Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vYtZwkty1WHkMBLkP9VJH-fTjmU.roa
File: vYtZwkty1WHkMBLkP9VJH-fTjmU.roa (raw, json)
Hash identifier: eQi59iJHVwx71nV/YMFono7PSwKoeFoqCapofT9PdmA=
Subject key identifier: BD:8B:59:C2:4B:72:D5:61:E4:30:12:E4:3F:D5:49:1F:E7:D3:8E:65
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979D256677A879B11977986BF1C12BB81D
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vYtZwkty1WHkMBLkP9VJH-fTjmU.roa
Signing time: Mon 23 Jun 2025 14:16:03 +0000
ROA not before: Mon 23 Jun 2025 14:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 15:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:25:66:77:a8:79:b1:19:77:98:6b:f1:c1:2b:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 14:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd8b59c24b72d561e43012e43fd5491fe7d38e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:09:fd:1d:1b:ab:10:56:0c:f5:20:61:74:
49:67:ce:43:42:19:ff:20:0d:ce:a2:e1:bf:48:8c:
b5:58:5e:67:95:8a:f6:af:04:a8:fe:0d:6e:18:b1:
26:b1:7b:22:d4:4e:1c:5d:07:c5:f3:38:83:39:d2:
21:50:e8:2b:7e:86:42:87:c1:31:0f:1f:b1:0b:f3:
32:0e:94:cc:b2:3c:9d:81:b4:83:eb:98:2f:ed:dc:
f8:6c:7d:c7:dc:4d:50:28:fc:81:86:31:81:ef:3e:
b5:9f:6f:f5:81:71:82:87:61:5a:e0:30:58:d1:15:
92:d5:45:4f:bb:04:9f:64:90:d0:77:29:f3:25:bd:
14:c7:24:7e:96:da:3b:bf:12:ed:3a:9f:8c:78:a7:
4b:48:dc:4d:0e:12:ac:70:39:98:69:19:53:01:27:
5d:6c:a0:1a:f1:0e:ab:60:e6:c0:50:dd:b5:95:55:
5e:d5:b0:b8:ff:d5:4b:52:73:f1:db:e6:f5:42:82:
4a:cb:a3:1a:20:69:91:29:38:5f:80:c9:be:2c:eb:
7d:af:e8:e1:90:cd:ca:a4:0c:6e:7b:58:93:6a:18:
55:60:d4:b3:08:1b:48:5e:34:b7:41:39:e2:f6:17:
d4:b8:ce:c1:c2:b5:a6:f4:3b:c5:4a:95:50:9e:e4:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:59:C2:4B:72:D5:61:E4:30:12:E4:3F:D5:49:1F:E7:D3:8E:65
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/vYtZwkty1WHkMBLkP9VJH-fTjmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
44:49:82:4f:65:4e:d9:11:b1:ef:a1:a2:53:71:7a:4c:6e:c6:
25:94:33:54:fd:70:a1:46:db:d3:bf:f6:3c:41:46:8e:29:1f:
9d:55:96:b6:5b:e2:4c:cc:27:af:92:56:f8:54:c5:f6:27:1b:
a6:cb:75:6f:20:bb:ac:27:b0:f3:1b:ae:76:79:8c:ff:28:c4:
7a:3a:9f:26:f3:d8:a1:a9:dd:8d:2a:74:76:1e:9f:a0:50:89:
3e:dc:9e:7b:37:e7:48:b4:d7:5e:f0:16:ac:d6:e8:18:83:1b:
67:e6:d5:26:e7:a8:e8:41:19:6c:75:0c:2b:e4:bd:67:41:e2:
c6:c0:18:9c:41:ba:98:34:d0:b5:fd:ab:e2:dd:3e:34:ad:d9:
e0:65:74:31:c9:f5:03:4c:4d:6c:0b:a7:0a:80:a1:53:93:03:
b9:6a:7c:67:93:01:58:f5:02:0d:d9:24:07:32:05:0d:ce:02:
49:0e:56:83:88:fe:c3:d1:3c:8f:43:bc:de:02:3a:26:da:87:
c8:22:ca:99:12:b1:35:7a:cb:d1:cd:8f:ac:5d:e2:2f:65:66:
ea:83:ed:de:52:d1:04:db:65:74:49:d2:17:46:2d:b3:02:fe:
a5:2f:4c:73:86:e2:88:93:d5:72:28:f1:e4:9a:51:1c:eb:ed:
b2:43:9f:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:51:29 2025 by rpki-client