Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vCS5l5wuSB9OGP0Qq37wi4-UXLU.roa
File: vCS5l5wuSB9OGP0Qq37wi4-UXLU.roa (raw, json)
Hash identifier: Arkl6djaRraZrMk3fu56ybcT0MFzJDdmoQyZim5U93I=
Subject key identifier: BC:24:B9:97:9C:2E:48:1F:4E:18:FD:10:AB:7E:F0:8B:8F:94:5C:B5
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979E01214BB43C4520E55203622A34D11E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vCS5l5wuSB9OGP0Qq37wi4-UXLU.roa
Signing time: Mon 23 Jun 2025 18:16:03 +0000
ROA not before: Mon 23 Jun 2025 18:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 19:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9e:01:21:4b:b4:3c:45:20:e5:52:03:62:2a:34:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 18:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc24b9979c2e481f4e18fd10ab7ef08b8f945cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:bc:ce:79:91:77:49:fc:cc:c1:cd:1a:38:
d6:7b:08:a0:97:ee:22:75:c6:46:31:97:be:c8:36:
57:cf:bc:a3:69:bd:61:c5:33:14:e1:43:d9:31:ec:
ed:54:99:fc:12:c8:6f:0f:e8:8d:9c:d8:4f:a6:08:
a3:fd:ac:a8:7d:c0:6c:d3:46:a3:51:5a:b9:4f:26:
29:82:36:68:0d:11:9a:41:e1:b5:f9:76:94:5b:c3:
11:ec:a8:c5:0c:5d:e5:51:1c:31:86:6d:07:31:6a:
5c:d8:33:29:23:3e:bb:07:c6:02:d7:61:06:35:0f:
1e:fe:38:1b:a8:ff:e8:e7:c5:3d:65:7d:98:c1:db:
39:9d:11:2a:c0:2a:7c:7f:3e:b8:73:0f:f1:f8:85:
0b:51:04:8d:38:0c:b6:b1:af:a9:6f:f9:b1:47:f4:
ca:e2:e2:fe:30:ff:0d:92:71:dc:eb:ff:19:62:2c:
cb:cb:a3:1e:d9:95:c1:93:34:8b:c3:e7:72:55:f0:
88:60:e1:59:84:8e:8f:e8:a4:7a:a9:ab:89:7c:58:
77:2e:4d:83:f9:eb:4c:74:6d:a7:6c:e0:94:ba:d6:
04:b7:24:cd:e0:30:44:78:58:21:31:00:de:eb:b3:
2a:d8:49:72:05:c7:97:6a:f5:d6:cf:10:48:d0:d4:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:24:B9:97:9C:2E:48:1F:4E:18:FD:10:AB:7E:F0:8B:8F:94:5C:B5
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vCS5l5wuSB9OGP0Qq37wi4-UXLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
67:00:23:f2:14:11:ad:a9:23:ff:16:7d:6e:38:ec:10:73:6c:
1e:dc:d6:58:a5:0c:39:ec:46:24:4e:9f:53:bd:d5:d5:43:be:
44:ee:30:33:02:91:b9:87:5f:f1:4b:de:7a:2b:5f:ab:f0:46:
56:a4:c5:89:86:37:3d:78:e3:67:06:6b:0d:d0:6b:b5:62:d9:
d4:59:0b:d2:37:77:94:3e:c2:6c:04:23:b7:64:97:a7:64:a7:
f6:eb:f6:ba:56:9c:2f:e0:a8:bc:54:7b:c7:c8:52:f6:e1:94:
46:36:34:1a:da:a7:59:c1:23:64:61:46:a3:bf:b7:78:92:68:
30:d9:c5:e9:e9:a6:84:16:93:e3:53:88:f2:38:42:bc:a9:af:
aa:19:c4:10:16:62:de:33:42:97:d5:86:13:f4:21:08:d3:4b:
8d:f4:2b:d6:75:d2:e1:74:06:c3:70:0f:80:cc:7e:a5:d8:b4:
c2:b2:8f:db:1d:49:f9:5f:9f:3a:1f:73:5e:95:2e:79:55:07:
be:ae:8c:68:cb:5a:89:63:24:03:5c:be:6b:7c:d4:df:3b:e8:
b6:0e:91:8a:e5:dc:64:71:c4:3b:ad:29:7b:45:23:39:72:c6:
30:b3:e9:3b:22:62:bd:1f:f5:a0:87:bd:6d:ef:7d:b8:6c:e9:
db:7b:7f:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:19:18 2025 by rpki-client