Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7VHy_CR25A4D3SrqdZW3DHG_Was.roa
File: 7VHy_CR25A4D3SrqdZW3DHG_Was.roa (raw, json)
Hash identifier: 8mDZSFT+NuUD5syS3LNMCCLEOiCgb7Anx76t75yGOR8=
Subject key identifier: ED:51:F2:FC:24:76:E4:0E:03:DD:2A:EA:75:95:B7:0C:71:BF:59:AB
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019768C8781B0471F37DC58529FC04F6C372
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7VHy_CR25A4D3SrqdZW3DHG_Was.roa
Signing time: Fri 13 Jun 2025 10:14:17 +0000
ROA not before: Fri 13 Jun 2025 10:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 13 Jun 2025 11:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:c8:78:1b:04:71:f3:7d:c5:85:29:fc:04:f6:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 13 10:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed51f2fc2476e40e03dd2aea7595b70c71bf59ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:b7:35:90:22:96:35:a0:3c:e4:ca:6b:3f:
c0:b6:49:85:71:ef:d5:ba:e9:ac:56:36:a2:a2:cd:
3a:4e:33:3a:2e:f7:b3:8b:69:03:00:af:79:bc:1f:
91:5d:23:f3:a7:07:3c:5d:65:e2:f3:bf:01:46:c8:
1c:2b:bb:19:46:01:8e:ca:9b:c6:c6:52:83:c1:a8:
f7:0f:6b:4a:90:00:4f:7b:ec:83:94:08:80:ec:df:
34:32:d8:50:80:9f:74:1c:66:4f:8c:2a:21:a0:31:
8a:96:5e:bf:ca:c2:7f:5f:e3:38:21:ba:35:f5:f2:
ee:f4:3d:ae:2f:08:8c:2f:aa:ea:40:1f:c1:cb:7f:
0f:d7:36:a8:77:52:3e:ab:8b:b3:31:42:7c:3a:2d:
67:08:7d:f7:e9:5f:00:06:d4:a3:5e:28:ec:a9:04:
e5:7a:92:d0:67:8a:23:dc:22:0f:4d:b5:1a:5f:f7:
9c:34:58:e8:68:cd:d7:d1:f5:07:30:ef:8c:14:14:
b9:45:48:3d:56:58:af:ba:a1:ab:c4:be:92:f8:b9:
b1:f5:2a:9c:18:97:6d:61:e2:00:cb:31:fc:ae:c2:
b3:76:39:54:7c:73:ad:2e:fa:9f:15:2a:90:f7:79:
46:34:1e:32:5d:75:da:e9:f6:cf:76:3d:68:8d:d4:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:51:F2:FC:24:76:E4:0E:03:DD:2A:EA:75:95:B7:0C:71:BF:59:AB
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/7VHy_CR25A4D3SrqdZW3DHG_Was.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
16:f1:00:62:62:25:3b:ab:78:d1:52:bc:96:49:d4:b3:bb:a8:
35:93:b5:4c:fd:53:fc:97:54:ef:be:9a:5c:91:4e:2c:37:5b:
61:5f:0d:37:91:41:a9:6b:5b:dd:fa:89:14:03:ab:74:cb:37:
aa:09:e0:6b:dc:25:8d:5a:cb:35:2b:88:43:4e:99:a0:9d:26:
0f:3f:1b:0c:c3:36:cc:3f:4d:dd:53:e9:1b:06:30:87:6b:1a:
29:4f:69:89:0c:f3:af:10:6a:a5:ff:c3:f7:9a:fa:fc:71:7d:
3a:ac:c7:20:bf:f7:13:96:fe:73:0c:06:d6:bb:48:e4:4f:37:
c9:51:39:ea:c1:53:95:1e:32:7e:86:c6:12:0e:1c:9c:9d:32:
98:3a:ee:7e:6e:8b:49:bf:33:46:1f:45:cc:04:d5:a0:3e:5c:
c1:a9:0e:e6:f7:61:0a:a2:e6:95:a5:22:ba:3d:2b:96:da:66:
41:49:b2:b1:a6:39:4a:83:83:fc:de:48:ed:25:a8:5d:d9:cd:
8a:ac:ad:e6:2c:86:7e:0f:59:50:a5:80:4e:ee:01:e9:1c:60:
cf:cb:2a:f1:be:b3:50:92:85:3f:e8:41:a4:c9:50:74:ce:60:
54:0a:8b:2e:c8:01:12:e3:0a:57:2d:0f:0f:c1:87:be:4a:36:
2d:c0:be:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:19:04 2025 by rpki-client