Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/xRFf1_iU7g2AwKVU1K8hAcNE2b8.roa
File: xRFf1_iU7g2AwKVU1K8hAcNE2b8.roa (raw, json)
Hash identifier: KBP0zTX9BzUmmYqBLILysTWncLJOZLO9oT0rcZsAm4U=
Subject key identifier: C5:11:5F:D7:F8:94:EE:0D:80:C0:A5:54:D4:AF:21:01:C3:44:D9:BF
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977EA8BF89A1FBF781BC8542E983F0965B
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/xRFf1_iU7g2AwKVU1K8hAcNE2b8.roa
Signing time: Tue 17 Jun 2025 16:11:17 +0000
ROA not before: Tue 17 Jun 2025 16:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 17 Jun 2025 17:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:a8:bf:89:a1:fb:f7:81:bc:85:42:e9:83:f0:96:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 17 16:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5115fd7f894ee0d80c0a554d4af2101c344d9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:e4:4f:3b:bb:86:19:b1:fa:02:46:91:81:
fe:6e:cf:74:ee:0e:20:dd:64:d3:ae:e0:f3:6e:be:
af:2c:e9:9d:3d:9e:db:1c:66:80:c3:ed:35:1a:89:
94:dd:2f:9c:7d:3c:10:7a:ae:9d:f0:ff:86:4d:53:
14:ff:da:de:da:3f:dd:10:42:6b:19:b3:aa:b1:dc:
01:f3:c4:b4:a9:2b:b1:b3:16:f3:1d:8e:ac:80:1b:
48:e1:d5:6d:dc:32:a5:65:6e:06:81:e6:c7:5e:28:
02:f0:5d:3a:8b:37:ba:e2:df:b3:a4:c8:31:f1:04:
6d:31:d0:f1:be:73:d5:83:69:d0:08:35:f0:e0:bc:
cd:d1:de:31:a7:bf:e0:3e:7c:fa:ba:81:b0:54:9d:
4e:8a:bb:5a:51:4f:11:dc:72:76:59:1a:8e:02:91:
09:62:2b:ad:30:73:20:63:4a:55:81:d9:4a:d2:c1:
99:e9:da:04:c0:55:6d:a6:13:35:26:aa:07:af:90:
30:bf:13:44:5d:94:53:71:fb:9d:65:21:c5:35:ef:
46:11:0c:f2:09:ad:33:e6:20:c9:6c:ca:e5:3c:77:
fe:d8:04:44:84:60:29:43:f6:2b:09:c2:b0:a5:85:
1b:f8:0f:fc:e1:c0:67:99:08:b3:7f:6b:18:fb:6f:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:5F:D7:F8:94:EE:0D:80:C0:A5:54:D4:AF:21:01:C3:44:D9:BF
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/xRFf1_iU7g2AwKVU1K8hAcNE2b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
7c:18:f4:2e:3f:39:d7:31:84:92:46:06:cf:f6:f6:57:2d:06:
de:f5:fa:9d:2a:de:20:d7:b1:2c:91:95:82:67:d8:b7:f7:3f:
91:33:39:22:83:29:7f:b8:bc:86:ca:62:82:2f:d6:3b:1e:11:
f4:d0:84:23:a1:75:9c:cd:c2:67:ac:06:ce:e9:40:7c:76:93:
0a:05:a3:fb:09:b1:47:a6:f1:be:0a:25:0c:72:b6:b7:b8:d4:
76:38:32:1b:35:7d:7e:17:25:db:34:d0:90:0d:31:7a:09:2f:
90:47:82:ef:06:6d:6c:19:28:9d:f0:9d:9f:e1:bc:af:d2:1a:
54:d1:76:90:e0:ef:da:ca:04:82:44:02:43:41:19:cf:03:e2:
b4:42:66:d8:bf:4f:70:22:6a:35:ce:6b:b9:3d:e3:c9:c0:a8:
ec:af:52:eb:24:24:6d:30:89:88:f4:10:01:20:d9:77:99:c7:
d9:ec:f7:df:e1:23:56:3d:cc:82:8f:37:5a:c1:41:15:b2:d7:
97:a6:a1:93:78:1c:a4:70:69:2c:0b:6c:71:dd:5a:00:48:ee:
7d:fd:45:16:55:bc:b7:06:d5:ff:31:39:84:92:92:16:a0:ff:
0e:bf:41:a9:39:ee:c4:07:15:e8:5f:e0:e5:93:29:4a:b9:bb:
7b:4f:b8:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 14:59:37 2025 by rpki-client