Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lrj5MjVDQ4-OGEYIFeLw-Gpg8lE.roa
File: lrj5MjVDQ4-OGEYIFeLw-Gpg8lE.roa (raw, json)
Hash identifier: YvFbHwOXDZjqHcpQY67FMAJzxystLHbqbvDuE1bx0/E=
Subject key identifier: 96:B8:F9:32:35:43:43:8F:8E:18:46:08:15:E2:F0:F8:6A:60:F2:51
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976CA3689CAAD255457B67DACB3ADC1A08
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lrj5MjVDQ4-OGEYIFeLw-Gpg8lE.roa
Signing time: Sat 14 Jun 2025 04:12:17 +0000
ROA not before: Sat 14 Jun 2025 04:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 14 Jun 2025 05:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:a3:68:9c:aa:d2:55:45:7b:67:da:cb:3a:dc:1a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 14 04:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96b8f9323543438f8e18460815e2f0f86a60f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:b2:ea:44:80:8a:ce:1d:d0:62:de:b2:d1:
ce:67:8b:6c:05:c2:45:1d:78:e0:56:20:be:cd:f4:
ce:89:e8:f0:40:3d:3e:75:70:a8:39:c9:a4:4f:ba:
1b:0c:97:6c:e1:c7:a7:59:32:c3:81:87:2d:01:30:
83:7d:8a:53:ac:bf:42:82:5f:29:0f:7f:59:ae:d8:
6f:f4:79:23:6c:c9:d9:db:89:4d:1b:5d:e3:75:72:
f1:a8:6b:b8:a9:40:5e:b7:fa:e2:cc:85:54:3b:82:
cf:82:89:3c:1b:58:de:86:11:52:57:e1:06:5a:12:
6b:70:c9:96:9f:07:3f:84:da:0f:e8:2f:b2:8b:c0:
22:bc:12:7d:a2:5f:78:68:60:c8:59:43:ad:b8:de:
e5:61:ec:82:a8:98:ac:a1:c6:17:ba:1b:67:40:d6:
8d:7e:d9:1c:19:79:23:a3:f6:82:d6:02:a4:ab:89:
d2:f8:80:4f:cf:61:56:73:67:af:8c:81:3e:07:35:
72:23:d5:80:c1:86:9b:4d:c2:dd:cb:39:72:06:a7:
2c:0a:35:bc:13:94:ca:9d:36:76:c3:89:4e:c9:18:
e3:09:1c:40:ca:87:67:5d:8b:15:f6:8b:91:09:7a:
9d:f6:13:e1:b4:e1:2f:fa:7f:f2:de:07:6a:b2:4d:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:F9:32:35:43:43:8F:8E:18:46:08:15:E2:F0:F8:6A:60:F2:51
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/lrj5MjVDQ4-OGEYIFeLw-Gpg8lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
72:3b:58:da:a8:27:4f:f6:29:51:ea:cf:75:8a:eb:8f:bf:f6:
8e:55:21:33:ab:8d:01:30:1a:24:e2:6e:fe:b5:56:31:a6:ad:
c3:dd:f0:cf:18:89:82:e5:4d:8e:6d:22:54:68:60:1d:ea:f0:
5e:fe:0d:03:3e:77:f7:0f:50:bd:84:cb:a6:3a:69:5d:d0:b6:
c8:b4:fe:4d:90:bb:13:d0:a0:e7:70:e5:79:a1:99:71:04:f1:
1d:15:96:62:78:50:69:3c:38:38:d7:77:c3:80:64:c3:97:63:
1c:be:cd:8b:48:43:a6:ad:46:e5:89:7e:06:e5:94:d5:a3:b6:
46:a0:c7:b5:9a:18:24:ae:18:35:f7:6e:44:12:1a:c7:0d:44:
45:1c:5a:64:52:a4:0e:b9:bf:e7:bb:39:ab:d0:ec:b8:ff:e4:
37:49:e0:2b:32:f5:07:e3:2b:5f:e2:e5:f9:c7:e6:08:93:b2:
f0:d5:e1:ad:e4:c5:72:68:a3:8f:2b:b4:17:89:33:4a:71:8a:
ea:1f:3c:f0:2f:a2:f6:4f:51:61:0c:13:e1:e4:43:17:8a:91:
d8:bc:39:41:72:21:6e:d6:68:c3:04:5b:3c:09:16:76:f5:f7:
64:f7:d2:ea:68:97:52:07:69:bb:73:85:f1:75:df:cd:ae:e5:
55:d5:e2:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:35 2025 by rpki-client