Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mSYeX1jsIqNSwSz8q4R11_QCxMk.roa
File: mSYeX1jsIqNSwSz8q4R11_QCxMk.roa (raw, json)
Hash identifier: jRh9cf3jMulGh8NzllhIgF1t0NkGpzUPaVwqAvdugF8=
Subject key identifier: 99:26:1E:5F:58:EC:22:A3:52:C1:2C:FC:AB:84:75:D7:F4:02:C4:C9
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AD04314610C8934FD8622C2186CD1A59
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mSYeX1jsIqNSwSz8q4R11_QCxMk.roa
Signing time: Thu 26 Jun 2025 16:13:42 +0000
ROA not before: Thu 26 Jun 2025 16:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 17:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:04:31:46:10:c8:93:4f:d8:62:2c:21:86:cd:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 16:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99261e5f58ec22a352c12cfcab8475d7f402c4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:1a:3d:61:7b:d8:34:33:12:3e:30:34:98:
0e:96:cc:e3:f1:7d:cf:63:65:93:23:a7:87:f3:d5:
e9:13:38:97:9d:44:cb:fa:86:23:5f:2e:f7:89:cd:
e9:0b:83:e5:c1:33:5f:f2:8b:d7:8e:15:9c:aa:27:
4d:6a:56:6a:14:3a:a5:1a:32:e8:2d:91:87:4a:bc:
07:d5:83:4d:4a:06:31:5d:ce:0c:6c:3f:e1:95:8d:
c8:f6:6a:d9:8f:e5:34:49:2b:ec:f4:e3:15:3d:8c:
18:b2:21:5f:76:35:ec:65:45:1b:c5:53:07:45:33:
af:e9:d3:15:62:40:95:80:69:32:23:06:29:5f:e2:
8d:aa:ce:04:0a:5d:56:5f:7a:6c:3f:19:45:ee:00:
57:63:7d:cc:44:51:ff:0b:ed:20:c1:8a:13:8b:eb:
31:95:05:bd:f2:d7:07:48:6c:f9:62:45:39:ba:78:
1f:6a:60:b2:61:6b:6e:56:b2:62:09:ae:ae:69:2e:
4e:ba:c5:7b:e1:c1:ec:da:f4:54:ff:2e:d4:1d:43:
27:dc:a7:19:21:a2:14:17:1f:35:f3:44:c0:6c:ca:
72:e9:87:76:fc:0b:73:9d:df:52:0a:bf:f8:ed:2d:
0c:a2:bb:1d:a8:c8:55:a2:48:ee:d4:ae:a3:89:31:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:1E:5F:58:EC:22:A3:52:C1:2C:FC:AB:84:75:D7:F4:02:C4:C9
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mSYeX1jsIqNSwSz8q4R11_QCxMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
19:4f:bb:4f:4d:90:f9:70:6b:6e:bd:19:29:7a:ea:f0:22:3c:
99:fd:a7:58:5f:3f:ee:49:6a:db:f7:dc:03:75:75:a9:0f:6a:
8e:26:5d:ff:ac:7d:c2:45:fd:7a:79:48:8e:68:de:57:d3:ed:
80:f8:3b:a1:58:85:54:de:2e:b2:a5:6c:cf:07:6f:b4:7c:79:
49:68:7a:0e:15:a0:49:8d:1e:9c:ee:aa:c7:08:71:65:9c:13:
6f:f4:89:f4:52:fd:25:68:99:a1:79:2b:a1:86:24:42:2b:df:
8b:44:94:28:d0:b1:0b:2f:1e:94:d3:6e:da:21:8f:87:b8:5b:
cd:fb:d0:39:6b:f5:3d:28:54:ef:f6:e2:af:6c:9a:13:1a:dc:
8a:61:75:be:ed:b4:39:fb:45:a0:1d:f7:d2:11:ff:e5:f9:ae:
5a:77:eb:51:c6:a0:54:cf:23:30:68:04:bd:26:d9:f9:bc:87:
fb:e6:d2:82:60:15:c6:5f:a4:61:59:66:d1:43:62:7f:01:30:
a5:a6:f0:9c:99:81:2f:26:b8:ec:d6:a8:92:15:ae:96:33:c3:
53:75:c1:09:43:f0:56:50:07:52:c1:8f:e4:c6:2e:28:bc:13:
d0:23:6b:c1:ab:22:85:9f:ee:74:f6:45:bc:0c:97:44:43:06:
d3:54:48:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:24:34 2025 by rpki-client