Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/npLwzhRorrAqAvtqhXZ9RYjFMIU.roa
File: npLwzhRorrAqAvtqhXZ9RYjFMIU.roa (raw, json)
Hash identifier: xBgl205x8xmU5ZokfyLnC1UPNnsTtnVvL9E3V8QIu8k=
Subject key identifier: 9E:92:F0:CE:14:68:AE:B0:2A:02:FB:6A:85:76:7D:45:88:C5:30:85
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B52AADC33B011A4D01960B0BD2041525
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/npLwzhRorrAqAvtqhXZ9RYjFMIU.roa
Signing time: Sat 28 Jun 2025 06:12:42 +0000
ROA not before: Sat 28 Jun 2025 06:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 07:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:2a:ad:c3:3b:01:1a:4d:01:96:0b:0b:d2:04:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 06:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e92f0ce1468aeb02a02fb6a85767d4588c53085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:45:a2:98:84:66:ad:c0:87:4b:2b:56:68:
51:da:ec:45:13:cf:30:8d:e4:44:51:a5:b9:c6:c4:
43:02:4f:9d:d7:8b:7f:96:78:f0:61:db:c5:2b:4c:
89:c8:bf:f4:eb:4d:cc:5f:56:bd:23:e2:c8:2c:8e:
ae:e8:bc:eb:38:52:25:d8:d4:67:58:af:b1:50:06:
5d:fa:03:7f:e4:4b:4c:a1:6d:52:9d:3b:cc:12:59:
ce:fd:88:06:fc:a3:cc:02:f5:d1:52:2c:67:bc:4d:
81:80:2c:4b:89:2f:1a:d3:cd:ef:71:b5:28:94:8c:
d5:d1:70:32:39:c4:24:b8:c3:11:1d:97:d2:d1:d9:
f2:ce:11:cf:e7:b6:ca:08:7e:ab:8e:b9:77:d8:4d:
48:39:ae:f4:e8:6b:f5:58:22:ac:a0:19:ef:53:b1:
49:5b:21:8f:cf:d2:97:a5:02:1d:73:ac:1e:5b:2f:
49:63:f6:45:8c:8d:cc:7b:2c:47:f1:8b:56:cf:d2:
e8:30:75:27:40:ef:b9:de:7b:0d:14:a1:33:d9:c9:
52:e5:5f:7a:8d:36:38:1a:6c:b3:6d:ed:d3:12:b6:
42:d3:a0:76:0f:dd:a4:75:f3:a3:07:b1:6e:75:f0:
d8:b0:cc:32:d1:e5:51:7e:01:a8:c2:63:3b:5a:cd:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:F0:CE:14:68:AE:B0:2A:02:FB:6A:85:76:7D:45:88:C5:30:85
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/npLwzhRorrAqAvtqhXZ9RYjFMIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
3c:05:6a:ab:cb:dd:b1:15:e8:ad:70:5d:5c:f6:a5:62:c3:ea:
f1:06:bd:aa:39:d3:a0:52:cd:aa:f7:ae:46:85:df:5d:92:f9:
ce:31:73:9a:5c:58:e6:68:32:32:23:52:0a:05:8c:c3:2a:53:
49:64:25:1a:af:6b:7b:f4:2f:67:22:64:af:45:c8:b0:b6:06:
ff:cd:28:34:c5:e4:f0:a2:fd:ba:4c:ae:b9:63:6d:ae:19:21:
54:5a:a2:5e:8b:c3:4e:06:a2:39:d3:57:95:1d:e1:0c:70:37:
3d:c9:bc:4d:5d:22:66:64:60:49:ed:c2:1c:7c:34:ab:c5:f9:
79:a2:94:82:8f:21:63:e9:1a:e6:35:68:04:cc:77:70:67:86:
53:29:7e:53:f9:04:e3:c6:c6:fa:24:36:79:90:59:01:32:f2:
f5:58:65:70:e3:aa:12:ae:8c:82:fd:1a:07:ab:c8:59:86:22:
e3:0c:89:76:a9:42:54:66:a7:76:3e:02:7d:98:0b:f4:ef:d1:
62:bd:cb:14:3d:2d:50:3c:70:e8:76:08:c2:91:ea:23:20:bc:
c6:84:34:dd:8c:db:c6:35:06:9f:e3:36:4c:9c:dc:1e:3a:de:
15:7c:67:66:41:23:fb:01:3e:54:fb:77:05:db:ba:8a:d0:69:
7b:72:fa:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:54:28 2025 by rpki-client