Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/pE_-IVvtq0ggAmbbEKVSwPqYQ6c.roa
File: pE_-IVvtq0ggAmbbEKVSwPqYQ6c.roa (raw, json)
Hash identifier: 1mJog7HTVihTGTgulsq1EhHJt7d9O2Iun9tDKyNilp4=
Subject key identifier: A4:4F:FE:21:5B:ED:AB:48:20:02:66:DB:10:A5:52:C0:FA:98:43:A7
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AB1A64BAF0D379188E965048CF4863F7
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/pE_-IVvtq0ggAmbbEKVSwPqYQ6c.roa
Signing time: Thu 26 Jun 2025 07:18:42 +0000
ROA not before: Thu 26 Jun 2025 07:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 26 Jun 2025 08:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:1a:64:ba:f0:d3:79:18:8e:96:50:48:cf:48:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 26 07:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a44ffe215bedab48200266db10a552c0fa9843a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:36:d8:b1:ed:56:3e:93:bb:b2:29:59:48:
92:28:4a:23:4e:c6:09:79:d5:4d:86:57:dc:08:ef:
6d:13:7b:4f:19:89:93:a4:27:59:a9:75:35:ed:78:
46:3f:6a:37:e9:64:6c:7a:f4:55:b5:88:fa:7b:48:
97:3e:3b:62:98:44:61:dc:42:95:7a:40:af:a0:a5:
ec:85:94:61:af:e3:91:f3:bf:56:b9:8e:f2:26:ae:
d4:19:bc:f4:2c:91:bf:b4:5a:70:9e:7e:bb:bf:0f:
dd:83:89:b2:35:4c:ee:08:7f:93:97:02:60:cb:77:
7a:7a:5d:67:25:ec:51:8a:8a:5d:7b:df:76:d2:fa:
40:bc:a5:a7:c3:16:44:ca:c4:c5:67:7b:1b:17:22:
e1:7c:92:4b:f3:27:ea:da:50:27:a7:38:3a:02:de:
ff:07:b1:36:93:f3:36:f3:e6:73:36:05:db:3a:f9:
61:a5:bb:e9:82:b7:50:9a:89:8c:06:3f:f8:0a:79:
7d:94:8f:4a:83:a9:92:13:3e:71:e8:5e:57:c0:51:
89:70:ec:08:e1:ad:e6:38:aa:a4:a7:59:c9:93:70:
67:0f:56:2b:52:1e:3e:86:43:f1:8e:b6:e4:91:d3:
c6:7f:d8:b6:16:90:5a:6e:ac:20:e4:8a:9e:1f:16:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4F:FE:21:5B:ED:AB:48:20:02:66:DB:10:A5:52:C0:FA:98:43:A7
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/pE_-IVvtq0ggAmbbEKVSwPqYQ6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
82:2a:47:07:c4:31:85:4c:94:d9:2d:56:48:62:13:5a:ac:c2:
5b:61:07:58:e1:af:3b:8a:61:0a:c8:ed:97:98:d8:90:85:33:
b9:e9:20:61:a5:e0:e8:01:d0:b6:06:5a:b6:fc:b0:ff:12:f4:
6e:40:19:5a:37:15:f6:25:fc:11:f7:9c:49:0a:ae:cf:0c:50:
7f:cf:10:9c:b9:ec:36:36:77:29:01:39:df:b4:fc:c8:1b:ce:
ef:77:1b:8a:d3:ab:19:24:4e:b3:b3:fc:f5:2b:58:49:9e:f1:
3e:2c:7f:f1:35:e2:4a:48:13:57:16:f5:f4:62:83:36:62:8c:
a2:43:42:5a:b5:09:56:e0:76:99:7b:06:e5:fa:86:c8:1b:2e:
16:62:46:39:13:b0:ee:7d:26:7d:aa:b5:30:77:ee:fe:c1:89:
e8:82:37:51:a2:b3:25:23:f6:18:ba:a9:d1:1e:97:da:da:0a:
8c:51:e7:98:6c:79:d4:c5:40:0f:e3:75:30:59:a2:cf:2f:20:
2e:b0:96:25:05:16:eb:33:f5:75:6e:fd:cd:8a:72:fd:a8:c3:
6c:b5:41:4f:6c:8c:9a:f8:75:b4:28:f2:df:e0:75:a9:24:b1:
19:7f:03:eb:4a:95:ee:38:63:83:85:df:64:33:10:dc:8c:7d:
49:57:5b:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:23:30 2025 by rpki-client