Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mjYLWWWnvQgrS3o_pBBkvaaqsNo.roa
File: mjYLWWWnvQgrS3o_pBBkvaaqsNo.roa (raw, json)
Hash identifier: xgCChzaRG2e52/1W8hfiI0RRnJLsI6tn2zKKdiDa3sk=
Subject key identifier: 9A:36:0B:59:65:A7:BD:08:2B:4B:7A:3F:A4:10:64:BD:A6:AA:B0:DA
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979F4AB767DA514B09C8C9EA45C3FE848C
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mjYLWWWnvQgrS3o_pBBkvaaqsNo.roa
Signing time: Tue 24 Jun 2025 00:16:03 +0000
ROA not before: Tue 24 Jun 2025 00:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 24 Jun 2025 01:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9f:4a:b7:67:da:51:4b:09:c8:c9:ea:45:c3:fe:84:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 24 00:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a360b5965a7bd082b4b7a3fa41064bda6aab0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:e9:db:8a:25:62:f6:7e:a7:a9:64:eb:1b:
0e:21:39:77:b2:38:d0:f6:b5:cf:1e:f5:dd:d0:b4:
37:79:06:49:36:13:70:0e:3d:8a:30:59:d3:fd:58:
82:66:ae:b2:d6:c8:6b:11:ab:1a:d5:02:d2:65:84:
65:77:9f:e3:19:d9:70:1c:e3:ac:0a:71:08:17:e4:
6d:4d:49:af:0d:bc:e8:7b:b8:4c:0b:6f:5d:a6:7d:
be:36:a1:5e:39:d5:cf:40:5e:90:ec:88:65:39:ee:
39:0f:98:d7:eb:7c:1a:88:15:ab:58:a7:a3:0c:21:
de:00:15:5a:da:41:09:a6:45:55:8e:b7:6a:f9:2d:
3b:cb:76:bc:56:eb:6d:54:57:4d:cc:53:52:19:ac:
e9:89:7b:ab:37:ff:4f:fa:7f:5b:f5:c4:03:ba:0b:
8d:86:f3:b5:39:83:86:3f:82:a8:3e:42:f8:51:00:
50:24:9c:fa:db:ab:bc:da:40:42:47:b6:7c:90:f4:
97:14:8a:d2:61:ae:96:d5:f4:27:95:b7:a5:11:c6:
28:29:0b:61:6e:59:00:47:7f:2e:ff:88:a4:25:01:
54:29:16:86:1f:28:bc:f9:e7:bf:38:9a:a7:9d:df:
2f:4a:72:8d:d3:ac:bf:d0:52:51:eb:c9:15:42:ab:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:0B:59:65:A7:BD:08:2B:4B:7A:3F:A4:10:64:BD:A6:AA:B0:DA
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mjYLWWWnvQgrS3o_pBBkvaaqsNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
20:e1:21:0e:e0:9f:08:be:28:9d:9f:0e:86:64:36:1e:28:5a:
7d:20:50:d4:92:44:35:5f:a7:93:3d:1d:cd:4d:22:2b:3c:f0:
4f:e3:0c:09:98:18:66:63:9e:77:94:61:ff:fe:92:a0:70:6f:
12:ee:aa:65:c7:a6:52:17:0a:5d:1d:c4:58:89:79:5b:5a:0d:
50:25:b1:6b:43:6f:fb:12:47:0d:09:0c:87:2f:b5:4b:20:3c:
54:f7:ae:3a:95:ce:f4:e3:fd:a6:4b:51:63:61:69:0c:25:8b:
5d:f4:c0:cf:43:99:5c:1e:0f:97:b6:7b:6e:f5:0b:8a:3f:7b:
2c:d3:70:71:4f:b0:02:35:cc:12:d1:87:f6:4b:42:93:6f:60:
9d:05:3a:8a:fb:b9:66:c4:39:c6:9f:31:d5:be:3a:d3:c9:69:
20:89:b4:42:26:2c:07:a6:da:bc:48:5f:9d:e9:b2:ae:3a:02:
34:a5:93:12:7e:63:be:5c:9e:bf:5b:c5:9a:81:61:c8:c1:44:
0e:91:c2:9e:d0:a8:f1:54:ca:0a:3a:bb:15:db:15:08:0c:43:
3b:b5:2f:99:5f:6f:a3:53:4f:f6:35:1c:44:c0:57:3b:b2:16:
66:a5:f0:fa:70:b3:1c:47:67:c9:f4:38:73:91:12:0c:e0:9b:
a3:1a:1e:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:19:18 2025 by rpki-client