Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/m6SJZrcgGatfI6yup8F_OiMhEPs.roa
File: m6SJZrcgGatfI6yup8F_OiMhEPs.roa (raw, json)
Hash identifier: PwuIrSuMoAlxz/NqiAqoR+fguau8V326kXlNzGZYwbA=
Subject key identifier: 9B:A4:89:66:B7:20:19:AB:5F:23:AC:AE:A7:C1:7F:3A:23:21:10:FB
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B9420BDB39232DF625535932F734D86C
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/m6SJZrcgGatfI6yup8F_OiMhEPs.roa
Signing time: Sun 29 Jun 2025 01:16:42 +0000
ROA not before: Sun 29 Jun 2025 01:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 02:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:42:0b:db:39:23:2d:f6:25:53:59:32:f7:34:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 01:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ba48966b72019ab5f23acaea7c17f3a232110fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:9e:2b:db:2d:f4:6a:46:ca:33:48:a7:c2:
7d:a5:7f:0f:88:5b:0a:91:88:19:03:50:95:cc:b6:
11:cb:0e:37:1c:e2:68:12:5b:cf:90:70:e6:4f:4b:
ea:27:86:49:2a:7c:91:69:6f:a6:d0:35:3d:5f:e4:
a0:80:e1:bb:12:bb:c6:dd:37:a1:37:6a:b6:fb:0b:
85:36:b2:06:bf:6a:0f:78:66:6a:6a:f2:7f:ee:0a:
63:40:e7:30:f3:ca:21:42:d8:48:4a:a3:9b:19:6c:
2f:4c:44:6b:58:19:a3:83:db:eb:a5:87:d2:af:b9:
a2:c1:1a:93:6e:b5:4c:76:56:8d:22:b0:8f:2b:ab:
f4:31:02:14:ef:56:d3:be:9f:d6:70:5c:00:8b:42:
34:70:b0:a3:95:58:bf:06:58:d3:91:45:a3:15:75:
5d:07:e4:83:c8:1d:05:18:ab:8f:7f:5c:64:cf:43:
e7:f9:66:a5:b6:89:c7:92:8b:60:14:2d:ee:ad:83:
1c:26:4e:59:eb:aa:84:e9:00:23:d0:b7:30:77:00:
09:3b:64:18:ce:36:c7:cd:34:5d:6a:c8:1f:48:ed:
36:7f:4a:22:05:13:4a:95:31:5e:24:ef:41:ab:ab:
cb:a1:e7:ba:cd:93:e8:48:89:e4:b8:b1:ce:b2:45:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A4:89:66:B7:20:19:AB:5F:23:AC:AE:A7:C1:7F:3A:23:21:10:FB
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/m6SJZrcgGatfI6yup8F_OiMhEPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
31:d5:1d:e1:59:d2:d3:ca:88:d1:88:b3:b5:40:db:ff:88:93:
e3:a2:ff:a0:f1:b8:57:51:1a:ce:ff:fc:31:b1:53:13:41:75:
4d:50:08:41:0e:5b:f1:3d:39:69:f1:b8:bb:0c:db:28:5c:9c:
9e:7c:39:b4:97:69:90:69:e9:90:6c:4d:3f:e8:60:46:9e:03:
bf:6c:72:0d:d1:a9:6c:36:e7:71:47:86:05:b5:a5:20:cc:c8:
12:c6:49:1d:4b:72:0f:6f:f3:67:9e:2c:c3:af:02:9f:9d:8b:
8b:58:bd:15:34:94:63:95:12:21:ae:81:48:d8:17:32:af:0e:
60:7b:37:e8:af:26:2e:22:a4:45:26:fe:95:9c:0f:49:88:32:
1c:02:5c:c7:e6:a2:a3:2c:3b:2f:51:7e:ff:e4:03:b6:ab:16:
68:dc:7b:fd:38:df:9d:73:dc:b1:cd:b3:2f:b5:ad:f3:b6:2c:
9f:1e:13:d2:c3:23:c4:d5:5b:69:4b:c8:cd:87:23:38:ae:59:
a9:3d:cb:27:69:c2:44:c7:67:1a:10:0e:cd:30:c6:e9:23:58:
3b:2d:0c:7a:ca:94:3c:8a:ab:94:05:05:c1:fe:f9:f6:5c:77:
40:43:54:1c:80:f9:33:14:19:a1:a3:e0:17:61:70:2d:89:1d:
6a:24:6c:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:46:07 2025 by rpki-client