Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/s_g5tnhBhvAncSKV9CZC_eFOcgE.roa
File: s_g5tnhBhvAncSKV9CZC_eFOcgE.roa (raw, json)
Hash identifier: p954c8TV8jU9Zm6E6ss994FOGRiCbSvVQjzOzqoOQg8=
Subject key identifier: B3:F8:39:B6:78:41:86:F0:27:71:22:95:F4:26:42:FD:E1:4E:72:01
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197BA87F81B03F4582C36423CD95716056B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/s_g5tnhBhvAncSKV9CZC_eFOcgE.roa
Signing time: Sun 29 Jun 2025 07:12:42 +0000
ROA not before: Sun 29 Jun 2025 07:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 29 Jun 2025 08:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:87:f8:1b:03:f4:58:2c:36:42:3c:d9:57:16:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 29 07:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f839b6784186f027712295f42642fde14e7201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:9e:79:75:8a:a9:92:36:3f:6c:4e:fe:0a:
84:ce:18:28:88:a9:5a:c2:30:53:86:97:7b:7a:e2:
80:be:86:54:f0:37:ed:35:6d:36:e2:a6:e4:e9:c3:
0c:05:32:9c:8e:0e:15:ac:98:cc:8c:c2:83:09:2d:
ea:85:43:e1:22:22:f9:db:d2:5a:d1:95:8f:b5:8b:
5f:20:47:ff:89:08:4b:a5:ed:95:39:c4:45:3a:be:
44:9a:35:23:73:cf:ed:90:5d:82:fa:3d:3e:09:be:
4f:2e:d8:cd:56:3c:4d:62:14:a4:ff:9f:ec:bf:c2:
07:0e:1d:e3:cc:99:54:c5:72:65:cb:67:b6:b2:87:
e3:7a:16:d4:03:56:f1:d5:aa:e9:dc:cf:4a:51:a8:
5e:32:82:5f:fd:7e:a7:b2:e1:e7:c9:dc:b5:ea:31:
d0:0d:0e:0e:20:3d:7c:1f:8a:3b:4d:35:12:77:7d:
d9:55:ca:8f:ee:02:f5:53:4a:c7:ef:01:c3:bd:98:
7f:06:2b:1b:56:9c:36:df:12:e7:4b:08:45:11:d2:
ef:0c:60:fa:25:1e:c2:9e:d9:89:cf:c1:00:b9:4c:
7d:f9:b6:4a:b3:63:01:73:01:33:c5:ab:f2:51:d9:
55:6a:99:f2:d2:64:04:09:7b:f3:7a:de:a5:ee:24:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F8:39:B6:78:41:86:F0:27:71:22:95:F4:26:42:FD:E1:4E:72:01
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/s_g5tnhBhvAncSKV9CZC_eFOcgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
01:4f:2e:8f:6f:b9:d3:ae:4f:67:e1:a1:7f:62:9c:b9:b4:83:
4c:aa:0f:ce:ee:d4:c3:05:29:00:62:46:b4:5d:86:4f:83:0d:
5d:46:35:1d:e4:1b:4a:2b:d6:4b:5e:76:e4:52:ed:5c:4f:4e:
88:a1:4e:46:ac:36:af:93:69:ec:95:a9:33:19:8f:8d:c1:3f:
82:1d:09:f1:74:80:76:68:20:be:99:03:d7:69:2f:bb:33:8a:
9b:74:f5:ad:12:30:4d:40:1e:7b:14:e8:59:06:d0:80:f4:ec:
98:4d:f5:7e:97:7d:c8:5a:78:9e:5c:62:e2:79:7b:8d:28:20:
be:a9:c1:48:3f:58:58:6f:0f:6a:76:a0:a4:86:9c:00:71:8f:
9c:a3:6e:54:80:35:45:e4:77:41:30:aa:d1:19:46:07:e3:70:
02:86:3b:8e:6c:47:f9:a5:07:04:ff:f0:50:be:19:24:75:32:
ae:8b:d0:7c:0c:b1:0b:ba:46:54:a4:e5:1f:ed:ff:e8:8c:b1:
56:cc:a4:33:e6:a9:c6:66:b2:fd:76:ee:c2:86:e3:f1:5f:68:
43:7e:bf:97:5d:a0:1f:ac:60:75:63:0b:a0:fc:c7:81:cc:25:
b0:94:29:c5:31:3f:6f:ba:92:92:7b:00:ab:4b:1c:4f:4c:07:
ed:f2:f4:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:37:46 2025 by rpki-client