Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wWjGejQiv2DoLx6xy-gcjkSeYyA.roa
File: wWjGejQiv2DoLx6xy-gcjkSeYyA.roa (raw, json)
Hash identifier: F7f37Rm9h9FNxiLPxckc7noUWzkzJey5qYUBv72jgF0=
Subject key identifier: C1:68:C6:7A:34:22:BF:60:E8:2F:1E:B1:CB:E8:1C:8E:44:9E:63:20
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197AFC6107AC87817C13627EFBCA84DFAD5
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wWjGejQiv2DoLx6xy-gcjkSeYyA.roa
Signing time: Fri 27 Jun 2025 05:04:42 +0000
ROA not before: Fri 27 Jun 2025 05:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:afc5:9978/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 27 Jun 2025 05:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:af:c6:10:7a:c8:78:17:c1:36:27:ef:bc:a8:4d:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 27 05:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c168c67a3422bf60e82f1eb1cbe81c8e449e6320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7b:08:83:d0:96:70:54:51:77:53:c5:7f:c4:
9f:3b:aa:14:20:da:48:75:87:bb:39:ed:31:38:ed:
07:62:07:29:74:f0:57:c6:77:ae:cf:f1:40:24:77:
bd:5b:ff:a0:47:cf:51:5e:b8:3a:bb:39:16:9d:db:
c5:65:1c:46:d5:99:9d:4b:11:70:92:ff:f4:63:27:
72:1e:d5:91:b1:a8:1e:3f:95:3c:33:98:f4:d2:59:
c3:eb:50:93:aa:fb:30:f2:2f:d4:43:a8:84:3c:c6:
cf:41:19:c7:29:d3:a9:46:36:66:c2:25:b2:a3:17:
4e:25:7b:a0:61:6b:9a:e4:fa:9e:8f:9c:78:42:e7:
47:ea:ad:6a:cd:e8:e6:6b:4d:ed:96:b5:34:be:b2:
4a:a0:75:63:1d:bc:4c:5f:7c:da:5b:93:1f:b8:d6:
7e:66:0e:e4:1b:63:63:46:aa:7a:23:2c:92:bf:36:
88:a9:a8:74:79:db:2b:c7:05:71:19:bb:9c:76:df:
14:95:25:29:ec:36:78:cc:f2:72:fa:63:67:6e:b3:
50:9d:7d:39:80:e2:32:69:7d:65:cf:5b:ff:1c:30:
79:eb:ca:be:9a:a1:3d:87:14:ab:f6:18:9d:54:1a:
19:84:d2:fb:61:04:4b:a8:c0:7a:e0:b8:4c:91:d1:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:C6:7A:34:22:BF:60:E8:2F:1E:B1:CB:E8:1C:8E:44:9E:63:20
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wWjGejQiv2DoLx6xy-gcjkSeYyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:afc5:9978/128
Signature Algorithm: sha256WithRSAEncryption
71:dc:0a:ad:1a:7d:82:4a:9c:53:12:ca:ca:33:31:28:33:ed:
af:cc:a1:90:f0:70:4f:46:e1:e7:8c:ac:5e:1b:b0:ab:71:78:
24:75:6d:06:d7:2d:62:30:a8:c8:7f:54:ba:e2:73:b1:38:64:
1d:58:4a:d9:d0:eb:86:f7:95:b1:3c:2b:5d:3f:91:0c:b2:f8:
b8:73:04:de:01:91:d5:47:f0:bd:e3:fb:1c:20:bc:2d:d6:00:
af:7d:7c:0f:c1:3a:b5:50:1f:d4:e1:7f:dd:2a:10:12:04:4a:
97:6c:c2:b9:9c:78:8f:30:99:3e:c9:e8:03:a0:aa:36:2c:cc:
20:46:7e:d5:2c:c8:b7:f0:8c:b7:8b:1a:b8:ab:8e:f5:fc:e2:
eb:69:ec:5f:8c:74:59:f1:21:d9:a5:5f:a7:ba:9e:9b:ac:9d:
3b:aa:66:29:12:e7:ab:c6:4e:71:d0:31:9a:29:bb:6b:2e:1f:
62:05:b7:68:a7:9a:23:ce:35:96:0d:55:f2:d0:e3:09:f7:55:
8a:dd:e0:33:53:70:fe:38:fc:5a:1c:a2:2a:fb:8e:74:a0:91:
75:f2:f0:e7:89:43:55:95:6d:59:e0:4b:7e:69:79:15:45:97:
a0:ce:15:03:a4:2e:bb:b5:09:43:be:1e:28:93:41:fc:b0:79:
44:5f:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:41:29 2025 by rpki-client