Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/OnsaSMxEY6LSTJ5LOI6_lFaonqw.roa
File: OnsaSMxEY6LSTJ5LOI6_lFaonqw.roa (raw, json)
Hash identifier: 8DwK7ldsWM+LtEQj3xEWMuCTQSH8ILRze47lnozSkuc=
Subject key identifier: 3A:7B:1A:48:CC:44:63:A2:D2:4C:9E:4B:38:8E:BF:94:56:A8:9E:AC
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976F3955AD2F3EC944388F86035104ABD8
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/OnsaSMxEY6LSTJ5LOI6_lFaonqw.roa
Signing time: Sat 14 Jun 2025 16:15:17 +0000
ROA not before: Sat 14 Jun 2025 16:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 17:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:39:55:ad:2f:3e:c9:44:38:8f:86:03:51:04:ab:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 16:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a7b1a48cc4463a2d24c9e4b388ebf9456a89eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:98:92:42:70:6b:13:5c:f6:fa:74:bc:af:
f9:9a:7d:4f:bf:f8:a0:e4:90:72:44:64:b5:9e:5b:
98:71:25:86:1a:6e:ab:53:6a:94:6e:4d:7d:98:be:
be:c4:4f:1f:10:a8:2e:85:42:5f:23:90:53:94:5a:
03:f6:94:72:ed:43:1d:9e:11:93:9f:d9:33:d0:00:
1e:e7:60:d7:cb:4b:bf:6f:17:9a:d3:cd:fd:24:32:
df:8b:72:c8:b8:23:41:33:33:62:3d:fa:9f:c5:64:
1b:6c:77:36:22:f5:a9:7f:5f:06:25:6a:c8:66:de:
55:c9:50:0e:5d:26:d1:40:c7:b9:26:9b:5b:0b:5f:
ad:ad:ec:30:e9:23:3a:3d:c1:1c:5d:37:e0:6f:a7:
7b:73:22:f2:25:23:26:ea:d1:39:98:40:b2:68:6e:
9b:87:84:da:2b:3c:ea:63:c1:90:5a:50:71:ea:e2:
56:4a:85:4d:85:3f:1c:fb:be:3f:b4:f5:79:18:90:
eb:93:12:ad:7e:7f:35:73:18:d5:0f:86:52:6d:f3:
31:03:6c:0c:12:5c:80:e1:ae:68:d1:78:8c:4b:a3:
29:2c:5a:76:d7:62:a7:12:67:ac:dd:71:38:4b:62:
23:17:07:67:5b:3f:be:93:1b:6b:0f:a5:c6:c7:7f:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:1A:48:CC:44:63:A2:D2:4C:9E:4B:38:8E:BF:94:56:A8:9E:AC
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/OnsaSMxEY6LSTJ5LOI6_lFaonqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
78:9f:db:bd:53:45:6d:9e:5e:0b:54:69:ed:8f:a5:09:7b:24:
5b:87:bd:63:b7:bb:a4:cd:f2:62:0f:fa:aa:33:9a:40:bb:52:
65:db:73:0b:07:3d:b6:c8:ee:35:83:88:9b:2e:cb:fb:64:6e:
34:25:1b:07:a7:57:36:6b:06:47:ed:96:d6:36:42:4a:df:02:
27:f5:37:33:d6:27:79:a4:14:d3:ef:0d:56:ad:34:c9:6f:51:
bf:c9:3c:9e:59:88:60:fe:9c:af:4c:5b:96:7f:0b:56:b8:80:
3d:1c:be:97:a3:4b:b1:e1:e6:9b:58:d0:1f:38:a6:43:35:82:
12:d8:d0:5e:eb:3f:b3:a2:76:b1:2c:43:17:68:2e:74:54:59:
78:cc:17:d2:a2:ac:cf:8f:18:79:fc:0b:45:05:cd:66:96:c7:
5b:fd:7e:5f:95:cc:2c:89:bb:73:42:cd:b8:87:6c:a5:dd:f0:
d2:ec:dd:49:5b:61:dc:ba:22:7e:f3:a1:13:02:e8:6f:7b:2e:
10:3e:27:c2:e1:5d:81:d4:14:af:b5:84:17:9f:97:45:b9:93:
8d:c7:c8:2f:db:0b:e4:16:c7:a5:b9:91:ed:10:b3:57:d0:89:
b7:b0:05:c0:77:34:b9:5c:28:0a:28:24:80:f9:38:be:56:37:
79:76:df:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:48 2025 by rpki-client