Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wAmmGd9CFhHwrCHJVxyaH8cRbVs.roa
File: wAmmGd9CFhHwrCHJVxyaH8cRbVs.roa (raw, json)
Hash identifier: ZHtonv6kRd2sYb+UIbquyxaE+MJJTYP5OctozwlGfqw=
Subject key identifier: C0:09:A6:19:DF:42:16:11:F0:AC:21:C9:57:1C:9A:1F:C7:11:6D:5B
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AF29831E7A540E30A5DF5451D9764BB4
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wAmmGd9CFhHwrCHJVxyaH8cRbVs.roa
Signing time: Fri 27 Jun 2025 02:13:42 +0000
ROA not before: Fri 27 Jun 2025 02:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 03:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:af:29:83:1e:7a:54:0e:30:a5:df:54:51:d9:76:4b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 02:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c009a619df421611f0ac21c9571c9a1fc7116d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:e8:82:41:9c:99:cb:a9:29:8f:61:de:ba:
be:45:c4:65:6d:2b:fa:f2:91:24:dd:15:48:ca:6a:
36:dc:29:1c:14:e8:5d:01:b7:d1:b8:67:f2:60:42:
7d:f4:04:21:7f:58:c0:c7:29:1f:62:b0:33:d2:c6:
40:57:26:8c:23:66:92:77:ea:a8:3a:66:f3:4b:ed:
15:32:7c:c6:6b:eb:75:5b:76:70:ab:a7:f9:a6:3c:
b3:ed:55:4b:30:a2:48:14:bd:6f:97:25:33:8d:1c:
0b:08:36:01:73:b9:1e:ea:c1:3d:a6:44:ba:26:f3:
e8:98:29:c0:2b:66:7f:8f:62:4d:44:5d:e8:6c:f4:
7f:4a:7c:6f:5d:3d:af:a4:3e:79:ab:65:b8:09:96:
da:88:65:7b:6d:7b:e9:16:c5:7b:05:55:f5:f4:e4:
cd:34:c6:39:9d:85:be:5a:ec:77:69:28:d0:e9:34:
67:5b:31:1f:77:e0:7a:65:95:07:37:de:06:6a:e4:
ca:45:ec:67:61:ac:d4:f8:5f:be:71:ba:2c:11:de:
40:ce:fc:c2:89:1f:b2:6f:96:2a:07:d2:17:c8:2d:
f9:ab:4f:7f:5b:0c:3c:61:7d:94:9e:bb:97:e5:b6:
9e:59:05:b2:47:0b:77:81:e5:1f:b1:ab:df:ef:03:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:09:A6:19:DF:42:16:11:F0:AC:21:C9:57:1C:9A:1F:C7:11:6D:5B
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wAmmGd9CFhHwrCHJVxyaH8cRbVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
19:e0:ed:dc:cb:a9:05:79:f1:6f:a0:6e:23:26:4a:c7:e9:7e:
de:49:1e:ef:ff:94:91:d9:e4:a0:0c:0c:e8:d5:ae:c6:46:e7:
9a:ed:81:93:ae:cd:c1:2f:6f:48:0c:48:ad:8c:cb:0c:3f:49:
22:04:34:b5:1a:e7:8f:68:dc:15:b2:46:4e:f0:fb:c3:2a:b1:
1c:06:e2:fe:84:bb:d9:07:f2:5a:aa:35:cf:11:42:b9:e9:9e:
0f:a8:7a:9a:61:5d:e5:9a:30:a1:ca:fd:dc:f9:bc:73:08:65:
03:af:f7:76:2a:b1:69:97:d8:6b:7d:09:17:c5:7a:b9:fe:dd:
9d:82:49:7a:da:7b:bc:0d:31:5e:a3:4f:c6:69:05:14:a9:23:
d9:95:b4:cc:45:7f:1d:7e:39:da:64:ed:36:dc:10:89:f2:e7:
49:fd:4e:6e:01:1a:81:92:2f:71:f2:3d:91:15:f2:c4:73:b6:
7d:bd:6d:8d:e1:d1:07:17:7c:8c:e0:f1:35:80:b0:93:d7:5e:
e5:55:5f:86:bb:b5:ab:4b:59:00:6f:aa:1b:e0:7a:aa:f5:fa:
27:27:03:fc:32:5f:60:31:49:60:72:3d:69:74:b6:7d:97:f6:
fa:9c:40:ec:49:0d:34:89:29:4d:f4:a6:8e:52:88:12:c9:bc:
9d:0f:2c:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:05 2025 by rpki-client