Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mzT-dLogXEElXOuXPWJAGOkU85I.roa
File: mzT-dLogXEElXOuXPWJAGOkU85I.roa (raw, json)
Hash identifier: sq1blwrhshawxHDujB50eiKKDtxRg4x0JzXWDn3LYww=
Subject key identifier: 9B:34:FE:74:BA:20:5C:41:25:5C:EB:97:3D:62:40:18:E9:14:F3:92
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C767DEB4C977BDB8353E66B6158B98B1
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mzT-dLogXEElXOuXPWJAGOkU85I.roa
Signing time: Tue 01 Jul 2025 19:12:42 +0000
ROA not before: Tue 01 Jul 2025 19:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 20:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:67:de:b4:c9:77:bd:b8:35:3e:66:b6:15:8b:98:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 19:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b34fe74ba205c41255ceb973d624018e914f392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:74:96:87:a9:f0:cf:d0:c5:58:1c:fd:b7:
09:98:e8:c6:fa:64:c1:73:59:72:8f:8f:92:19:33:
df:16:07:5d:77:cb:29:70:71:75:4f:ad:ff:03:e4:
d1:96:20:ae:8c:c3:a5:9e:5d:b2:75:a6:b4:db:a8:
fa:b5:b7:45:74:51:20:86:6d:98:b0:b1:2d:c3:18:
c1:1d:89:ff:d4:88:1e:99:8e:6e:d3:14:fb:fb:d1:
8c:6d:77:5d:d7:40:ae:37:89:91:44:fa:34:c3:60:
b1:ed:a6:06:ca:74:24:62:dc:1f:ad:90:59:f8:af:
ca:4e:a3:c5:da:9d:cf:06:68:0c:02:98:0f:b0:4d:
3a:3a:da:82:8e:86:14:eb:d7:c6:eb:91:91:c2:10:
71:a3:72:85:28:e7:e8:9e:d9:14:61:36:58:a8:b1:
75:96:df:df:ed:ad:93:88:fb:87:ec:a5:c2:f8:50:
90:4f:97:d3:cf:fc:18:74:83:53:a5:9f:3d:7b:98:
95:4c:fb:90:b7:7a:77:ad:91:3b:20:38:6b:db:25:
e4:72:64:8a:db:89:25:83:16:8c:b8:1a:c7:e4:7e:
36:65:3a:66:cc:2e:f9:63:ad:39:97:04:11:11:ac:
7e:07:25:b4:9b:cb:66:ce:33:6e:b5:89:ab:e1:15:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:FE:74:BA:20:5C:41:25:5C:EB:97:3D:62:40:18:E9:14:F3:92
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/mzT-dLogXEElXOuXPWJAGOkU85I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
6c:d4:52:f5:9d:40:e8:14:86:6c:53:cd:a0:21:09:27:4a:e6:
4d:c6:d0:61:27:93:1b:c3:ef:84:08:24:43:94:b0:a7:fb:f4:
33:d1:30:af:0d:7f:cd:40:df:00:58:d4:7f:7a:e0:ff:e8:56:
4a:59:9d:a0:0b:fb:a4:0e:b7:c4:cc:13:2d:27:07:47:48:b4:
97:fd:d4:37:80:8f:03:09:12:17:68:84:a7:25:17:5e:81:c4:
b8:f6:ca:d7:be:a7:03:26:b1:d1:e4:9c:73:90:64:f2:a1:00:
6f:0f:75:ab:fc:a3:a3:c4:15:a9:0f:af:46:41:08:2a:6a:46:
58:c5:d9:45:ce:e0:c0:3e:16:c2:87:24:81:68:2a:45:0f:b7:
fd:36:a5:5e:10:55:bc:9b:84:80:08:c0:11:71:87:a1:02:62:
5e:5e:69:58:d2:9b:c9:bb:8d:60:95:80:24:a0:d5:92:c9:d5:
5c:21:ec:1b:97:36:b8:93:a6:e5:58:53:96:eb:b5:c7:78:1c:
30:60:b9:33:4e:62:46:d7:51:4a:e9:24:db:84:d0:d7:22:88:
f0:54:6e:2c:74:1d:97:93:20:e9:e5:c9:c6:57:d9:1a:31:bb:
79:84:85:48:28:94:64:3c:b6:b4:0a:09:34:07:22:fa:83:7f:
a9:3f:1e:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:05:31 2025 by rpki-client