Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lNn51KO0y1PltTKzK4p59Mds2es.roa
File: lNn51KO0y1PltTKzK4p59Mds2es.roa (raw, json)
Hash identifier: Tkb+qF+NKqAo/1ndIecGHWKwvMK6dOd9Bxi+3uJC3Jo=
Subject key identifier: 94:D9:F9:D4:A3:B4:CB:53:E5:B5:32:B3:2B:8A:79:F4:C7:6C:D9:EB
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C84482D3D60B00C61DFF434B4D79CA19
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lNn51KO0y1PltTKzK4p59Mds2es.roa
Signing time: Tue 01 Jul 2025 23:13:42 +0000
ROA not before: Tue 01 Jul 2025 23:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 02 Jul 2025 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:44:82:d3:d6:0b:00:c6:1d:ff:43:4b:4d:79:ca:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 23:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94d9f9d4a3b4cb53e5b532b32b8a79f4c76cd9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:e9:c3:a6:cc:a2:3b:db:6f:28:65:da:a9:
1d:02:02:49:b5:1a:3d:13:1a:df:16:7d:ff:30:7a:
e0:22:2d:5d:e0:79:a6:e3:cd:03:39:6a:7c:5a:40:
55:a8:11:3b:d3:37:2f:ef:4e:b7:32:2e:f2:5b:c0:
c9:98:60:75:69:42:18:f0:a5:79:f5:d2:9e:31:d5:
87:ca:00:23:d9:1a:10:a7:04:08:01:21:c3:83:31:
b6:45:b9:4e:d1:66:81:6d:d2:59:15:1a:9f:83:f9:
fa:63:c9:e9:a3:1e:fd:4a:aa:37:76:c3:03:48:ea:
8e:27:5b:6f:fa:2d:00:e2:15:26:ab:3e:4e:6e:47:
3a:d1:cc:57:dc:bf:5c:c3:10:2a:38:b5:09:05:3c:
67:8c:f5:d7:8e:47:1f:63:88:08:84:79:11:ad:29:
20:3a:fb:82:aa:38:87:1e:26:75:02:de:83:56:a8:
09:66:66:8c:8c:99:7a:7c:fb:42:d4:b6:94:79:8a:
1c:f9:c9:36:0a:99:dd:7a:ca:04:66:59:8e:db:4b:
89:af:83:05:db:9d:ac:67:4c:fe:f5:29:78:26:04:
51:51:d0:5b:ea:5a:5b:a1:69:74:a0:65:74:ae:38:
e2:88:65:89:eb:d7:69:0b:34:f0:f4:19:7a:4c:b8:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D9:F9:D4:A3:B4:CB:53:E5:B5:32:B3:2B:8A:79:F4:C7:6C:D9:EB
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lNn51KO0y1PltTKzK4p59Mds2es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
57:bc:29:4e:1a:d4:8c:b7:1e:87:82:7c:bd:1a:7e:22:88:6a:
39:65:ba:51:c7:06:7f:0c:9d:b0:d0:89:73:69:c4:43:59:bb:
64:3f:95:74:5d:79:e8:e7:44:8c:ed:90:51:d9:84:36:59:ea:
1c:d1:8c:1e:33:61:85:9a:92:27:4b:aa:10:53:28:25:3a:52:
13:c9:e0:bd:0d:d2:23:69:89:98:9f:92:4c:04:a3:dc:11:7a:
09:cf:fe:fa:bc:50:41:6c:65:f7:08:0f:f2:55:9b:c3:c7:e3:
79:d6:03:8f:3d:76:d1:1f:5e:b1:07:06:b2:10:10:42:38:ab:
9d:a1:51:e9:23:77:ab:ad:80:e3:5d:b1:a5:25:da:1e:ae:47:
f8:bd:62:07:05:cc:86:c0:21:28:be:96:b3:51:57:4f:9f:23:
99:2a:2e:69:e3:58:81:cf:78:08:ae:3a:aa:f5:da:ec:eb:d6:
43:cf:2f:f6:69:74:50:fe:ef:61:02:e0:58:4c:86:dd:a5:a4:
f9:db:57:c3:14:77:59:40:79:ae:96:59:a1:d4:f7:1d:eb:0e:
7f:28:44:69:b3:40:86:1b:08:15:60:09:28:80:25:3c:54:73:
93:f3:52:8b:ba:b3:84:50:37:7a:c2:e4:f6:b0:c5:bf:1f:0e:
22:48:37:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:33:10 2025 by rpki-client