Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/x0bYseb8dtYVMwBug-OHJVi2zBM.roa
File: x0bYseb8dtYVMwBug-OHJVi2zBM.roa (raw, json)
Hash identifier: YYIcUvQ9kpqSnnzUWnnX1Yu2eYxoCgqcMAvC9ID+FhM=
Subject key identifier: C7:46:D8:B1:E6:FC:76:D6:15:33:00:6E:83:E3:87:25:58:B6:CC:13
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01979CAF5E3B8A9A5D1AACDBD5D05EF39951
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/x0bYseb8dtYVMwBug-OHJVi2zBM.roa
Signing time: Mon 23 Jun 2025 12:07:07 +0000
ROA not before: Mon 23 Jun 2025 12:07:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
2001:67c:64:ffff:0:197:9cac:a47d/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 23 Jun 2025 12:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:af:5e:3b:8a:9a:5d:1a:ac:db:d5:d0:5e:f3:99:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 23 12:07:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c746d8b1e6fc76d61533006e83e3872558b6cc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:e8:24:f0:80:7c:de:c4:b5:09:20:bb:9b:
8c:49:26:24:22:9f:cc:d6:e1:1c:86:72:58:b2:8c:
2e:04:3e:99:c1:ca:b5:be:36:51:1b:be:7b:59:f0:
3b:e5:d3:2b:7d:b8:17:0e:24:9e:65:e1:56:51:7e:
62:77:ef:97:9e:30:9b:fe:2e:a8:56:ec:7d:20:d9:
b8:1e:56:70:a4:24:0b:d2:54:bd:99:27:0e:eb:29:
1a:59:05:a1:fa:2d:f3:cb:84:39:6f:55:33:55:ec:
44:70:a0:3e:aa:e4:c2:11:68:9e:2c:f7:0f:ce:4e:
a1:75:6f:50:fd:b3:fc:9f:12:c5:6f:ef:55:97:4f:
79:33:56:3e:07:79:30:b2:31:08:0e:b0:2f:65:3b:
74:42:0f:2b:9b:64:bf:9a:be:0c:d3:0f:6c:4c:75:
05:4a:73:eb:12:33:6e:cc:f7:58:09:e6:91:73:05:
b9:32:15:a3:28:c1:88:33:68:af:3e:59:b1:72:84:
9a:7d:02:5b:3e:5f:83:7a:76:b6:66:3a:19:88:3a:
ec:f9:0e:93:54:b3:aa:c4:da:15:36:fc:b1:2a:85:
48:9d:fa:e3:dd:77:24:10:0d:35:47:9a:bf:8b:e0:
dd:13:a1:ee:fa:09:66:d0:68:49:42:1c:00:5b:95:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:D8:B1:E6:FC:76:D6:15:33:00:6E:83:E3:87:25:58:B6:CC:13
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/x0bYseb8dtYVMwBug-OHJVi2zBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
2001:67c:64:ffff:0:197:9cac:a47d/128
Signature Algorithm: sha256WithRSAEncryption
4c:a9:79:7d:ae:2a:e1:b4:42:bf:d5:2b:42:7e:c6:6d:a3:79:
70:3d:da:39:6c:49:1d:f7:df:b4:32:b7:d4:6f:4b:a9:d8:ed:
ce:e2:5e:d2:39:b1:e3:cb:59:6d:7c:e3:a3:bc:ea:75:cd:92:
13:94:80:e3:36:86:d1:61:07:71:ee:8a:fd:73:1f:a3:4b:bd:
05:62:54:f5:4d:bf:aa:ce:cb:7e:19:37:11:a4:cb:5d:24:9b:
cf:50:c3:13:82:8f:44:b4:66:08:bb:82:9d:39:a4:51:99:e2:
a9:8c:eb:c5:3c:c3:a6:11:28:52:6c:59:13:ba:f6:51:79:cd:
42:77:35:47:39:ce:0b:fd:52:c2:fd:88:3c:b4:d6:92:5a:51:
8d:81:d0:2b:54:1d:31:7c:16:86:33:f3:07:b9:20:98:d7:a1:
fe:78:5b:21:18:73:33:8d:e9:78:61:75:ca:ac:1b:d5:90:1b:
92:db:cc:10:c4:a1:1b:20:20:7c:5c:f4:6d:8d:3a:cb:9b:94:
72:c6:57:27:92:92:f2:05:5c:e7:e2:10:bd:2a:2b:37:36:37:
fb:4d:bd:01:a8:c8:2a:d1:27:25:f4:62:cf:ae:59:24:3d:f2:
4b:11:80:e8:9b:dd:27:87:cf:b7:ec:24:97:31:19:e4:56:e2:
10:02:63:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:28:33 2025 by rpki-client