Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/rxEZALLhGXdqUtzv6aNPNUc-xbg.roa
File: rxEZALLhGXdqUtzv6aNPNUc-xbg.roa (raw, json)
Hash identifier: k+aV0+1AGafdfjTeGu4yz9pIaTSiDJq+p7wN3OsQtLY=
Subject key identifier: AF:11:19:00:B2:E1:19:77:6A:52:DC:EF:E9:A3:4F:35:47:3E:C5:B8
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976AEBF46C803F3E15AFB6FA3DFE0E4F34
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/rxEZALLhGXdqUtzv6aNPNUc-xbg.roa
Signing time: Fri 13 Jun 2025 20:12:17 +0000
ROA not before: Fri 13 Jun 2025 20:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 13 Jun 2025 21:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:eb:f4:6c:80:3f:3e:15:af:b6:fa:3d:fe:0e:4f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 13 20:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af111900b2e119776a52dcefe9a34f35473ec5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:be:a9:a7:f9:a1:c4:e9:a4:9b:33:15:d2:
56:19:ba:26:8e:37:ed:62:d1:14:e0:5f:55:b9:56:
e4:26:a0:d7:b0:a3:d9:e2:c2:8c:3e:ab:00:a7:b3:
24:a0:c7:0a:25:3b:9c:8f:b8:7f:4d:bd:89:83:29:
16:6e:06:e9:54:3b:e2:b4:1c:af:aa:ea:17:48:d6:
e4:f3:e0:b4:42:9e:8b:71:5f:a0:53:f9:2b:9e:f2:
72:cb:a9:37:0c:18:8b:ad:86:64:ad:6c:c0:f3:a9:
8b:d9:20:d8:99:79:02:64:35:57:8f:f3:1f:f7:33:
52:44:03:e3:3c:30:8b:25:7a:c6:35:6c:b8:b9:bb:
3c:2f:bb:44:b2:0b:db:94:92:86:6e:15:e9:08:73:
27:8d:79:89:bd:fd:6d:7b:ac:b2:d7:65:6a:36:48:
2e:00:ca:07:6b:56:55:21:db:3d:1a:17:3d:ce:58:
4a:e2:5d:5b:af:94:55:05:06:4c:4b:47:b9:00:9f:
e7:8d:10:12:23:a4:9b:3c:e8:3d:d2:11:94:96:c5:
b0:01:6b:73:67:0e:49:93:84:da:9a:ab:4b:d8:e8:
ca:e2:42:af:b7:f1:e2:29:8d:c6:5d:2a:4e:14:a6:
be:26:39:ae:fe:e6:e7:78:0a:64:8a:73:e3:d2:aa:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:19:00:B2:E1:19:77:6A:52:DC:EF:E9:A3:4F:35:47:3E:C5:B8
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/rxEZALLhGXdqUtzv6aNPNUc-xbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
5e:28:ee:25:5a:11:a9:67:ad:a0:55:70:9c:9c:53:25:48:d2:
40:7c:0f:0c:ee:ec:26:bf:23:62:b7:95:6d:4c:61:fe:a4:4d:
0e:20:ac:19:ad:a8:c3:76:fb:91:93:a4:5e:e5:5d:9f:38:7a:
13:1a:e1:30:e5:61:54:7d:98:ab:68:94:ce:d2:40:9e:48:4e:
74:e7:41:ad:99:1e:08:72:1c:79:92:78:29:70:5e:07:15:11:
9a:ad:ce:61:9c:0e:ad:b0:43:7e:7b:b4:d0:e2:f6:80:e2:c2:
fa:1b:7d:45:53:96:06:46:c6:2c:e9:3a:81:6e:73:31:f7:03:
4a:a7:e1:ee:e5:ce:a0:d0:8d:13:13:e4:fa:32:52:5d:13:9d:
24:bf:fb:fc:9b:79:da:e7:c2:ca:10:7b:23:d0:f5:96:3c:12:
b9:03:25:ef:ad:bf:3c:f8:68:c3:b8:ec:13:dc:3e:e7:ae:b2:
06:fb:7d:f0:00:4e:0b:4e:e9:4a:95:c3:2a:63:72:df:bb:3b:
ae:68:a1:7e:ba:ea:03:e3:7c:94:4f:9e:8d:1a:91:e4:37:11:
2c:4f:e9:8f:a1:1b:ec:e2:e0:dc:49:76:cc:99:ee:d4:6f:49:
28:a9:63:2b:7f:84:7e:2d:d9:c4:5a:86:57:0c:59:a5:4e:50:
07:ef:82:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:17:33 2025 by rpki-client