:84:4f:01:32:
b0:7b:cb:72:22:26:3a:cf:a3:72:59:ea:af:d9:dc:
bf:58:d0:f5:a6:63:dc:8f:b8:20:83:d8:37:21:6a:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:F1:50:47:9F:79:A7:EC:CE:7A:87:EC:65:91:1D:94:C1:CC:61
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/inTxUEefeafsznqH7GWRHZTBzGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
7c:2a:88:84:25:14:64:82:91:c6:a5:59:36:39:1a:6e:90:87:
c3:51:d3:78:57:7a:df:f3:7e:69:91:54:05:69:73:a5:7f:86:
c2:73:d8:f1:2b:39:1a:0c:76:6f:73:f9:cf:83:5d:62:76:9d:
3f:03:1e:e4:b8:91:ec:b4:53:48:d7:f5:7c:db:ac:35:a7:70:
bf:af:8c:20:de:62:43:93:2b:d4:0d:ab:7a:91:a6:29:c6:7d:
14:e8:16:a7:a9:13:14:51:fc:a8:ff:1f:95:cd:f1:56:dc:c1:
f0:92:9e:34:48:03:26:5b:aa:73:f5:55:e3:84:0c:e1:b6:6d:
71:8e:60:7f:88:6f:1a:fc:32:49:64:18:f7:b6:5e:b7:83:f2:
c0:b9:f9:76:8a:33:81:95:1d:91:9a:a8:62:01:89:4f:de:0a:
1a:7b:05:75:a8:ca:ff:f6:8f:ef:3f:76:01:00:97:41:e3:47:
a4:22:b5:40:a3:3a:d9:8e:b6:0b:8b:56:82:18:22:96:04:eb:
6b:05:05:7e:0f:13:58:55:d9:86:17:7a:65:7a:d4:9a:f8:78:
c9:77:c5:34:88:0d:98:48:28:39:f8:ed:c1:a5:07:a3:25:13:
d0:69:95:bc:c4:33:13:48:3b:de:ac:05:66:83:d4:a0:80:8a:
53:9b:ba:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:41:29 2025 by rpki-client