Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/TL2TKjUUNXTI8L0TWWacKzuZhb8.roa
File: TL2TKjUUNXTI8L0TWWacKzuZhb8.roa (raw, json)
Hash identifier: wX6lY40jvgTNqTpOZx1cK2KfE7XHH5fDOJRGKuUEnU0=
Subject key identifier: 4C:BD:93:2A:35:14:35:74:C8:F0:BD:13:59:66:9C:2B:3B:99:85:BF
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976CDB415A432EF1465AA8C350FDCCA009
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/TL2TKjUUNXTI8L0TWWacKzuZhb8.roa
Signing time: Sat 14 Jun 2025 05:13:17 +0000
ROA not before: Sat 14 Jun 2025 05:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 06:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:db:41:5a:43:2e:f1:46:5a:a8:c3:50:fd:cc:a0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 05:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cbd932a35143574c8f0bd1359669c2b3b9985bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:23:38:8a:af:d3:e4:c7:b0:19:9b:c0:d6:
42:5c:b7:c0:3c:95:6c:d4:69:28:34:c2:4a:0f:ff:
42:c3:fe:9b:75:3a:6a:89:d2:12:0f:c4:94:70:ea:
51:50:40:b3:90:c8:9b:24:d6:99:c5:b0:a1:98:90:
b0:f0:27:b6:2d:06:94:85:6e:ac:7f:6c:dc:bb:0c:
0d:9e:2b:9a:70:1c:7e:14:02:9c:c3:58:b5:34:10:
cb:e7:f8:69:68:c9:ec:e4:15:38:fb:2f:a8:3c:56:
62:e5:ff:2c:19:39:68:c3:d8:e0:f0:b0:63:11:3f:
b8:73:23:34:fb:ba:ad:34:a0:63:b4:02:38:10:22:
8e:ed:4d:8f:aa:77:e6:80:5f:e1:4f:68:8a:6f:24:
96:65:6c:ec:81:86:b0:40:e8:4b:25:8d:71:7f:b7:
a1:64:dd:e6:dd:16:31:f8:9e:5e:d3:6a:e2:7c:32:
20:00:98:ec:29:81:a8:d1:8d:fb:05:49:ee:fe:a0:
75:a1:a8:ab:2b:4f:2d:52:7a:a1:03:1a:bd:87:76:
13:b2:b3:b3:e6:d0:ad:09:81:0d:ab:46:82:94:a1:
44:49:7f:15:5f:07:15:8e:91:50:f2:33:f3:38:b1:
ee:27:13:cd:f1:e8:57:43:b1:de:eb:0a:5f:ff:0c:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:93:2A:35:14:35:74:C8:F0:BD:13:59:66:9C:2B:3B:99:85:BF
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/TL2TKjUUNXTI8L0TWWacKzuZhb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
0e:2c:0e:eb:76:99:12:be:91:63:a1:dd:9e:43:45:91:2b:da:
97:8f:27:53:0d:cb:a8:2a:d3:cd:ca:39:55:f0:95:8f:12:b0:
ce:3d:f3:41:e2:a4:6e:7d:4e:02:d1:55:10:af:15:fc:97:02:
b7:c6:fe:d3:e6:d3:69:57:f0:b9:d0:ed:00:23:6f:25:b9:e4:
0c:e0:cf:5d:1a:98:58:a9:59:3b:ee:65:3e:8e:4c:96:0e:03:
86:c0:11:51:36:89:dc:e6:de:ca:b1:1b:69:88:b7:30:8c:a6:
98:d6:70:7e:52:81:d5:31:c1:c1:6e:d7:87:68:50:a3:f3:97:
73:82:fd:98:d6:c0:37:c9:93:3e:0e:a9:41:04:c4:a1:a1:66:
cd:4d:6b:5a:9b:48:81:96:7a:3d:07:81:fe:0f:5b:d7:ae:8d:
2d:5b:9d:7e:1f:b2:93:a4:dd:5e:2f:0e:0d:c4:a7:23:74:7d:
d1:bd:e3:be:09:13:0a:7b:cd:ea:34:e9:55:f2:1d:c9:e4:a2:
5e:8a:07:d2:ef:79:e3:e9:4d:f3:d5:72:c2:4e:cc:c0:73:52:
59:dc:a7:67:3b:0a:cf:41:50:4b:cc:07:5c:8a:e1:61:ff:2f:
fa:e2:94:96:d4:4a:03:79:c5:e8:86:71:a0:6a:23:9c:e5:a8:
f5:d1:9a:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:18:40 2025 by rpki-client