Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/XVAwgIivD6WrGYg9CjX9-Jl0NYk.roa
File: XVAwgIivD6WrGYg9CjX9-Jl0NYk.roa (raw, json)
Hash identifier: y0yojLk5kjcteH03BROKO6ko0pNgC4OxIgYXpu5szE8=
Subject key identifier: 5D:50:30:80:88:AF:0F:A5:AB:19:88:3D:0A:35:FD:F8:99:74:35:89
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976DB6FB1E78BA010BF76DFBAB92883CF6
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/XVAwgIivD6WrGYg9CjX9-Jl0NYk.roa
Signing time: Sat 14 Jun 2025 09:13:17 +0000
ROA not before: Sat 14 Jun 2025 09:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 10:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:b6:fb:1e:78:ba:01:0b:f7:6d:fb:ab:92:88:3c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 09:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d50308088af0fa5ab19883d0a35fdf899743589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:0e:09:9b:61:c7:d8:cc:e7:61:15:81:1b:
3d:c4:31:c1:82:94:3a:a4:a5:be:81:8a:5a:e3:a2:
b1:ed:34:2b:bd:bb:27:74:7b:e6:52:60:76:36:e0:
6e:c0:a8:ad:21:a0:de:c0:92:d2:2e:07:e9:d8:f5:
9c:0a:55:6b:01:e7:d4:11:96:69:b2:d8:e4:be:16:
35:bb:5b:54:a8:88:aa:cf:45:cd:f1:7f:b5:0a:95:
06:e5:2e:6b:32:ee:5c:d8:34:eb:21:21:cf:13:44:
77:95:5d:d7:9c:30:95:5a:78:2a:de:11:35:96:6a:
21:40:7d:38:97:b8:50:91:c9:41:7e:11:06:fa:a1:
b1:72:3e:04:90:b4:df:a7:e6:ae:fb:24:b3:05:4d:
03:7f:2d:f0:f0:83:5e:8c:35:49:eb:b8:9c:7a:0e:
0a:55:77:26:77:5f:11:a3:d6:5d:3f:43:4c:46:4d:
ea:0e:90:eb:01:6a:6b:91:9b:1c:1e:27:3e:65:9e:
d5:c9:38:76:f5:cf:e4:0a:0b:2d:a5:49:8d:fb:f5:
88:08:74:78:f6:4e:cb:ee:cd:f3:97:9f:9a:e7:01:
bd:00:9e:74:68:33:a9:01:ac:24:e2:d4:67:f7:a9:
30:bd:c7:15:4a:d4:2b:0c:73:76:71:57:c8:1d:a7:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:50:30:80:88:AF:0F:A5:AB:19:88:3D:0A:35:FD:F8:99:74:35:89
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/XVAwgIivD6WrGYg9CjX9-Jl0NYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
12:5e:94:ef:23:56:6f:91:27:0a:dc:5f:29:34:15:d3:af:51:
6f:e4:78:da:35:75:a8:d9:4e:0e:b0:b0:6a:46:fb:56:b1:f8:
2a:c5:bc:cc:c6:e5:b8:f8:33:be:ee:a2:e4:9d:bc:4d:f2:11:
44:93:c4:dc:9f:70:ba:fd:82:84:64:de:2f:5f:00:96:75:83:
e1:f0:52:15:14:3e:45:56:c3:e5:4f:54:f6:54:3a:a4:35:a0:
ed:db:bf:02:cf:b4:72:b7:4b:a3:0b:e5:24:13:9e:83:41:fa:
dd:01:2b:6d:f0:54:16:1b:05:f2:f7:6f:fc:96:8c:f9:09:c0:
8d:ec:de:89:c5:a4:45:3f:0b:fa:4c:72:70:c7:1b:83:f4:1c:
69:b9:62:11:d9:6c:1b:21:a7:3f:8d:93:53:3c:67:0c:c4:e0:
2d:c2:45:09:2c:aa:98:6a:de:f9:b7:8a:cb:27:ef:a9:cf:79:
07:f5:c7:62:51:0e:00:2a:93:7c:d6:7c:2f:bf:57:6c:8b:0b:
ab:9b:d0:c6:24:dc:6c:fc:bb:c5:43:ab:6e:9f:af:fd:db:0b:
bb:93:83:f0:57:c9:01:2d:0b:df:61:c5:31:7f:a2:02:b6:98:
04:96:53:a5:b2:6c:30:5e:de:f4:81:8e:7f:45:49:bd:9f:f6:
71:89:0d:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:40:59 2025 by rpki-client