Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AH2FzjFg_9gpLbfjukATa3XT0Cg.roa
File: AH2FzjFg_9gpLbfjukATa3XT0Cg.roa (raw, json)
Hash identifier: nyThYSwgJnV+/6L1v+CgduU4v7U6h3Vyrv0VMimE7K8=
Subject key identifier: 00:7D:85:CE:31:60:FF:D8:29:2D:B7:E3:BA:40:13:6B:75:D3:D0:28
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976BCA6D4AF5D165A514C021B186D7D8F2
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AH2FzjFg_9gpLbfjukATa3XT0Cg.roa
Signing time: Sat 14 Jun 2025 00:15:17 +0000
ROA not before: Sat 14 Jun 2025 00:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 01:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:ca:6d:4a:f5:d1:65:a5:14:c0:21:b1:86:d7:d8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 00:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=007d85ce3160ffd8292db7e3ba40136b75d3d028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:a5:fd:d3:ad:1d:78:09:67:db:90:89:00:
74:7b:47:c9:fa:9e:e8:80:e8:c3:38:7a:20:88:50:
15:17:1a:1c:e9:85:45:ce:b7:a0:26:49:a1:a9:bc:
f0:61:c9:41:3b:38:7b:a7:33:1a:89:09:e0:27:5a:
89:66:9b:86:75:3e:4d:42:bc:90:d9:06:33:75:cf:
81:78:70:0f:1f:b2:84:6b:40:86:39:63:84:98:20:
66:4e:f6:8a:53:ab:8a:33:8f:42:c9:3f:73:36:6a:
23:16:15:09:87:cb:d1:f8:ac:54:23:27:08:af:72:
30:82:d2:8b:22:6d:6f:33:5d:ba:3a:25:99:84:85:
89:90:70:a8:f0:30:60:0b:cd:00:ed:45:95:7f:11:
f8:ef:50:9e:f1:6a:94:54:63:53:1a:f7:19:e5:8f:
3a:82:d7:ee:ab:e0:c7:d4:73:72:5e:0a:6a:1b:8d:
90:da:91:12:29:f9:73:72:d4:4b:6d:3a:f4:7d:70:
13:75:c1:a6:cb:6b:06:e9:59:0c:4b:88:fe:e8:2a:
f0:2f:f7:fb:22:74:a3:ae:a9:4b:6b:fc:40:1b:da:
40:73:9b:f1:11:60:48:62:1d:0c:ee:07:e6:a3:21:
24:40:41:75:41:19:f8:a5:1c:25:d5:0b:b6:27:f5:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:85:CE:31:60:FF:D8:29:2D:B7:E3:BA:40:13:6B:75:D3:D0:28
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/AH2FzjFg_9gpLbfjukATa3XT0Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
52:18:79:ca:41:6d:31:4d:ed:e5:5b:50:f3:ba:fe:58:d6:58:
ba:4e:30:9b:8c:b8:08:e4:72:f9:03:8c:f3:c3:7f:7d:a0:c5:
25:92:80:4e:2b:26:9f:95:72:91:ae:a0:49:95:3c:59:d8:3e:
fa:a9:03:4d:04:e6:bf:c7:33:21:79:43:48:3d:6f:9e:8f:77:
1b:72:e9:68:ec:ab:b3:f7:3e:17:8b:21:07:be:5e:8b:84:fb:
61:22:9f:af:4b:55:21:75:60:04:c5:25:d6:ab:1c:17:81:88:
6a:10:f7:5b:a3:38:17:55:af:4c:c4:af:8b:c0:93:bf:40:6b:
d9:2f:8c:8d:9d:c3:72:52:02:27:ec:33:69:8f:ef:1c:05:67:
ba:f8:c1:1e:fe:a2:6e:55:99:e5:3f:ab:9a:89:a8:3c:bd:f9:
ee:9f:61:b0:6a:db:d1:d4:53:84:a1:9f:89:90:0b:3e:da:0d:
2e:af:0b:33:29:db:b7:45:63:a4:32:e8:38:7f:43:d4:5d:1f:
65:bd:b1:f3:37:8a:4b:00:8e:a4:b1:ce:4a:76:f5:ae:fb:e6:
d1:9e:c5:d9:61:a1:72:92:c4:61:e3:02:00:6a:c3:98:26:66:
40:5b:a6:63:79:b5:ea:5e:fe:c4:a7:0c:b5:de:5c:20:d0:0e:
ea:b1:37:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:56:33 2025 by rpki-client