Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wL1dx1W_RVENfWKgAQHBy_2wJg4.roa
File: wL1dx1W_RVENfWKgAQHBy_2wJg4.roa (raw, json)
Hash identifier: UY3qP+FoS0m66mkQfm/BwYtfyTtGePWbeVoFHg4LqTE=
Subject key identifier: C0:BD:5D:C7:55:BF:45:51:0D:7D:62:A0:01:01:C1:CB:FD:B0:26:0E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C6C3FD76B454133117A5C6DDAC67E0A5
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wL1dx1W_RVENfWKgAQHBy_2wJg4.roa
Signing time: Tue 01 Jul 2025 16:13:42 +0000
ROA not before: Tue 01 Jul 2025 16:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 17:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:c3:fd:76:b4:54:13:31:17:a5:c6:dd:ac:67:e0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 16:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0bd5dc755bf45510d7d62a00101c1cbfdb0260e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:0c:d9:1c:52:ff:b2:d8:9c:33:30:a1:cc:
3d:08:85:5b:25:1d:d2:dc:70:88:bb:7a:05:43:b9:
73:49:ee:25:a4:39:09:7b:8b:2c:63:f3:bb:1a:4d:
47:f6:ef:dc:d0:45:d3:3e:e9:30:eb:0f:d7:32:da:
1c:49:79:3e:2c:60:b7:4f:ef:2c:e3:c0:56:e9:f4:
a5:ae:d8:1d:3c:25:58:ab:64:04:45:14:dd:71:6d:
82:fc:de:48:1c:a8:a8:ed:34:dd:cb:91:06:21:33:
5f:ad:b1:b5:cb:cc:3f:8d:80:a4:01:73:b9:fa:15:
5c:5d:2e:bc:7c:4f:de:d7:bf:de:3d:87:91:36:88:
c5:0a:e5:41:32:cd:8b:de:49:1f:00:5b:44:f5:7e:
23:70:fd:c7:ab:c6:23:82:0a:c0:87:e3:6f:73:50:
ba:6c:f2:16:77:b5:d7:e5:86:e9:1c:70:1a:71:43:
39:92:b2:b1:61:cb:19:0f:fd:49:92:95:70:0f:0e:
d1:10:df:2c:81:18:ff:d9:b7:a8:2a:88:f9:9d:e3:
ba:51:1e:15:ea:97:e3:7f:bd:d9:79:93:9f:76:28:
3a:76:1d:98:f3:0d:95:24:a0:90:fd:71:a2:e3:f0:
71:e7:b1:e1:78:6d:47:f2:70:b5:6b:32:7b:79:e0:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BD:5D:C7:55:BF:45:51:0D:7D:62:A0:01:01:C1:CB:FD:B0:26:0E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wL1dx1W_RVENfWKgAQHBy_2wJg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
70:f7:24:94:6b:e5:0d:f9:8e:1b:d3:54:b1:72:9a:28:31:b5:
b0:b6:c0:8a:97:9a:06:fe:f0:f2:63:05:49:63:48:b5:d5:70:
14:16:e9:87:31:76:89:3a:72:27:b7:00:23:bd:cd:b7:6a:10:
ac:e7:76:9b:99:97:ce:cf:eb:a1:e4:6d:c5:7e:ac:3f:47:c6:
a7:5e:e9:23:87:dd:af:c4:d1:43:ec:5e:7d:8d:98:d9:17:36:
a2:ea:02:15:93:f4:5c:69:2a:bc:3e:f7:40:ad:02:d2:1d:ce:
fd:5b:e8:d8:69:43:68:fa:11:2c:61:98:be:1d:40:dd:db:1e:
0c:91:b4:9c:30:ed:a4:eb:4a:20:5e:ee:ab:f4:31:5c:9d:ce:
e1:01:0e:07:30:c0:19:64:2f:92:1d:4d:09:76:c1:1f:e2:a4:
14:03:dc:c1:d8:d4:6b:d9:fb:07:4d:3f:ec:44:75:ef:fd:fc:
dc:02:fe:d8:82:b9:c7:f2:69:83:e4:2f:be:bf:d4:b5:e2:cc:
3d:71:45:35:23:06:55:22:ac:45:c3:28:49:69:b5:cb:1e:09:
7a:9e:6d:9c:ad:15:43:4e:d4:7f:d0:51:4c:c6:4a:1d:a2:20:
38:3e:8b:3e:9f:65:e1:b8:50:f7:81:17:36:53:3c:3f:31:92:
6e:61:76:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:50:15 2025 by rpki-client