Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wvxWb2H91U4AX5sLUlsI03lwTqM.roa
File: wvxWb2H91U4AX5sLUlsI03lwTqM.roa (raw, json)
Hash identifier: f72db1lrBJTit8z/PqoDh3Oqk8uNks4TBIURra2foM4=
Subject key identifier: C2:FC:56:6F:61:FD:D5:4E:00:5F:9B:0B:52:5B:08:D3:79:70:4E:A3
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197C3BAB4C437888FA8EE789F55CCB0F93B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wvxWb2H91U4AX5sLUlsI03lwTqM.roa
Signing time: Tue 01 Jul 2025 02:04:42 +0000
ROA not before: Tue 01 Jul 2025 02:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:c3ba:5d80/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Jul 2025 02:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:ba:b4:c4:37:88:8f:a8:ee:78:9f:55:cc:b0:f9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jul 1 02:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2fc566f61fdd54e005f9b0b525b08d379704ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:ec:2f:51:f1:d7:bf:bb:49:f5:8d:09:fc:
ba:1a:9e:fa:ed:70:2f:d3:d4:78:e7:fa:38:ca:11:
a3:9b:1f:9b:41:ce:38:7c:ea:ca:cb:e1:ad:97:b9:
db:5f:4c:20:a8:34:5a:78:cb:03:aa:16:76:9f:98:
57:d2:f8:c8:ce:c5:2c:c5:bd:fc:d9:b7:5a:2b:9d:
16:89:d7:f5:be:a7:fa:94:d4:5c:2e:b6:b5:1c:8c:
61:75:42:0e:8f:b8:a0:65:ad:6c:0c:1c:6a:5a:72:
39:ad:a0:cd:a8:1b:a3:8a:5a:c9:a7:f5:f8:3c:38:
dd:ba:56:2e:84:05:35:70:a4:10:7c:c4:4a:ab:a0:
64:60:9f:19:ec:b6:05:71:9b:88:d8:f3:a8:22:22:
62:fa:a8:4d:c1:51:73:c9:3b:42:11:b7:f4:eb:e1:
3d:e1:06:72:cf:73:a8:5e:65:25:d8:55:34:29:1b:
a8:24:f8:8e:14:48:fc:fb:a7:dc:92:9d:b7:d4:ea:
16:6f:e7:db:f7:8b:88:87:98:9d:9d:5b:fd:db:1c:
2b:c6:be:97:32:aa:89:fa:4e:d0:e2:5e:f1:40:69:
7e:fe:54:28:1b:74:65:09:7c:f4:6d:c6:6e:49:e5:
11:b1:d5:c2:d9:fc:4a:3f:b9:ea:5e:9e:05:26:3b:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:56:6F:61:FD:D5:4E:00:5F:9B:0B:52:5B:08:D3:79:70:4E:A3
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/wvxWb2H91U4AX5sLUlsI03lwTqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:c3ba:5d80/128
Signature Algorithm: sha256WithRSAEncryption
0a:6f:16:ba:c3:f9:a7:a1:08:ff:1e:64:1c:1b:5d:e6:5d:71:
dc:57:89:67:ea:38:38:cf:b0:8d:0f:88:14:1f:9d:a3:2d:28:
1e:40:f1:b0:25:f2:5f:64:fb:c4:cf:85:3f:2f:c3:f5:eb:33:
50:cc:ae:4d:cf:a9:fa:dc:92:51:8d:0b:7a:28:92:b9:b8:c8:
7f:4d:47:bd:6e:bb:d6:e2:d2:15:81:a9:39:62:5b:b5:9d:03:
8f:e6:1b:3b:8c:57:3c:85:37:d9:c8:f9:1b:ae:50:85:97:fc:
f9:6c:a5:21:1e:29:97:2b:03:c0:17:5a:04:28:c3:82:f0:89:
c2:a4:b0:74:66:1d:25:cf:46:fa:5d:e3:d9:81:e7:3b:74:62:
d1:a0:1a:c7:99:48:ba:c9:fb:b7:ad:6e:dc:e9:54:ed:eb:d4:
e3:b7:f6:bc:33:f6:08:65:4d:32:ef:2b:a6:8f:b1:a3:35:c0:
a6:90:50:f6:dd:0a:77:7a:4e:99:f0:83:ab:5f:7f:ca:f3:39:
93:a1:c0:30:c3:1b:1d:5e:a7:c7:d1:29:44:8a:5c:7b:88:6a:
36:f3:eb:bf:9e:4c:50:cb:5b:7b:10:90:31:c4:2a:d4:25:04:
75:05:22:d9:7b:83:42:93:bd:66:0d:04:4a:43:5a:0c:3d:6b:
dc:c4:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:36:52 2025 by rpki-client