Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/jGTtMKSqA7s1MRxW02tyWwQBX68.roa
File: jGTtMKSqA7s1MRxW02tyWwQBX68.roa (raw, json)
Hash identifier: r4bwyq5D66Sxn3ffqYRPxAg3uifZlKWO3X7Xqit6kl4=
Subject key identifier: 8C:64:ED:30:A4:AA:03:BB:35:31:1C:56:D3:6B:72:5B:04:01:5F:AF
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B0D8B984961FC290F688E75D3BBF09C6
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/jGTtMKSqA7s1MRxW02tyWwQBX68.roa
Signing time: Fri 27 Jun 2025 10:04:42 +0000
ROA not before: Fri 27 Jun 2025 10:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:b0d8:3060/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 10:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:d8:b9:84:96:1f:c2:90:f6:88:e7:5d:3b:bf:09:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 10:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c64ed30a4aa03bb35311c56d36b725b04015faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:f5:bb:42:0a:c8:d9:e4:ac:c3:ff:a5:69:
6e:2c:00:8c:16:56:7e:fe:fd:e5:32:3b:82:e8:5d:
d4:8c:d1:74:5c:5d:7d:b8:35:c0:ec:1a:38:b1:cd:
ce:ec:1d:26:5e:5d:db:9e:24:62:44:b2:ac:c8:9d:
18:da:49:7f:97:d7:0f:94:99:50:2c:8e:0d:a2:23:
99:74:be:60:c1:a7:f3:ba:5f:e1:09:08:ad:b4:a4:
76:e2:bb:25:94:8b:a0:9d:9d:60:67:37:5b:14:17:
6e:48:b7:0b:21:99:ad:92:b9:39:e7:43:03:5d:06:
a0:88:8b:4f:37:1b:ed:24:e5:92:e9:b1:65:ed:2c:
65:7b:b6:2c:f3:d5:fe:35:bf:0b:3c:ac:d7:e6:3a:
3c:6c:61:2c:73:39:96:5a:7a:38:af:68:5d:8b:20:
10:63:30:9d:5c:59:49:d5:5e:c9:48:a0:e6:32:4e:
4c:c5:ec:15:94:85:e2:05:0b:36:45:98:d8:82:7e:
16:a2:b3:b1:5f:f9:12:69:71:ea:44:40:f2:7f:95:
3e:a9:76:67:e5:23:23:97:6d:ed:6d:0c:97:bd:37:
4f:d0:9a:32:fd:64:61:f9:fa:fb:50:28:23:98:b8:
d8:95:0b:54:8b:73:a3:79:ac:8e:2e:08:11:77:07:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:64:ED:30:A4:AA:03:BB:35:31:1C:56:D3:6B:72:5B:04:01:5F:AF
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/jGTtMKSqA7s1MRxW02tyWwQBX68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:b0d8:3060/128
Signature Algorithm: sha256WithRSAEncryption
59:8c:bf:7c:21:83:b6:57:bc:46:9a:57:33:d4:57:c3:9f:65:
0c:a6:83:db:97:d7:f5:f2:5c:d2:da:44:a8:46:35:39:a9:0d:
45:23:3d:9f:77:66:7c:01:9e:93:2a:ba:27:1b:7c:4a:9f:c8:
d4:5e:2a:af:2c:6f:3b:33:39:ca:cc:7e:61:4f:d2:f3:87:cf:
76:6a:53:92:9f:d0:e6:42:0e:66:eb:47:51:a9:fd:ae:66:e6:
84:e9:39:a1:eb:c5:fd:25:39:2e:1c:05:06:4e:7b:11:64:fc:
57:cd:53:cd:e0:e4:0b:40:d8:fd:ff:b5:3f:a7:50:c3:84:81:
4a:4d:30:68:d9:da:94:53:69:80:11:30:c4:8a:cb:bc:94:84:
94:4e:39:de:67:4d:b2:f0:d5:f8:00:38:09:da:ca:71:32:ba:
b5:28:f7:46:57:cf:94:2a:e4:63:88:53:bb:eb:cb:ba:28:d1:
73:e2:ea:84:09:c0:2a:45:93:cf:90:f2:54:24:68:6f:7e:31:
37:86:e3:0c:44:98:8e:71:0f:5f:c8:44:3b:cf:df:47:93:63:
85:60:59:9b:9c:a2:8e:29:eb:b8:58:49:09:b2:4b:a0:d3:5d:
22:a7:62:af:12:fd:16:b9:30:56:84:a1:df:0e:b9:28:31:b4:
fc:fa:1a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:36:52 2025 by rpki-client