Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tNYPj4vJzjS3Nmeh4oDwD5MJq_c.roa
File: tNYPj4vJzjS3Nmeh4oDwD5MJq_c.roa (raw, json)
Hash identifier: xl8c/UJ48y6TgWAIRGFyGnhz8ca4Vm+lKgnamLcGtd4=
Subject key identifier: B4:D6:0F:8F:8B:C9:CE:34:B7:36:67:A1:E2:80:F0:0F:93:09:AB:F7
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978D77BACAB54D316AD16CE8CF1CA52437
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tNYPj4vJzjS3Nmeh4oDwD5MJq_c.roa
Signing time: Fri 20 Jun 2025 13:12:03 +0000
ROA not before: Fri 20 Jun 2025 13:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 20 Jun 2025 14:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:77:ba:ca:b5:4d:31:6a:d1:6c:e8:cf:1c:a5:24:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 20 13:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4d60f8f8bc9ce34b73667a1e280f00f9309abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:21:7f:b4:f5:d6:3a:59:e3:20:e5:db:41:
8b:90:f7:9d:bf:b6:5f:5c:e6:86:9d:da:a4:a2:a2:
f7:96:b1:db:a2:70:a4:c6:7f:ce:34:26:73:5c:a5:
ea:54:ef:e2:b1:1d:73:16:fd:4e:d4:04:03:ea:f5:
23:bd:59:35:51:64:1e:c8:d6:16:5c:75:d1:fa:5f:
34:a6:e2:c9:67:b1:e2:dd:aa:21:7a:78:a8:67:9c:
0a:db:e9:26:b9:14:05:22:f8:15:3b:4a:75:4b:99:
f5:46:73:36:a1:2b:14:0c:70:69:66:29:14:37:2e:
c2:f0:31:90:76:ac:e3:22:4c:b6:9a:29:d4:42:93:
ce:46:e0:7d:25:26:b1:dd:ec:d8:9e:b9:56:7b:df:
0a:db:f3:1b:22:05:b8:55:79:d8:df:6b:65:f7:ee:
ed:b7:78:a2:00:7c:e3:bd:54:9b:6d:00:98:88:dd:
97:e6:33:9b:99:e6:0a:a1:a4:61:12:e8:7e:da:fc:
e9:30:6a:7c:8a:07:f5:7b:4b:da:44:f4:46:0d:58:
58:36:8c:24:59:96:19:c9:7d:4b:36:65:92:4f:27:
f3:1b:d5:df:48:84:40:58:bf:d6:06:33:04:95:89:
20:79:95:9e:bb:b9:a4:df:05:c8:93:6c:46:20:bc:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:0F:8F:8B:C9:CE:34:B7:36:67:A1:E2:80:F0:0F:93:09:AB:F7
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tNYPj4vJzjS3Nmeh4oDwD5MJq_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
77:80:c0:6d:14:18:f7:b4:f7:85:a9:d8:50:53:7f:bf:b9:f7:
3a:d4:af:0f:5d:07:ad:12:b4:51:17:dc:4f:e4:72:0a:ff:09:
c0:43:f7:e6:ac:de:7c:ab:66:ac:79:16:54:e5:33:32:a0:86:
77:24:59:16:18:fc:6a:df:a4:99:21:9d:c5:d5:6d:eb:e6:41:
6d:7d:22:02:1c:5d:6d:f7:a1:50:5c:f9:ac:44:c6:ad:f7:4b:
35:2f:23:08:0b:0b:5f:4c:c9:fb:b5:fe:3a:57:79:ee:06:2e:
fb:5a:6f:9d:d0:99:c6:f0:ba:6c:37:6b:16:b6:af:ad:9a:2b:
e3:c1:ea:e4:c6:90:55:e3:a9:61:17:7a:f4:23:6c:c3:6d:8d:
1f:61:54:df:99:21:84:0a:68:bb:cd:78:13:f0:24:83:49:1f:
56:7e:c7:0a:10:02:5d:89:d6:30:bb:e9:bf:2c:56:b1:db:59:
85:83:63:0f:ba:13:fb:d9:22:38:f7:a1:72:39:f5:4a:0e:09:
fa:86:03:95:77:0c:ca:7d:98:2a:14:d6:f7:71:a7:c4:d8:dd:
b9:12:49:35:10:36:7a:1e:eb:5c:4f:cf:12:bf:94:fc:a4:a5:
12:d0:15:b1:74:7c:24:94:17:ff:b5:f8:1c:8c:43:89:d4:17:
8d:ff:9f:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:13:09 2025 by rpki-client