Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lloNsvp-LDtPfcbUBfZMrYZfHSA.roa
File: lloNsvp-LDtPfcbUBfZMrYZfHSA.roa (raw, json)
Hash identifier: XhIiyu6pNRkPGXwXslbQbr5kils580SZ0EcpSqSZcbo=
Subject key identifier: 96:5A:0D:B2:FA:7E:2C:3B:4F:7D:C6:D4:05:F6:4C:AD:86:5F:1D:20
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019776F0205133F3E8BBADF2EFB71BCA4CC0
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lloNsvp-LDtPfcbUBfZMrYZfHSA.roa
Signing time: Mon 16 Jun 2025 04:12:17 +0000
ROA not before: Mon 16 Jun 2025 04:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 16 Jun 2025 05:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:f0:20:51:33:f3:e8:bb:ad:f2:ef:b7:1b:ca:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 16 04:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=965a0db2fa7e2c3b4f7dc6d405f64cad865f1d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:46:9e:32:e8:e3:b0:f0:34:ba:30:ae:a6:
2c:50:1c:57:85:91:f8:97:e0:83:97:ae:45:17:15:
64:ea:05:e1:57:34:75:ce:87:88:ec:5f:45:cc:89:
e7:13:8e:f4:eb:0c:1d:b0:df:1d:09:34:3b:2c:a7:
22:c3:51:8e:59:c0:37:16:82:ac:13:da:db:63:8b:
08:8b:19:eb:da:1c:cd:9b:5b:d5:16:45:3f:90:06:
3f:ee:c0:a8:fc:7c:a2:2b:d6:5b:bc:9c:1f:a8:ce:
58:9e:8d:12:98:7b:71:8a:44:b9:8b:0d:e9:4a:c4:
3d:07:d3:bd:9f:ca:0a:9f:1e:c7:46:23:7c:27:84:
79:c6:16:70:38:26:10:56:f6:8c:54:23:d4:02:1f:
48:74:f9:9d:a7:15:22:a7:0c:79:5d:0f:ec:40:45:
82:6c:b6:be:00:4d:d4:5b:03:9f:a2:cf:6c:e3:35:
6b:df:e6:bb:66:4b:31:3f:98:46:2d:c8:b5:c6:2c:
9d:d5:31:27:4a:83:42:8f:9b:06:61:45:6a:54:8c:
b6:35:7e:5f:69:25:99:bd:05:32:6f:dd:d2:df:6f:
16:7a:8b:60:4e:66:5c:e1:ac:24:67:f7:a6:32:97:
0a:b6:9e:6a:79:c9:00:a0:15:a3:70:21:b0:99:5d:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5A:0D:B2:FA:7E:2C:3B:4F:7D:C6:D4:05:F6:4C:AD:86:5F:1D:20
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lloNsvp-LDtPfcbUBfZMrYZfHSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5a:74:91:03:cf:61:1f:e5:c5:2d:50:7f:99:df:4b:23:b5:39:
6d:52:54:b2:b8:bd:5f:f9:b7:42:3e:db:5c:c1:69:cf:5e:d7:
85:78:c1:1b:c4:e8:91:d4:4c:e0:13:49:41:d2:4e:d5:13:55:
2a:43:78:08:06:85:d7:90:f2:73:ab:a0:00:fd:4c:93:2f:0a:
7d:f1:46:21:32:11:08:ec:74:3b:69:69:2b:65:eb:9d:3b:28:
aa:50:cd:ba:6f:af:83:68:12:6f:82:d4:ea:ed:4a:85:dc:c5:
79:25:2e:64:b6:b7:0c:48:71:cd:30:2a:91:b4:d0:cf:a1:b0:
c4:43:3b:5c:70:27:f7:80:6e:bd:38:11:20:12:c0:0e:a1:6b:
88:69:46:a6:36:92:2b:f4:c6:eb:d8:0a:8a:6f:ae:88:04:eb:
c6:a1:fb:2a:b9:8f:c9:9d:6a:7d:00:14:dd:01:57:55:3d:eb:
b7:f2:9e:32:84:4e:2a:b3:66:7b:86:e2:1c:2c:d6:38:a9:e6:
89:8a:4d:00:14:bd:54:4f:ba:e8:19:a4:e5:78:84:b3:ce:3f:
f2:d3:17:45:a3:a2:70:b8:71:f3:4f:86:cb:85:2f:ae:24:c4:
86:59:e7:f8:74:18:5b:ac:93:ce:f8:6d:93:f1:a2:95:fe:34:
c4:64:1e:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:17:56 2025 by rpki-client