Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/sbWhqGGAd7uZIl_Z3qa0kE5sxzw.roa
File: sbWhqGGAd7uZIl_Z3qa0kE5sxzw.roa (raw, json)
Hash identifier: IcBAJ04Tw8rOpG0qUPSb7bUY00XednDM/qW0rqIdFkU=
Subject key identifier: B1:B5:A1:A8:61:80:77:BB:99:22:5F:D9:DE:A6:B4:90:4E:6C:C7:3C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019768FDCE27E237A0A8D6F64942FADA3410
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/sbWhqGGAd7uZIl_Z3qa0kE5sxzw.roa
Signing time: Fri 13 Jun 2025 11:12:33 +0000
ROA not before: Fri 13 Jun 2025 11:12:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 13 Jun 2025 12:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:fd:ce:27:e2:37:a0:a8:d6:f6:49:42:fa:da:34:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 13 11:12:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1b5a1a8618077bb99225fd9dea6b4904e6cc73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:1c:4c:ed:9a:d8:c4:2d:f7:4e:35:ae:3d:
50:58:ee:60:32:c9:88:f8:42:54:32:db:c8:4f:6b:
5d:17:59:26:7d:64:c8:2f:cd:f6:65:c7:d6:99:2f:
46:a4:6d:dc:a9:47:b5:f6:b5:c5:93:0b:dc:eb:5c:
f9:92:58:72:b6:42:72:a5:2c:64:85:d1:81:7d:0b:
ce:c9:72:b1:60:b4:7d:c1:c8:96:b8:8f:a9:4b:9e:
a9:11:37:55:24:03:96:c7:fc:39:39:51:8b:f0:b1:
62:c9:e3:d1:58:89:d0:ea:11:03:6b:ac:b5:ec:d4:
c1:3e:50:b7:01:87:51:c4:0a:92:1b:1c:c7:ca:7b:
84:ab:6d:dc:a0:ea:c4:5f:db:72:ce:c3:dd:7b:fb:
75:5e:bf:25:df:a0:76:65:25:cc:3a:4f:0d:af:ac:
e5:66:95:0b:2a:36:57:15:20:b3:eb:72:7a:3a:48:
ac:13:6f:43:08:7f:72:f1:9e:58:11:59:88:76:b0:
43:95:06:79:af:6d:15:8c:04:52:43:e0:74:8b:11:
a5:8d:15:7d:26:2c:96:5e:8f:70:6d:91:b3:45:40:
aa:ee:f9:a9:a6:74:5e:0a:a5:f8:f5:11:c8:d6:2c:
c7:27:02:35:11:65:85:39:d3:82:b4:3f:88:38:f4:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B5:A1:A8:61:80:77:BB:99:22:5F:D9:DE:A6:B4:90:4E:6C:C7:3C
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/sbWhqGGAd7uZIl_Z3qa0kE5sxzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
80:19:54:09:df:c6:46:d7:93:ca:66:c3:91:a8:d2:f5:d0:52:
c4:9c:00:7e:ff:ff:7c:0c:f0:bd:d5:52:29:d9:cb:24:33:30:
11:4e:ff:a8:a2:58:ff:11:07:9a:f5:c5:84:5d:45:f7:b3:d1:
43:b1:4f:b8:c4:4b:19:c5:de:3f:4d:66:6b:03:c6:61:3e:84:
8f:c0:3a:9c:2e:66:f9:5a:69:32:c3:52:98:05:9a:45:e9:86:
2d:76:38:e1:f9:f4:e1:76:90:57:2a:0a:0d:b5:c3:15:c1:9c:
b7:9a:16:5d:3f:0e:fd:25:eb:c3:01:67:18:18:98:d8:f9:ee:
66:92:fe:25:ac:7a:e5:2e:46:92:2c:b1:8b:b0:23:bf:a7:32:
65:e9:1f:95:a3:50:13:53:54:b4:41:13:3b:49:62:cb:9e:6b:
ef:3f:2d:b6:52:86:4b:f6:b3:f8:a6:2b:43:16:e8:e5:f7:5d:
88:e0:12:b1:07:8f:0a:fd:71:fa:61:ec:7c:d5:0b:ea:db:d3:
75:f9:65:44:15:db:f2:a4:61:92:95:7a:a9:4f:b8:a5:cc:17:
a2:c8:1b:00:ca:bf:6a:70:8f:ed:15:be:65:c6:aa:f3:03:35:
8e:8c:99:9d:b0:7e:60:a8:ba:73:f8:5e:48:88:e5:91:8d:f9:
d5:60:c8:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:24:31 2025 by rpki-client