Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/SAo_Nq-TBJoJYfx8iXRTX_ds-S0.roa
File: SAo_Nq-TBJoJYfx8iXRTX_ds-S0.roa (raw, json)
Hash identifier: MK7pOVjeb6Boz6mefIiLWNdg1fM3E8dYBnFcAfrEBso=
Subject key identifier: 48:0A:3F:36:AF:93:04:9A:09:61:FC:7C:89:74:53:5F:F7:6C:F9:2D
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976FDB619ACDFF5594E2271D0A3375F874
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/SAo_Nq-TBJoJYfx8iXRTX_ds-S0.roa
Signing time: Sat 14 Jun 2025 19:12:17 +0000
ROA not before: Sat 14 Jun 2025 19:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 20:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:db:61:9a:cd:ff:55:94:e2:27:1d:0a:33:75:f8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 19:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=480a3f36af93049a0961fc7c8974535ff76cf92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:36:9d:fd:7c:a2:1e:41:64:7b:18:3b:f3:
9a:be:30:2e:20:78:be:c2:ad:d1:ea:ba:9e:00:eb:
ff:50:f8:70:4f:fa:2c:d3:7f:b8:a3:f9:44:3a:62:
6a:a6:c5:62:a0:63:5e:1c:fd:be:fd:67:17:ee:29:
95:e4:f5:aa:f8:e0:4d:8e:6a:c7:96:a5:0e:a5:e8:
0c:85:87:d0:cc:47:86:29:eb:7c:ef:a2:f8:bd:7b:
69:dd:a7:7d:f8:f0:d9:a8:f0:1f:a7:97:31:17:b5:
cd:6d:06:e8:60:6a:5a:03:35:c2:d1:14:1f:36:9f:
73:fc:0b:db:70:45:1b:12:31:d9:f6:40:65:a6:a6:
ee:91:dc:05:53:6a:46:a5:6d:ea:17:db:1e:cf:1f:
37:0d:77:3a:da:92:99:ce:f2:0b:cc:c5:f4:1d:cc:
21:c4:22:38:a1:82:e0:30:c3:da:50:36:19:fc:97:
4c:76:6a:7c:30:3d:f6:4d:5f:55:2b:25:65:f3:96:
a6:de:45:05:cc:94:96:71:b2:9a:d3:4c:ff:c8:f6:
4b:8e:f5:b0:0f:5a:00:a6:b5:a3:7d:cf:88:2d:4b:
bf:1f:69:99:48:e4:8a:ae:5d:5d:14:b3:35:b9:34:
30:17:8e:3a:9f:01:9f:9a:e2:bb:3e:85:27:ad:e1:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0A:3F:36:AF:93:04:9A:09:61:FC:7C:89:74:53:5F:F7:6C:F9:2D
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/SAo_Nq-TBJoJYfx8iXRTX_ds-S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
4c:4b:21:9b:c2:ac:7f:3b:80:2b:9d:b0:f1:96:36:fd:01:ee:
2c:fa:71:5a:0e:ed:5e:f6:a5:8a:90:0f:7e:c2:15:97:68:ea:
5e:ab:55:ce:49:e2:75:2e:f6:c0:fd:df:7b:d4:77:04:80:8c:
3a:8d:94:14:e6:09:af:79:de:22:95:78:ef:fa:6f:ce:ad:24:
de:e5:3f:84:25:38:47:83:d9:d9:0e:78:9a:33:5e:88:11:a4:
d3:11:98:42:0b:09:5b:12:74:e2:eb:4e:29:57:b5:c5:31:cd:
05:be:22:68:cf:51:ce:fe:3f:cf:12:0a:3a:8a:d5:13:67:6d:
0d:80:ea:83:63:2a:08:10:ba:fc:ab:c7:4c:62:8a:35:e2:27:
1a:40:7f:1d:50:80:1d:0f:58:c4:5a:79:7f:9c:2b:67:08:69:
61:13:24:65:d7:88:a6:3a:d4:f5:cd:0e:c1:14:b6:d0:a6:eb:
bf:81:f9:c5:d3:dc:a7:2b:50:84:2e:1f:6b:dc:11:46:0f:57:
45:48:cf:17:f2:a4:66:db:39:b3:de:0d:ab:35:02:78:d8:23:
44:01:2c:19:bd:e7:1e:77:44:22:e9:27:68:4d:34:4b:fa:fd:
b0:58:06:70:17:07:b9:46:08:08:17:2b:db:8b:55:2f:69:b4:
5f:6a:6a:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:19:19 2025 by rpki-client