Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/zhIo-FiwlWI-WbKdPn4L2ZpBF04.roa
File: zhIo-FiwlWI-WbKdPn4L2ZpBF04.roa (raw, json)
Hash identifier: pQoMYgB6Sroxi00jyxhPMhCL8o7EhpuHVrfgURmJ2mE=
Subject key identifier: CE:12:28:F8:58:B0:95:62:3E:59:B2:9D:3E:7E:0B:D9:9A:41:17:4E
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019781AB9FB297D2BE259AF1D04855DC9925
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/zhIo-FiwlWI-WbKdPn4L2ZpBF04.roa
Signing time: Wed 18 Jun 2025 06:13:17 +0000
ROA not before: Wed 18 Jun 2025 06:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Jun 2025 07:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:ab:9f:b2:97:d2:be:25:9a:f1:d0:48:55:dc:99:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 18 06:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce1228f858b095623e59b29d3e7e0bd99a41174e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:1e:89:3d:ed:a0:11:0a:db:3a:9b:fe:25:
4e:78:39:47:85:6e:1c:b8:f2:49:09:b1:ce:a3:51:
ef:84:a4:3c:91:cd:f5:96:63:f8:ad:30:d1:8f:55:
05:92:6c:be:68:ae:45:98:a8:b6:c2:9f:f4:89:05:
ea:7c:92:59:d1:05:fa:f8:d0:c1:7b:9b:31:d9:25:
0a:5d:43:6c:c7:72:cb:31:df:08:7f:5f:54:c5:a2:
25:71:6b:ef:bf:74:bb:27:98:65:aa:3f:0d:e1:a9:
10:9b:99:7c:62:40:54:0d:94:71:5f:28:c6:6e:60:
cb:dc:53:73:78:18:ea:a9:4f:82:40:47:e7:8d:2d:
73:98:ab:55:83:42:89:c2:22:c3:88:c9:7b:46:fc:
dd:e8:fb:f3:2a:bb:21:be:60:90:f2:be:8c:f8:47:
01:58:16:0c:c1:54:35:ea:89:d7:fa:42:98:83:ed:
34:87:a7:d4:e1:e0:23:2e:cb:0c:93:c5:4a:47:ac:
cf:e0:e7:fd:83:ba:15:a0:cb:d3:8b:2c:78:19:10:
1d:78:81:fa:1a:72:69:1e:53:2c:32:fb:32:59:78:
3a:35:30:1d:5b:a6:80:a2:b0:04:8f:1a:74:cb:e0:
75:31:be:d2:1b:3f:bc:e6:c5:46:27:38:d4:bf:32:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:12:28:F8:58:B0:95:62:3E:59:B2:9D:3E:7E:0B:D9:9A:41:17:4E
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/zhIo-FiwlWI-WbKdPn4L2ZpBF04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
56:98:7f:d7:11:b8:5c:fb:2c:5a:22:5c:79:cf:04:7c:6b:d4:
4b:ec:3b:1d:27:9c:28:af:4c:02:de:91:bd:71:39:19:8f:7b:
04:78:a1:ec:e6:a2:06:42:6e:43:df:8d:47:ca:7b:0d:10:1e:
4a:21:25:59:72:94:a9:56:fb:6e:70:9e:55:f6:54:02:8d:0d:
8d:33:b1:a1:f2:c2:85:c9:22:1b:8b:e6:8a:02:81:a9:01:f0:
35:1c:00:ba:83:bb:14:eb:c9:f6:8a:67:30:0d:c5:c7:77:96:
03:9c:31:a5:f5:52:48:fe:ef:da:df:e1:f8:30:7f:ce:58:51:
7c:aa:8b:e6:3a:0d:f5:f1:a4:a0:80:99:ae:97:e0:16:64:24:
a7:a9:96:d5:37:52:24:60:0f:17:e7:22:d4:07:20:a0:19:b6:
9e:17:24:f5:22:2d:66:19:53:bc:ce:b4:cc:f7:51:a2:6a:a9:
08:31:b9:45:a4:66:cf:5c:c6:90:5d:80:20:82:35:6f:34:41:
18:63:b0:4f:04:64:e7:8e:a2:5d:12:04:2b:42:47:68:ef:72:
10:0c:71:76:db:7b:a1:51:91:28:b3:7c:54:f0:d2:7c:7f:af:
ba:8b:c9:8b:fd:83:2e:95:16:64:c3:b3:79:80:a1:37:5f:c4:
c4:f6:ff:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 5 14:59:37 2025 by rpki-client