Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/kZhsx-ma80J8aOTw2mSHbxptPcQ.roa
File: kZhsx-ma80J8aOTw2mSHbxptPcQ.roa (raw, json)
Hash identifier: djnuoCaPYUobLNz2RzAyTC6SSeYXMHXJDjGBtD3udUI=
Subject key identifier: 91:98:6C:C7:E9:9A:F3:42:7C:68:E4:F0:DA:64:87:6F:1A:6D:3D:C4
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197A3932ACE5CDCFC84D7191DB7900B8B8E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/kZhsx-ma80J8aOTw2mSHbxptPcQ.roa
Signing time: Tue 24 Jun 2025 20:13:40 +0000
ROA not before: Tue 24 Jun 2025 20:13:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 21:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a3:93:2a:ce:5c:dc:fc:84:d7:19:1d:b7:90:0b:8b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 24 20:13:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91986cc7e99af3427c68e4f0da64876f1a6d3dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:e2:ca:86:24:dd:38:04:55:89:f9:03:dc:
de:9d:36:38:9c:d1:73:42:e7:05:b2:4a:8a:d8:af:
5e:28:3f:22:85:61:52:7b:35:79:41:67:d5:72:cb:
19:3a:c3:88:80:62:82:49:ac:df:a8:20:14:d3:95:
bc:ec:6a:32:d0:b4:1a:a8:d1:95:ef:1a:73:bc:db:
1a:7d:57:7e:21:80:cd:ec:e9:3e:3c:f0:29:c0:7a:
e5:c1:82:f2:e1:a9:37:c2:27:18:31:04:3a:60:4b:
de:0e:49:8e:21:3b:bc:99:bb:22:de:c9:26:16:6e:
5e:3e:9a:bd:c3:33:06:f8:11:ea:23:68:72:6b:5a:
96:23:f1:4f:56:49:cf:7c:bc:c3:6f:18:14:ec:93:
e2:62:bd:a7:e6:50:94:98:91:45:7d:1c:1a:a4:e8:
9e:71:f5:4a:b7:3a:89:8c:47:3c:bc:87:51:b1:7b:
74:46:92:88:73:f9:72:5d:b5:b5:c5:29:c7:dd:5d:
eb:3d:62:35:23:01:5f:c2:a8:f8:00:78:18:b2:5b:
d4:0c:32:89:2c:26:3d:06:4a:34:f0:b8:52:c2:af:
bf:f5:5f:d7:70:68:29:2d:e4:f6:06:43:7a:f1:99:
af:a7:f7:1f:d0:dd:db:05:d2:c0:37:6a:78:ba:4d:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:6C:C7:E9:9A:F3:42:7C:68:E4:F0:DA:64:87:6F:1A:6D:3D:C4
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/kZhsx-ma80J8aOTw2mSHbxptPcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
27:eb:ab:63:34:2f:85:c9:4f:d1:a9:d4:95:35:3f:bd:2e:a9:
ca:2f:ed:cf:e7:d3:38:c8:85:70:c7:85:25:90:db:b1:e7:b5:
7d:fc:56:fd:69:76:d5:db:39:5d:9d:d5:60:d0:02:f1:41:db:
93:45:2c:89:db:22:57:53:31:ea:3e:fb:8e:de:ff:36:ca:23:
9c:9f:40:20:48:71:ae:f4:4a:47:87:a2:29:c4:a5:a6:fc:84:
b6:c6:51:84:33:99:da:ca:bd:e7:3f:87:ca:69:8e:07:76:13:
29:30:cf:4f:2d:2f:32:66:28:ec:86:a5:6c:6f:be:eb:5e:42:
5c:99:22:d8:4e:a5:c9:29:f6:30:6c:be:ec:17:9c:c7:33:21:
63:d0:da:1c:c1:f5:a9:a8:b8:d8:3d:3b:38:1c:45:d8:70:d2:
24:65:de:56:f4:e6:e1:20:42:fc:93:db:1a:0a:ed:1e:61:14:
ab:28:42:19:de:f2:ed:9e:f9:3b:01:30:36:4b:b4:ca:33:b7:
da:9e:ba:d9:db:14:24:4e:8b:df:e3:f8:80:04:cb:2b:82:0e:
20:dc:50:f1:2c:2c:7b:6f:96:32:6e:27:e7:86:0d:0c:1c:9b:
97:be:43:51:74:d9:c2:ba:19:38:8c:e6:66:ee:83:57:f5:ee:
c1:70:56:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:50:15 2025 by rpki-client