Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/pRq99-sXnq0QMMBK8SL092b8FUM.roa
File: pRq99-sXnq0QMMBK8SL092b8FUM.roa (raw, json)
Hash identifier: hS/DSywt7FxsCIXoCzPcEax1iDBbivnNS840Z0nt/b0=
Subject key identifier: A5:1A:BD:F7:EB:17:9E:AD:10:30:C0:4A:F1:22:F4:F7:66:FC:15:43
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B6A3E03DB08DD0EF34885C02CF77C2D4
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/pRq99-sXnq0QMMBK8SL092b8FUM.roa
Signing time: Sat 28 Jun 2025 13:04:42 +0000
ROA not before: Sat 28 Jun 2025 13:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:b6a3:34c0/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 13:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a3:e0:3d:b0:8d:d0:ef:34:88:5c:02:cf:77:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 13:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a51abdf7eb179ead1030c04af122f4f766fc1543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:74:6b:64:14:01:5f:22:b8:c8:f3:ad:3d:
95:bb:1e:b6:29:e7:01:cf:09:47:58:99:d7:43:86:
23:de:1d:f1:b8:26:a1:59:e3:4b:62:70:0c:40:d9:
7b:95:7f:eb:77:47:a2:47:bc:52:1a:0e:4e:db:a7:
e7:70:47:d2:fa:f8:4d:19:20:e8:90:4f:b3:29:f7:
61:4c:23:d3:b2:e5:96:32:f6:8f:11:b9:13:4d:d1:
74:36:39:fb:37:20:4b:2c:2f:70:f2:18:8b:a7:bd:
1d:71:1f:a5:5d:bb:dc:2d:c2:45:00:f9:a3:f8:ee:
f1:a7:c6:4f:e8:87:a9:e5:e2:31:ee:53:67:5e:b6:
d3:e5:c5:2b:55:95:9c:bb:f4:f8:49:2e:f5:6c:b9:
d9:f2:7f:93:2c:d5:ba:65:e6:be:ff:1b:12:42:e3:
10:84:68:eb:05:14:73:0c:64:52:a9:8f:4e:ef:77:
48:84:61:c2:30:0b:c0:38:d3:81:26:9d:16:65:e8:
a4:eb:3c:e0:23:14:11:e0:5c:30:6c:6d:2f:06:81:
c4:88:bc:a8:8b:91:c8:6e:51:1d:e8:f3:99:9a:cd:
5e:70:1c:3c:06:e8:79:3a:21:3d:3f:b8:7c:09:7e:
57:0e:9a:aa:3d:05:f1:52:93:bd:8c:7c:d0:9b:f8:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1A:BD:F7:EB:17:9E:AD:10:30:C0:4A:F1:22:F4:F7:66:FC:15:43
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/pRq99-sXnq0QMMBK8SL092b8FUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:b6a3:34c0/128
Signature Algorithm: sha256WithRSAEncryption
56:24:49:a9:ed:1a:49:9b:4a:89:57:b4:e1:c3:c0:04:09:56:
d9:a0:b5:40:7e:c4:58:0f:90:25:0a:4a:4f:16:b1:a8:68:8b:
54:da:c7:68:f4:08:ac:66:e8:f5:b4:3f:d4:43:8f:46:ef:6c:
fb:fa:c6:10:a4:6b:38:95:f8:d2:42:bd:4a:6e:ff:31:98:d9:
13:50:4b:9f:9a:23:f9:22:28:8d:a7:e0:09:9c:76:aa:71:66:
ac:ea:d2:12:b3:4e:87:1b:ee:16:e1:d6:e0:5e:ae:b9:fb:f2:
53:45:be:4d:64:c9:1f:b7:83:bd:79:01:e6:a9:bf:7f:bd:76:
58:97:1b:9e:29:75:03:4b:e1:6c:dc:5b:30:c7:ec:bf:5d:d7:
f5:cb:52:8b:41:45:4a:9c:74:06:a2:5e:90:ca:bc:d3:d6:a3:
6b:38:05:8d:02:bf:f2:0d:88:46:b4:f1:02:55:77:a2:20:6d:
6d:d9:9e:f7:d2:26:5e:08:9e:5d:a8:fb:83:4e:cc:8e:b6:2e:
b9:d4:a8:3d:03:96:fe:f4:12:06:3e:69:0f:41:13:5b:65:3c:
0c:2f:4d:75:81:5c:65:78:00:c8:20:82:cd:3f:9f:26:21:18:
0e:fa:96:95:52:65:ea:a2:22:d9:42:b6:26:36:8f:91:ab:23:
f8:10:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:06:16 2025 by rpki-client