Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/kFATtUE_ap3bkDP4iYNrkxNi-wE.roa
File: kFATtUE_ap3bkDP4iYNrkxNi-wE.roa (raw, json)
Hash identifier: naS7/+2zPj7FRmQR4+ZfZeKHF+1G3pGhspW/9X26a/o=
Subject key identifier: 90:50:13:B5:41:3F:6A:9D:DB:90:33:F8:89:83:6B:93:13:62:FB:01
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0199C37F848983978A9889423D69ADF36FF2
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/kFATtUE_ap3bkDP4iYNrkxNi-wE.roa
Signing time: Wed 08 Oct 2025 11:05:38 +0000
ROA not before: Wed 08 Oct 2025 11:05:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:198:55a3:fcb4/128 maxlen: 128
2001:67c:64:ffff:0:198:5ff0:79dc/128 maxlen: 128
2001:67c:64:ffff:0:198:ad2f:c10a/128 maxlen: 128
2001:67c:64:ffff:0:199:70e1:b209/128 maxlen: 128
2001:67c:64:ffff:0:199:7262:3881/128 maxlen: 128
2001:67c:64:ffff:0:199:befc:c22a/128 maxlen: 128
2001:67c:64:ffff:0:199:c37e:aca9/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 08 Oct 2025 11:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:7f:84:89:83:97:8a:98:89:42:3d:69:ad:f3:6f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Oct 8 11:05:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=905013b5413f6a9ddb9033f889836b931362fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:a5:01:2b:b8:8c:7d:c6:ca:71:09:13:83:
e4:3b:8f:ef:78:37:65:66:d5:78:b1:14:dc:9d:99:
c4:bf:f5:6d:41:a9:0f:21:de:7a:fb:e2:8d:4b:b1:
93:9b:b1:32:1e:c6:39:e0:d4:4e:79:f0:c4:f1:f9:
52:76:b5:52:74:c8:4a:04:58:d6:99:0d:dd:00:21:
1e:5f:32:4c:af:8f:54:96:74:d3:d6:2b:6b:b0:e7:
a0:0e:f1:d8:0f:64:27:73:3f:5b:f6:0a:48:e0:ba:
e0:8c:fc:3a:0a:66:e9:a6:cf:3e:bd:48:f9:70:83:
f3:73:6f:87:05:f4:db:ca:08:69:0b:56:7a:9e:19:
e9:c2:56:63:64:db:96:a1:1a:30:e4:c9:20:ee:dd:
da:88:ea:b7:30:0d:56:73:60:c1:18:c9:75:29:6e:
49:2e:33:9f:d0:23:87:a8:fe:bc:7e:ed:4b:12:1e:
e4:af:16:25:63:9a:74:cc:86:d6:2b:ba:a7:b3:0a:
21:ff:e0:8f:50:75:78:92:26:3f:d7:2c:8f:5a:9a:
71:ae:d6:fc:9b:04:31:5c:73:e7:46:72:7f:ac:a0:
0f:d3:c8:89:a1:48:86:b8:a7:81:74:82:bb:11:25:
51:ea:75:f3:c1:14:65:5b:d8:c2:c6:69:c4:aa:6f:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:50:13:B5:41:3F:6A:9D:DB:90:33:F8:89:83:6B:93:13:62:FB:01
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/kFATtUE_ap3bkDP4iYNrkxNi-wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:198:55a3:fcb4/128
2001:67c:64:ffff:0:198:5ff0:79dc/128
2001:67c:64:ffff:0:198:ad2f:c10a/128
2001:67c:64:ffff:0:199:70e1:b209/128
2001:67c:64:ffff:0:199:7262:3881/128
2001:67c:64:ffff:0:199:befc:c22a/128
2001:67c:64:ffff:0:199:c37e:aca9/128
Signature Algorithm: sha256WithRSAEncryption
46:e4:df:d1:60:e2:c1:b9:a5:2a:cf:86:40:52:56:0a:89:cb:
62:f2:04:69:d2:fb:ae:17:50:1c:b3:ad:2e:1a:75:e0:1a:9d:
24:63:62:b6:6a:86:60:1b:2d:8a:b5:76:a9:54:b9:3a:29:5f:
8e:48:1b:cb:dc:8d:52:cd:8f:54:2d:32:0d:ca:0b:70:eb:57:
6e:b3:18:fc:f1:b1:06:b2:1b:4b:42:63:71:bb:80:47:2c:86:
75:aa:86:1e:81:07:e5:85:51:14:3d:62:3e:83:c3:c8:17:d9:
38:bd:1d:15:78:68:6a:6e:0c:30:4e:a2:93:3c:ae:11:c1:db:
4a:d1:41:cd:d1:9f:b1:b2:fb:5a:7e:fa:ff:fe:9a:dd:37:f1:
c6:ce:ab:71:61:b1:7b:de:d6:38:13:98:c1:25:b6:32:eb:a0:
01:ca:79:c1:fe:13:f3:81:58:66:0e:cb:00:d1:fa:58:0c:44:
1e:e5:e6:de:3f:ea:49:97:9c:f8:3e:45:49:b9:70:87:b6:35:
84:fd:a7:82:9b:9d:7f:9e:4d:1c:7b:83:30:d5:51:c9:59:16:
72:72:28:33:97:7e:e2:a3:7c:a3:c8:fa:07:f2:2b:0a:41:16:
c1:43:4b:2c:a3:26:2f:e2:99:c6:f0:8d:cd:5c:7d:79:44:4e:
63:e2:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:20 2025 by rpki-client