Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/SQuQuzfSGyiIssnxbHSj2XnwMlY.roa
File: SQuQuzfSGyiIssnxbHSj2XnwMlY.roa (raw, json)
Hash identifier: fdBf3nvBUTYIRZpODy90OZG2UdNdoNHSsFtZO0ilJAg=
Subject key identifier: 49:0B:90:BB:37:D2:1B:28:88:B2:C9:F1:6C:74:A3:D9:79:F0:32:56
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197613D9F0589170BDDB959B8EECB79B45F
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/SQuQuzfSGyiIssnxbHSj2XnwMlY.roa
Signing time: Wed 11 Jun 2025 23:05:17 +0000
ROA not before: Wed 11 Jun 2025 23:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:613d:4972/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 11 Jun 2025 23:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:3d:9f:05:89:17:0b:dd:b9:59:b8:ee:cb:79:b4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 11 23:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=490b90bb37d21b2888b2c9f16c74a3d979f03256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:b8:76:96:5b:3c:82:6c:6b:ad:e8:88:1f:
d3:af:0a:77:3c:7b:4d:7c:f5:af:a7:59:74:2a:d1:
40:48:a2:ed:44:1f:99:b9:8f:6b:9c:21:e4:d5:69:
bd:35:11:ab:41:0c:fd:1d:c0:bb:1c:ca:6d:7b:8f:
1b:0c:a0:f0:e1:d4:0e:59:6f:44:c2:27:cd:47:cf:
8b:3d:e5:de:12:02:80:42:93:0e:76:3f:ea:b9:3b:
76:33:8f:f0:29:7a:f0:73:1b:78:af:3b:f8:13:c2:
7d:85:ac:7c:e2:e1:af:6d:ab:dc:f5:81:f3:a7:c2:
4f:91:d8:9f:78:90:48:6e:05:03:52:9a:c8:d4:f7:
01:8e:b6:f1:99:9b:9f:77:f0:db:97:64:39:1b:54:
e1:6f:f4:ab:6d:31:cb:d7:9e:ad:41:14:73:53:54:
8f:e8:f5:35:3e:ca:bd:30:c5:6d:8e:fb:26:cf:5a:
66:4f:b9:e2:31:19:49:ee:f4:4d:46:12:0d:87:93:
b6:fb:0b:9e:d8:f5:50:73:40:96:df:3d:db:2d:c9:
1e:10:c4:ce:b2:14:48:f3:e4:14:36:78:34:90:12:
88:9a:eb:d1:9a:0a:03:61:b1:10:c8:3e:aa:d4:b4:
7f:3c:aa:8d:07:0b:2b:07:0d:47:d5:df:9f:3c:14:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:90:BB:37:D2:1B:28:88:B2:C9:F1:6C:74:A3:D9:79:F0:32:56
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/SQuQuzfSGyiIssnxbHSj2XnwMlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:613d:4972/128
Signature Algorithm: sha256WithRSAEncryption
67:dc:e2:42:7f:cc:9c:cd:e4:93:03:9f:39:dd:f8:39:a6:34:
13:9a:2b:34:5a:a6:00:16:f1:68:2f:8e:d3:51:80:a5:cc:07:
59:07:35:99:d3:4b:47:df:84:b5:d1:bf:24:a4:c2:a6:4c:c5:
3b:49:f8:ba:6c:3b:91:ac:b1:c4:ed:da:4a:e3:0c:e3:1d:4d:
23:02:9a:69:e0:3f:db:ca:a1:6f:01:9e:9b:12:4c:b5:d8:b5:
2a:c4:a1:49:4b:42:aa:99:da:7c:9c:fb:e8:79:5b:49:ea:b3:
a9:65:c4:f0:8b:e8:d1:f5:ec:72:25:4a:cd:94:3c:c3:67:07:
78:a6:0d:55:c3:26:da:97:8a:91:a1:f8:b9:0a:36:4c:49:76:
24:58:4e:e8:bb:06:fc:cd:44:b3:28:e8:70:4e:1b:0c:69:46:
72:14:a7:98:3b:4f:6f:09:78:47:d3:2a:3f:be:e4:25:05:d8:
3d:ce:37:25:c2:60:f7:9d:59:ea:4d:1b:c4:a0:9e:aa:9d:e1:
f1:b3:7e:c1:c8:67:11:88:a1:c3:91:f4:d9:10:45:a2:df:c0:
23:4e:2d:0c:bb:45:53:3e:eb:76:fe:06:c6:fe:2c:b7:e5:ed:
b2:41:40:17:8d:16:49:44:08:6f:84:22:d7:aa:56:09:42:c8:
98:29:d7:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:02 2025 by rpki-client