Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/PwBvwx5B2ifH0QWqDFp-KL0slrE.roa
File: PwBvwx5B2ifH0QWqDFp-KL0slrE.roa (raw, json)
Hash identifier: YnPf/EJhD356BePfnVTXM3DyvKPEQYwMKQMgNW83dO8=
Subject key identifier: 3F:00:6F:C3:1E:41:DA:27:C7:D1:05:AA:0C:5A:7E:28:BD:2C:96:B1
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197693481B60EBD147A0F910EF51EDC7F78
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/PwBvwx5B2ifH0QWqDFp-KL0slrE.roa
Signing time: Fri 13 Jun 2025 12:12:18 +0000
ROA not before: Fri 13 Jun 2025 12:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 13 Jun 2025 13:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:34:81:b6:0e:bd:14:7a:0f:91:0e:f5:1e:dc:7f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 13 12:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f006fc31e41da27c7d105aa0c5a7e28bd2c96b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:8d:d7:36:57:96:93:9d:1b:98:a3:a6:40:
d1:81:4c:b0:d8:42:da:79:c9:4b:ad:54:ab:e0:4a:
2c:df:de:a4:8f:01:5a:e8:9e:68:93:c8:4b:a0:1a:
ae:9c:cd:d4:d9:57:aa:9d:e9:7d:6e:99:89:1c:aa:
51:31:67:2e:da:14:cf:9d:e9:7d:0c:40:89:c2:02:
6c:5c:4a:50:f2:f6:c0:6b:57:b4:a1:0b:18:19:98:
4a:be:bd:e2:2d:20:0a:3d:ac:7f:26:48:d1:65:41:
4b:ae:83:16:d5:b0:e1:f3:d3:c1:cf:c4:18:c9:14:
c6:07:29:54:ca:6b:4a:af:0e:e4:0c:1d:fc:33:3d:
2b:c4:50:44:ff:2f:e5:15:40:09:ef:ec:f8:5c:85:
c5:a1:d1:9e:14:ae:9b:28:3f:fe:84:c6:87:b7:b1:
dc:0b:3a:19:6a:72:15:5f:7a:b8:c0:c8:ac:7c:b2:
30:c4:7b:cd:e5:b5:93:59:5d:05:97:aa:46:29:9e:
f8:4d:43:00:70:2f:a4:d5:02:1c:a7:c7:db:bc:f1:
a8:83:f2:22:3d:28:d2:2a:41:e4:69:89:1f:b8:1f:
0b:6d:f2:20:6a:c2:ff:55:90:80:eb:79:c2:20:76:
47:bc:77:59:cb:3a:f5:2d:49:a2:ec:c4:02:a4:c2:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:6F:C3:1E:41:DA:27:C7:D1:05:AA:0C:5A:7E:28:BD:2C:96:B1
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/PwBvwx5B2ifH0QWqDFp-KL0slrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
10:52:4f:d1:4e:3a:75:17:38:3d:b1:96:3c:39:d8:1d:c9:4f:
10:c4:33:84:96:dd:c1:62:0f:7a:2c:92:9d:64:1f:73:07:a1:
76:63:b4:fc:80:4d:1e:da:89:b9:98:52:40:d2:90:c3:28:9b:
8e:0e:d8:4f:7b:cd:0c:6e:23:89:da:9b:3d:ca:be:95:50:06:
08:53:a8:d7:8a:f8:58:e2:5a:63:dc:a1:26:83:32:a7:2c:63:
db:bb:5b:77:61:a0:c3:76:52:fa:d1:44:f0:5a:71:52:53:96:
bf:25:76:cd:e3:85:ae:01:21:80:d1:c2:5e:82:e2:8d:c7:ad:
81:6e:19:16:5b:96:08:94:54:32:b4:25:b5:e7:dd:35:68:fa:
63:1c:a5:91:16:27:96:21:f6:ad:aa:47:63:87:30:0b:ce:a0:
62:71:e7:7c:f6:7c:1e:c6:fe:01:92:76:66:ea:d6:b1:78:01:
46:cb:e2:d3:4a:09:83:69:cd:75:2c:62:a0:70:6a:e3:27:68:
87:c8:df:ea:35:0a:8e:23:75:18:70:28:4d:f5:18:31:52:60:
86:c5:6f:01:d8:6d:c8:cc:d9:6d:58:13:21:b3:bd:ec:6d:e7:
02:f0:39:61:b5:99:b3:c5:27:2a:3f:ad:45:74:22:a3:88:8d:
84:8d:8c:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:25:17 2025 by rpki-client