Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eteUHrFPAABmkDzE4Us2he-hjHg.roa
File: eteUHrFPAABmkDzE4Us2he-hjHg.roa (raw, json)
Hash identifier: IhjSbcGTMXUk2JraiTziWy0EVNS9xsDaUh7Vtn9+zPI=
Subject key identifier: 7A:D7:94:1E:B1:4F:00:00:66:90:3C:C4:E1:4B:36:85:EF:A1:8C:78
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976C6B8F00959B5422C67D84168D0CEF0E
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eteUHrFPAABmkDzE4Us2he-hjHg.roa
Signing time: Sat 14 Jun 2025 03:11:17 +0000
ROA not before: Sat 14 Jun 2025 03:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 04:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:6b:8f:00:95:9b:54:22:c6:7d:84:16:8d:0c:ef:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 03:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ad7941eb14f000066903cc4e14b3685efa18c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:52:95:80:b9:ad:0e:59:a4:17:4c:ce:c2:
a3:a4:ce:ae:8f:8d:b0:d6:50:f3:77:af:f2:bd:89:
fd:5b:ec:32:e0:4e:e3:da:70:2b:c0:78:16:b9:d7:
aa:26:e2:47:77:61:f5:00:ab:1a:3c:66:41:9f:13:
e6:c7:98:d9:ea:1e:79:d9:f1:b1:6c:45:48:bf:25:
83:a9:f5:b1:02:fd:a7:08:44:15:28:64:b0:fe:88:
ad:52:c8:39:8c:ad:cc:76:60:94:58:f6:0e:aa:05:
5e:3c:43:09:97:28:3a:f9:b9:40:50:c1:30:74:58:
ea:e4:07:f0:fe:4d:cc:89:d8:06:0a:5f:8a:18:71:
0b:ec:ce:61:c9:f9:ad:17:2e:1b:69:a3:8c:c4:4e:
d7:63:87:57:4b:ac:e1:72:8f:07:b5:f4:32:93:66:
1a:76:7f:a0:b0:85:a7:22:bf:c0:ab:d9:2d:b4:76:
57:c1:f1:9d:e1:45:2f:c4:ad:22:35:38:a5:c8:20:
f4:7b:29:9a:4b:54:be:69:cc:69:0e:0b:fd:cb:33:
87:7d:54:d3:35:db:15:b9:f6:3f:97:d1:b3:ef:d7:
e1:46:ec:e9:6b:60:43:b5:32:5e:e2:66:f6:8e:31:
ba:2a:15:14:2d:3e:76:42:f9:64:59:be:2e:dc:f6:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:94:1E:B1:4F:00:00:66:90:3C:C4:E1:4B:36:85:EF:A1:8C:78
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/eteUHrFPAABmkDzE4Us2he-hjHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
51:59:54:89:a3:34:64:77:80:1b:e9:02:d5:f2:57:e4:c6:f1:
85:25:34:1e:90:d5:00:57:93:dc:b7:45:79:95:f8:2a:5c:a1:
e2:85:b8:56:19:0e:eb:60:5f:e6:a2:11:83:b2:e6:ab:0d:a7:
f3:56:88:03:93:db:5e:08:71:fd:02:31:08:dd:83:e3:a9:57:
29:ef:71:2e:5a:8d:6f:cf:f3:40:22:87:24:57:85:ae:8f:d8:
dd:2a:42:06:03:3b:6e:84:0c:46:2e:51:fa:a9:72:7e:4f:ef:
18:54:1c:f5:ca:3a:1b:96:53:8f:d2:48:52:a7:3a:93:7a:9d:
f0:f5:26:31:e0:c6:48:8f:1c:56:23:13:25:a0:e3:72:07:df:
cd:70:69:4f:da:e4:9e:16:ac:e3:d5:fc:e2:85:05:8c:42:eb:
22:b3:31:9a:e8:31:e1:cd:3f:88:71:de:07:f3:38:41:15:51:
bd:8d:87:78:e3:85:43:1e:1c:eb:a1:b7:00:b3:b0:01:28:1e:
39:1c:ee:f7:97:60:db:da:30:2c:8f:dc:5a:97:35:75:82:d7:
59:5c:d2:dd:6c:32:2a:d2:01:05:3c:1a:15:d5:93:f6:8d:e1:
21:d8:4e:e7:93:50:8d:17:e7:7b:6b:1a:8c:ed:22:0e:5c:1d:
86:42:9d:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:54:18 2025 by rpki-client