Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/OoQEmtPH58qge1OQjAhJXRWfwHM.roa
File: OoQEmtPH58qge1OQjAhJXRWfwHM.roa (raw, json)
Hash identifier: kbQ2fCB05t3FCzg/cqAXMdg22cMV0jl/C+g07TXKZUE=
Subject key identifier: 3A:84:04:9A:D3:C7:E7:CA:A0:7B:53:90:8C:08:49:5D:15:9F:C0:73
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976EC8B8F9A1306C23AC9842DCFEFA649D
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/OoQEmtPH58qge1OQjAhJXRWfwHM.roa
Signing time: Sat 14 Jun 2025 14:12:17 +0000
ROA not before: Sat 14 Jun 2025 14:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 15:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:c8:b8:f9:a1:30:6c:23:ac:98:42:dc:fe:fa:64:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 14:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a84049ad3c7e7caa07b53908c08495d159fc073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:98:7e:fe:37:32:b1:dc:ae:06:3e:be:46:
f8:0d:b6:f4:a7:dc:fa:ff:45:20:d9:e5:68:9c:96:
79:5b:cb:1c:b3:ff:26:46:6b:10:c4:68:ff:50:f3:
a9:c9:9a:1b:bf:22:22:8b:50:9e:fb:24:3b:fe:a0:
04:75:ab:74:85:0e:07:9d:2a:a5:ec:76:ae:e9:a4:
a0:89:f2:f1:a4:41:f6:6b:92:ab:a7:d9:a9:1d:95:
9a:1f:0b:0a:6d:a5:a5:d5:fc:99:b8:64:96:aa:f5:
71:45:ef:09:04:0c:a2:71:2c:71:e0:6b:e6:51:0f:
c5:1a:f8:f4:67:ad:c6:e2:8c:dd:da:ae:c0:72:92:
ca:5a:96:05:29:aa:5d:95:f3:9d:16:d0:93:a2:e9:
de:9a:be:1f:7a:a3:98:6f:45:97:14:a9:95:d6:fa:
75:46:04:1f:ae:28:44:34:09:3f:21:ac:74:c5:ae:
38:93:b5:9c:d5:21:4e:64:a8:74:96:6e:55:85:1a:
0c:1d:61:90:85:2a:b2:0e:1c:1c:bd:2f:43:8f:e8:
a5:05:e4:e8:d9:6d:f3:14:66:13:14:a7:ff:e2:4b:
7d:59:14:66:8d:82:b8:d2:0f:0c:a1:e8:cf:be:37:
01:40:be:13:b4:a8:88:bc:6f:e2:2b:da:d7:7d:da:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:84:04:9A:D3:C7:E7:CA:A0:7B:53:90:8C:08:49:5D:15:9F:C0:73
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/OoQEmtPH58qge1OQjAhJXRWfwHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
0c:7a:93:50:1b:6b:1c:60:ce:60:79:8c:81:48:4d:24:0e:2d:
a9:5a:56:cc:2c:5a:c2:60:9c:3e:25:5e:6e:7c:49:67:f8:b3:
f8:7e:e2:a8:70:1f:17:f9:0a:88:61:a2:e4:9a:f8:55:ec:ec:
9c:95:00:c9:a7:bd:6f:f9:e3:62:08:cf:23:d8:94:df:51:2f:
b1:b8:12:8d:c1:63:a8:63:b3:60:72:4c:c1:47:7b:5c:5a:98:
26:71:95:67:e1:9d:68:3b:fc:26:cf:f9:bb:04:80:4e:e2:ae:
82:59:ba:a0:1f:b9:ac:42:cd:38:32:fa:b9:9e:10:3e:a0:bd:
52:2c:cd:6d:b3:c4:cc:11:22:98:fa:c8:9d:71:15:8e:13:a2:
45:03:2e:7d:7e:ac:71:b9:15:a1:ea:93:03:1b:c4:01:bd:e7:
99:3d:a8:ce:5f:d8:14:bd:3c:84:8d:ee:22:c2:96:36:03:5b:
10:28:3f:1f:6f:5a:35:5b:27:60:e3:62:cc:d7:d6:bc:95:98:
ca:4b:36:53:45:d5:99:2b:70:93:53:73:ba:eb:71:09:ae:8f:
13:f3:59:ae:64:f9:79:d3:58:ba:00:08:02:c4:58:db:48:33:
2e:6c:75:ca:3a:cd:51:31:17:71:68:a7:fd:97:b9:6e:1a:17:
29:1f:69:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:18:36 2025 by rpki-client