Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/Jkj0nvEflHTjBEJz0D2hcBjZbaw.roa
File: Jkj0nvEflHTjBEJz0D2hcBjZbaw.roa (raw, json)
Hash identifier: UQjnN4Y8rDPwtbNMrXZXMHGL9OZuSjUh4Xi/bAaw5Yc=
Subject key identifier: 26:48:F4:9E:F1:1F:94:74:E3:04:42:73:D0:3D:A1:70:18:D9:6D:AC
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197416E027BCC273A5C286C53BEB6D560BB
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/Jkj0nvEflHTjBEJz0D2hcBjZbaw.roa
Signing time: Thu 05 Jun 2025 18:50:18 +0000
ROA not before: Thu 05 Jun 2025 18:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a0d:adc4::/32 maxlen: 32
2a14:9705::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Jun 2025 11:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:6e:02:7b:cc:27:3a:5c:28:6c:53:be:b6:d5:60:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jun 5 18:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2648f49ef11f9474e3044273d03da17018d96dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:21:42:96:af:51:66:84:a6:10:3a:dd:69:
ad:3a:83:24:96:cd:e9:75:2d:8e:45:3e:0b:c9:c0:
db:1d:ce:db:31:c7:33:7d:77:b8:88:be:6a:bf:ac:
07:05:87:61:9c:4d:d8:b5:71:6a:9f:2f:4d:ab:e8:
c5:9f:ec:14:e8:6a:b1:43:25:84:fa:8a:2b:cd:a0:
3e:15:71:23:ac:bd:01:57:92:d6:ed:b4:74:4a:34:
ba:05:68:90:2a:63:21:d0:99:88:a9:b2:73:c6:f9:
80:cb:a1:a4:17:48:e3:0d:76:19:fa:81:4b:aa:06:
a8:a2:b2:db:2b:26:52:52:af:1f:1b:f1:5f:39:16:
da:2f:e7:bd:b5:ab:cb:ad:a6:82:5f:69:ec:bd:7b:
6a:3a:f5:96:0c:0e:4f:e9:6c:b6:56:a9:88:73:8f:
35:8b:5a:28:eb:8d:2e:05:6b:2c:dc:29:dc:23:e3:
1b:20:b2:45:20:8b:c8:c4:ff:ca:eb:40:43:cd:a6:
7e:e5:a1:50:b4:1e:a2:90:64:e0:d1:48:00:65:eb:
c9:c7:65:db:87:a5:2b:82:9c:68:4e:f0:6e:d7:9e:
a7:f0:b6:f4:20:61:b1:3b:e9:bc:78:9e:79:c0:c4:
26:40:94:3c:4d:b4:9b:aa:0b:44:e2:b4:14:2f:10:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:48:F4:9E:F1:1F:94:74:E3:04:42:73:D0:3D:A1:70:18:D9:6D:AC
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/Jkj0nvEflHTjBEJz0D2hcBjZbaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:adc4::/32
2a14:9705::/32
Signature Algorithm: sha256WithRSAEncryption
aa:16:b7:a3:f0:c4:2f:03:68:43:1a:12:99:6e:76:66:5c:5f:
b1:e5:36:74:1c:4e:eb:2f:ee:14:db:43:75:41:c1:67:48:51:
14:80:2c:a4:2c:b4:38:14:72:f4:3c:b1:cc:cf:80:c2:a8:e0:
72:05:da:bc:05:26:f9:15:85:24:cc:f3:12:71:af:36:ce:a1:
2a:32:5d:87:b6:c6:de:28:14:3c:8d:04:56:d8:c8:99:6d:f6:
9b:91:74:2f:c6:f9:73:a4:f1:9e:9b:86:22:28:30:8a:6d:15:
ad:b0:ad:c6:e4:1f:ed:ea:23:e8:d9:70:2a:15:76:6c:f6:23:
e2:4d:36:e9:f3:6f:04:37:60:da:c4:43:75:30:00:ea:78:4f:
59:b9:e5:11:a1:4b:8d:33:d6:29:08:7b:89:9e:4a:1a:32:c6:
55:a8:b5:fa:6f:72:5f:d1:99:8b:6c:1d:18:e8:e4:30:eb:db:
5a:b1:be:e0:2b:c3:6c:67:4e:b5:52:8e:51:42:a6:c8:55:70:
39:94:a3:a0:24:48:57:68:39:ee:f6:0e:ea:7c:65:86:df:75:
57:a2:0e:54:94:26:5a:8d:ee:d2:fc:42:c9:8c:f8:ce:1d:90:
e4:1f:65:35:0c:67:e5:93:b2:82:bb:93:78:c0:1c:0c:50:3b:
0e:e2:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:30:24 2025 by rpki-client