Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_UQenmWZ-uIzR8f0JFQCoACrxo8.roa
File: _UQenmWZ-uIzR8f0JFQCoACrxo8.roa (raw, json)
Hash identifier: IuUgOvfuNf4F5/WE9vfDK+yK+yRHrUdcJ9mJaPUpNyI=
Subject key identifier: FD:44:1E:9E:65:99:FA:E2:33:47:C7:F4:24:54:02:A0:00:AB:C6:8F
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01975F87FFA7819BED208FF99A11EEBF5D34
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_UQenmWZ-uIzR8f0JFQCoACrxo8.roa
Signing time: Wed 11 Jun 2025 15:07:17 +0000
ROA not before: Wed 11 Jun 2025 15:07:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:5f87:8d92/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 11 Jun 2025 15:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:87:ff:a7:81:9b:ed:20:8f:f9:9a:11:ee:bf:5d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 11 15:07:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd441e9e6599fae23347c7f4245402a000abc68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:c2:7b:35:27:f8:0a:cd:28:e8:96:13:1f:
64:0d:e4:7f:6f:32:48:52:e0:24:95:66:ee:d6:18:
aa:46:16:a8:95:ff:0b:53:90:c3:90:47:b8:d2:de:
5f:3b:db:92:ed:a9:46:dd:a3:55:9f:9e:5c:84:b7:
f1:26:bd:26:4a:ae:95:96:e5:16:54:f9:fa:3b:35:
25:80:43:bb:85:b8:8b:fc:5b:dd:25:2c:81:53:b4:
9f:e8:a3:81:55:b0:23:91:a2:a7:b4:47:0f:8a:04:
0c:27:c7:09:df:00:04:f1:f7:2a:d5:ae:27:c1:15:
12:34:c9:2b:18:4b:35:89:76:ec:5b:d2:98:7f:66:
8b:b3:a8:e1:5e:ed:c6:d4:10:ec:4d:cf:c0:c4:9a:
8e:8c:35:35:43:ac:88:3a:9e:eb:bf:5f:f9:8c:f9:
29:90:3f:48:d2:28:99:07:95:d0:bc:eb:90:08:62:
69:af:e8:59:8a:99:cc:c6:be:aa:8c:c1:cf:6e:2b:
60:99:94:42:98:22:04:f1:2a:52:de:69:ae:0d:e6:
4b:ed:e1:e7:be:ac:58:17:b8:13:3b:f6:fd:b2:2c:
69:7c:6e:ae:03:67:37:ef:c3:c3:d3:2a:fb:b3:67:
71:d3:b7:83:d5:39:56:a7:a7:d2:f3:e5:af:90:fe:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:44:1E:9E:65:99:FA:E2:33:47:C7:F4:24:54:02:A0:00:AB:C6:8F
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/_UQenmWZ-uIzR8f0JFQCoACrxo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:5f87:8d92/128
Signature Algorithm: sha256WithRSAEncryption
5d:c4:a3:57:4f:de:e7:83:24:b3:d8:04:28:ba:eb:e2:ea:ec:
e5:2e:5e:f6:89:15:38:6c:d3:df:6c:67:06:b1:6e:9a:85:08:
c8:8d:2b:fa:99:83:ae:30:82:7d:86:4a:58:a0:54:46:9f:41:
a9:26:f0:48:97:6e:a7:68:cc:d0:aa:f1:52:0e:5d:41:a9:5d:
8e:1a:e6:37:22:ea:da:8b:65:b1:ed:f4:60:05:b5:81:cd:ed:
be:1d:33:3b:04:f4:e3:cf:36:02:2a:e9:2f:f5:ec:f0:f4:97:
fe:ce:af:7c:61:9d:ae:d5:2d:a2:18:ee:40:09:b6:6d:46:5a:
e2:71:47:70:c9:c1:94:c0:17:09:4c:68:2e:1b:75:b7:ed:6d:
ea:76:52:f8:93:c1:66:6f:41:5e:f6:17:4c:06:23:83:09:25:
bd:e8:fb:3f:bf:50:bb:96:4f:b8:13:ce:ea:9d:7d:dd:fe:d9:
99:23:6b:c0:cc:1c:9e:dc:dc:11:81:e2:7f:2c:56:d7:7c:f6:
23:6c:44:6c:28:f1:04:f6:4c:17:6c:34:e0:e9:d1:29:ab:22:
05:90:19:ac:af:bb:f5:29:cd:ae:c8:4d:5f:a7:0e:3d:4d:32:
08:34:b2:04:0d:39:ce:f4:e1:c4:f8:e2:61:55:e8:fa:3d:05:
0d:a0:07:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:57 2025 by rpki-client