Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wY2mqEY3WTakXpc_I_W8BqN6ZOA.roa
File: wY2mqEY3WTakXpc_I_W8BqN6ZOA.roa (raw, json)
Hash identifier: t/xQOzgJMY0/X7Hqp7uwsAInIKKh0wEnvCr8ZoXbPHU=
Subject key identifier: C1:8D:A6:A8:46:37:59:36:A4:5E:97:3F:23:F5:BC:06:A3:7A:64:E0
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019788C110676E799F1368AE2C19FC10177E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wY2mqEY3WTakXpc_I_W8BqN6ZOA.roa
Signing time: Thu 19 Jun 2025 15:14:03 +0000
ROA not before: Thu 19 Jun 2025 15:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 19 Jun 2025 16:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:c1:10:67:6e:79:9f:13:68:ae:2c:19:fc:10:17:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 19 15:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c18da6a846375936a45e973f23f5bc06a37a64e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:56:1c:6c:b3:ab:13:9a:07:7a:17:5b:0f:
c6:e9:a9:76:9f:28:76:a8:6b:97:b1:a6:47:9f:b9:
b1:06:66:a5:5d:a6:64:28:a3:f7:ea:fc:57:9c:17:
1f:20:4f:74:cc:7a:28:47:a8:ec:c1:1e:13:0d:2e:
2b:10:00:2d:04:54:4a:c4:a0:6f:e3:84:77:ba:24:
88:52:94:76:64:29:03:50:d9:3c:43:c8:3d:40:fa:
9a:69:4d:1e:b9:d3:60:aa:6c:12:8e:f4:d8:48:65:
95:91:7c:d1:ac:9e:d0:6d:ed:24:29:52:8a:84:9b:
fd:0e:3e:2a:25:3b:8f:b7:75:7b:b3:7c:73:e2:57:
bc:ad:fb:a6:8e:02:35:48:60:1d:93:bb:39:1b:03:
07:fe:b3:47:49:68:66:ce:12:9b:a8:10:f3:18:31:
98:86:f7:3f:07:5e:82:cc:cf:82:8d:a1:a7:0c:06:
2f:d0:6b:4b:e9:ec:e1:37:98:de:6a:98:66:35:1d:
9f:83:89:8b:80:78:40:7e:ac:bc:1d:95:05:c0:d2:
8f:73:26:e0:4a:27:39:56:f5:07:1a:71:50:81:62:
37:01:05:3a:73:d2:6f:0c:60:66:36:01:f8:de:a6:
01:f0:eb:97:b6:53:53:c2:ef:de:95:e9:c0:61:50:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:A6:A8:46:37:59:36:A4:5E:97:3F:23:F5:BC:06:A3:7A:64:E0
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wY2mqEY3WTakXpc_I_W8BqN6ZOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
53:85:c3:a2:12:a5:5e:e9:fe:ed:dd:91:56:2c:8a:b4:b2:9f:
89:31:eb:4a:43:af:ef:20:88:bb:51:05:3e:ef:9d:7e:e4:cc:
3c:1b:86:cd:f9:19:ba:ac:21:ac:40:9b:15:f2:df:67:d1:5e:
1f:ae:c0:a5:2f:62:a4:9a:c3:88:8a:7d:b6:f0:8e:e1:2e:59:
47:b5:ba:cf:5e:f9:57:9b:5c:3e:5a:f7:75:78:28:55:3a:fb:
2b:36:45:06:7b:9c:06:89:3e:7e:b9:bc:8b:64:ee:5a:bf:71:
9d:ab:da:74:08:c5:5d:b6:f4:2f:ee:be:6e:f0:fa:4d:4d:fa:
c4:0f:97:58:d8:54:5a:b1:b8:cb:b1:da:59:86:d0:06:fe:2a:
10:ea:41:ae:ac:07:c1:71:3a:9b:52:cf:0a:a9:0b:4c:24:0a:
36:a8:a7:04:fa:d8:93:46:eb:c7:7c:92:58:15:da:88:77:b6:
60:ac:6a:80:73:d1:38:b0:b5:c7:d8:78:66:64:4c:6e:2e:7f:
0b:08:d3:05:fb:e7:08:60:5e:40:ed:68:8e:fb:95:a0:f7:b3:
6f:35:29:ac:49:e3:e3:a8:10:74:94:b4:5d:e9:6c:37:36:47:
7e:86:95:96:a1:c3:76:cb:f8:0a:ce:41:bf:5b:2d:75:78:e7:
dd:95:9b:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:00:25 2025 by rpki-client