Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fJsX8CapSCKO0fnbymn-KpFsVQQ.roa
File: fJsX8CapSCKO0fnbymn-KpFsVQQ.roa (raw, json)
Hash identifier: MGsClgo0leO6mBEH1O7wayX1FobZDy7L0YUCSoy5ZLk=
Subject key identifier: 7C:9B:17:F0:26:A9:48:22:8E:D1:F9:DB:CA:69:FE:2A:91:6C:55:04
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01977048546329E0316885634C1F40F0D50D
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fJsX8CapSCKO0fnbymn-KpFsVQQ.roa
Signing time: Sat 14 Jun 2025 21:11:17 +0000
ROA not before: Sat 14 Jun 2025 21:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 22:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:48:54:63:29:e0:31:68:85:63:4c:1f:40:f0:d5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 21:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c9b17f026a948228ed1f9dbca69fe2a916c5504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:2a:ab:06:a5:ef:6e:1c:99:80:81:af:d0:
88:36:fb:8b:64:96:d5:c2:5a:ab:9a:a1:3c:d7:c3:
61:de:4d:eb:a4:09:8b:86:e7:7e:97:70:19:b8:1a:
0f:d5:40:24:92:e6:22:0e:ff:52:9e:f7:b5:22:27:
f4:e1:f2:b0:1b:70:58:5a:de:05:7e:51:98:07:8f:
61:da:04:cb:45:aa:55:ef:fc:9d:59:6e:c4:e3:db:
a6:7b:5b:b4:2a:e9:28:7f:c8:39:cc:42:30:55:39:
ef:26:d5:52:ef:18:27:76:17:8f:57:46:38:b5:8f:
be:27:dc:07:8e:9d:42:32:fe:82:b3:54:57:77:d1:
37:8f:d4:97:e8:4e:11:87:e5:1c:d8:57:df:a1:d9:
c3:5d:32:38:68:a0:5b:90:83:40:b0:f2:d1:73:4a:
f6:6b:04:0d:d2:55:16:3f:47:24:d2:9e:eb:6d:3f:
d4:29:f1:5e:c0:73:cc:cf:8e:09:c6:99:ab:a0:d8:
b9:76:2c:44:b6:16:3e:15:db:30:bd:d1:a4:38:b1:
9a:d7:fb:46:f0:c6:75:e4:4c:9a:b3:8e:e3:65:07:
60:3b:d1:b3:91:3f:a8:61:01:85:8b:e7:f1:71:b6:
06:ac:03:24:7f:4a:af:a7:bf:db:bd:16:9a:78:8e:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9B:17:F0:26:A9:48:22:8E:D1:F9:DB:CA:69:FE:2A:91:6C:55:04
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/fJsX8CapSCKO0fnbymn-KpFsVQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
24:24:ad:11:98:12:e7:57:e3:87:82:10:da:00:89:6f:64:88:
6a:2a:18:5b:b8:60:ca:66:bc:5c:90:a4:51:b1:d8:95:e2:7a:
74:17:2a:da:98:3a:12:a3:39:ea:bd:e8:f5:c5:34:9a:4d:d9:
c8:f5:d1:56:31:fc:e6:7f:75:f6:35:05:83:58:7c:ba:1b:fb:
10:a4:c4:38:7c:ae:e7:58:1c:92:11:17:b2:4c:8f:63:e3:d0:
97:5f:7f:51:24:9b:d7:d4:66:a6:34:9a:48:f4:fa:db:e0:32:
a2:45:cd:be:21:01:f6:a0:b3:c6:7f:aa:b6:cc:08:5b:fd:99:
3d:ce:ba:1d:26:20:9d:85:96:19:9a:0a:7f:1b:b6:74:80:a7:
e5:42:57:81:02:d1:4f:11:cf:c5:71:d7:b3:a9:20:cf:53:e7:
5c:50:d8:e6:fa:49:15:4b:3c:d5:90:bb:77:2b:0a:e1:3e:0e:
72:66:3d:ce:d6:fd:86:df:39:aa:25:7f:55:fe:27:92:9d:25:
08:db:b1:73:a3:6c:29:c1:69:6e:ae:4b:e8:0f:18:c5:13:a3:
dd:75:5d:b9:84:f7:d4:66:44:30:6a:d1:58:c2:42:6f:b0:4c:
e5:d8:5a:0b:49:f1:06:a2:06:70:65:aa:91:0d:01:f1:5e:02:
41:52:9b:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:01:19 2025 by rpki-client