Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tlIc0DHKTvOEptP6iIzDwzKqtSo.roa
File: tlIc0DHKTvOEptP6iIzDwzKqtSo.roa (raw, json)
Hash identifier: 1i07GTLpNFlCcCoLjINNkYDgU7Z/4giJ3u26N6Bh/0U=
Subject key identifier: B6:52:1C:D0:31:CA:4E:F3:84:A6:D3:FA:88:8C:C3:C3:32:AA:B5:2A
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C959000FDD72880822B881AFADA1E54D
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tlIc0DHKTvOEptP6iIzDwzKqtSo.roa
Signing time: Wed 02 Jul 2025 04:15:42 +0000
ROA not before: Wed 02 Jul 2025 04:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 02 Jul 2025 05:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:59:00:0f:dd:72:88:08:22:b8:81:af:ad:a1:e5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 2 04:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6521cd031ca4ef384a6d3fa888cc3c332aab52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:49:e8:a6:00:49:a4:dd:64:07:82:c9:c0:
0e:2e:ae:fa:e4:5e:47:67:95:f1:24:85:63:85:44:
3a:99:af:f1:5d:4b:85:18:48:39:89:39:9e:36:cd:
e0:f9:02:41:8d:bd:96:06:28:72:85:b8:8e:87:13:
9a:91:12:49:2c:fd:74:3e:a7:5a:ae:4d:ab:db:fa:
b4:3d:56:0f:ed:d3:b7:28:b1:4c:89:65:5c:e5:54:
93:e2:a2:98:e6:82:04:df:7b:32:df:e3:56:ba:bf:
ee:d7:80:c2:a9:60:12:2c:ac:0f:46:cc:cd:ac:30:
45:70:d8:b7:42:fc:99:ec:ec:39:b6:f1:31:69:51:
f3:aa:5c:06:b8:34:48:9e:8e:76:a2:fb:36:af:fa:
d1:d0:6f:99:6d:e5:e3:71:64:eb:d7:c5:42:19:46:
ab:ff:bf:1e:c9:49:b9:9d:6d:c8:38:08:ff:da:76:
60:2e:b6:94:0e:0d:2b:66:60:ed:14:72:74:16:d7:
bc:68:de:06:6d:d3:04:78:6a:6e:f0:2f:6d:a0:be:
c5:1f:33:42:7f:cf:01:9d:14:cf:10:74:07:47:ba:
76:fe:7a:f9:d6:9a:d2:b1:a0:96:39:d4:fe:5a:09:
5b:32:ef:68:d0:da:a2:5e:f3:3c:6c:ff:26:73:d2:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:1C:D0:31:CA:4E:F3:84:A6:D3:FA:88:8C:C3:C3:32:AA:B5:2A
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tlIc0DHKTvOEptP6iIzDwzKqtSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
36:8b:b6:95:3d:06:e1:94:8a:1f:fe:99:b8:32:10:8f:78:97:
55:76:ec:1b:e0:66:53:2f:d0:92:ac:d9:b6:1d:df:d3:f8:ac:
95:20:ad:1a:9d:55:76:b2:cb:5d:55:1d:7e:07:c0:91:31:b5:
cb:75:a0:49:0f:c5:d8:1a:bd:f8:c5:63:75:87:b6:0c:84:0d:
9b:68:ac:7e:5b:76:3f:a2:71:56:da:1a:59:81:b1:a0:93:8a:
f2:35:53:ad:d0:f0:14:02:8b:c2:81:b7:65:64:aa:45:ee:65:
5e:98:93:2a:f3:7b:4c:d3:9f:fd:7d:47:19:da:62:df:71:1d:
4a:e5:6e:ad:54:b3:5e:ff:aa:66:61:55:45:13:a6:32:ca:81:
b9:a2:08:7c:67:74:99:10:a8:7a:bf:b3:4c:4d:3d:6e:57:b1:
14:a1:b1:44:18:ef:5f:7e:16:ad:21:fe:a7:25:e8:fc:c6:3d:
d4:77:4e:fc:db:42:1c:80:97:c5:80:ef:fa:4f:6a:85:97:6f:
e0:42:29:a2:3c:38:66:d6:06:9e:2d:4b:ac:ab:09:b7:49:98:
30:cc:de:94:38:22:19:59:49:82:74:79:53:bf:cb:c0:52:d2:
53:9d:6d:2e:2d:50:37:97:0e:a5:d2:97:4f:24:6b:7e:05:67:
3b:78:8b:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:40:32 2025 by rpki-client