Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wDIPnfB3iJiCV6Po31hiW2hAvYo.roa
File: wDIPnfB3iJiCV6Po31hiW2hAvYo.roa (raw, json)
Hash identifier: j7mWSPOuy1XpXAU+a4joDeVv5iVEMo0nqCisLhDtoGw=
Subject key identifier: C0:32:0F:9D:F0:77:88:98:82:57:A3:E8:DF:58:62:5B:68:40:BD:8A
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01978A08D1C9E6E8D8FE85857682875034DE
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wDIPnfB3iJiCV6Po31hiW2hAvYo.roa
Signing time: Thu 19 Jun 2025 21:12:03 +0000
ROA not before: Thu 19 Jun 2025 21:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 22:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:08:d1:c9:e6:e8:d8:fe:85:85:76:82:87:50:34:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 21:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0320f9df07788988257a3e8df58625b6840bd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:6a:ad:d5:27:bf:9f:89:21:4c:30:2a:88:
26:92:17:5a:c0:c9:0f:52:fa:d1:9b:4c:d7:12:f7:
61:a4:cc:5c:98:85:26:6f:7e:23:b5:5b:96:b1:79:
6c:40:bc:d9:b7:29:9c:17:e6:a2:ce:1a:d3:e9:d4:
2c:51:dd:a4:71:81:95:3a:4d:db:88:e0:a9:5a:60:
a4:80:c4:20:f0:de:14:17:32:06:05:b4:01:ec:6a:
45:37:30:0c:df:e4:9c:19:ee:3e:de:c6:e3:d9:f9:
15:00:8d:c6:a0:9a:ec:93:ac:b1:d3:25:0b:47:f6:
bf:d5:57:4d:41:d5:3c:1c:18:db:a4:7b:c2:8e:43:
b4:bc:b4:a3:80:13:70:4d:13:e3:f1:c7:51:ac:43:
d2:f7:7e:66:bf:52:6e:1e:16:14:3f:af:89:a2:2c:
89:11:74:1f:00:31:2d:a3:fe:41:e8:cf:49:ab:7d:
cc:e5:54:99:05:7a:03:48:04:7c:39:f3:92:84:f9:
8e:df:2e:23:d4:16:20:d5:58:62:cc:38:62:ef:56:
31:b1:d3:67:64:02:cf:cd:57:ea:2e:4a:d6:d1:f5:
14:73:65:64:00:85:a4:68:01:04:0d:3c:a7:3a:94:
c7:98:ac:2b:55:87:f1:5c:7c:19:3e:f4:af:0b:57:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:0F:9D:F0:77:88:98:82:57:A3:E8:DF:58:62:5B:68:40:BD:8A
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wDIPnfB3iJiCV6Po31hiW2hAvYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
69:6b:78:3e:76:b9:13:a7:cb:70:67:75:08:ed:73:30:38:d1:
b8:22:9a:d3:95:a2:93:b0:49:9c:8c:8f:ee:0b:63:d1:1b:cc:
90:65:da:da:30:5c:19:e5:a4:0f:2d:61:8b:38:82:87:a9:22:
17:e3:3a:e9:7b:39:4b:67:6c:4b:19:da:b4:4b:31:91:b7:d1:
fe:f4:58:7d:45:7a:86:0b:39:15:af:22:63:d6:19:2e:a6:76:
35:95:a8:1d:11:78:3f:d0:f7:1c:cc:9a:a5:39:4d:8f:96:0e:
14:cd:bd:08:c5:cf:6c:44:67:95:c7:0e:e8:86:ca:20:18:dd:
2b:5c:39:e7:97:27:69:6e:5c:e0:59:a0:d2:08:0c:7d:f3:9e:
79:2f:d3:8e:0e:86:ca:6d:06:a0:a8:26:ee:ce:03:7c:5c:f1:
f6:3d:02:4a:26:2c:d8:2a:c3:2f:1d:8c:9e:a4:0e:24:1c:e8:
04:63:22:c1:22:61:4c:32:b7:17:65:94:49:15:19:ba:ba:3b:
b2:e0:0c:4d:1d:12:eb:f2:01:3f:a3:d4:9c:cc:f8:d6:c2:fb:
db:4f:a2:c2:9b:54:6b:2a:33:20:fd:4d:d3:56:7a:fe:48:d9:
0a:9e:d0:57:8b:d1:d3:09:e3:42:eb:d8:8a:07:15:85:d6:5d:
ce:3e:b6:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:35:51 2025 by rpki-client