Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tPiCoWVgjU-A1vl_xVQeUvRH5wE.roa
File: tPiCoWVgjU-A1vl_xVQeUvRH5wE.roa (raw, json)
Hash identifier: wztvTHxU6Dbkx6hWyQwYg9D0A5+2trNi2NF50VDZFhk=
Subject key identifier: B4:F8:82:A1:65:60:8D:4F:80:D6:F9:7F:C5:54:1E:52:F4:47:E7:01
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 01976A120EA635A8D1317CB6A1D6E06AE919
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tPiCoWVgjU-A1vl_xVQeUvRH5wE.roa
Signing time: Fri 13 Jun 2025 16:14:17 +0000
ROA not before: Fri 13 Jun 2025 16:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 13 Jun 2025 20:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:12:0e:a6:35:a8:d1:31:7c:b6:a1:d6:e0:6a:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 13 16:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f882a165608d4f80d6f97fc5541e52f447e701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:86:2f:6e:82:15:a4:d4:70:eb:ac:c5:45:fc:
f1:1f:48:b3:67:b9:7d:5d:c4:61:67:23:4e:50:85:
ea:ec:d8:0a:98:a2:91:47:0e:b1:df:37:a3:83:40:
66:bc:d9:95:ad:81:66:2a:ba:03:94:b8:88:f0:fe:
f8:d3:e7:fa:b1:d1:4c:ea:b0:e2:ad:32:24:5e:15:
99:f4:e5:92:e6:ef:08:ec:1b:7b:4b:5a:fb:10:19:
a2:e7:0e:11:5c:a3:82:73:45:ad:52:e5:9f:32:a4:
d1:3c:ab:70:ce:88:29:b3:4d:9c:b7:89:ee:0c:e9:
94:1a:2d:ee:35:90:ac:ba:79:7a:60:d8:4f:c5:16:
5c:a2:24:4f:ef:0b:1b:b9:a1:28:f6:d7:d2:ee:25:
93:6a:0d:4b:66:4e:1e:08:26:a1:9d:da:2d:05:7a:
20:bd:ae:25:64:31:46:3f:ea:d1:e0:71:25:07:07:
91:c6:9e:69:44:32:8a:94:f6:0e:30:6e:cb:94:9f:
9a:ea:f6:ce:23:e0:2a:fb:d1:ac:98:c2:d1:21:ee:
79:8b:16:a2:d2:fa:a7:7b:ec:2a:c5:94:c3:70:08:
1e:c4:7b:45:15:a5:9f:9c:10:b9:dc:60:10:05:62:
59:9c:37:bc:26:e4:2b:de:bf:1f:33:8f:10:19:06:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:82:A1:65:60:8D:4F:80:D6:F9:7F:C5:54:1E:52:F4:47:E7:01
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/tPiCoWVgjU-A1vl_xVQeUvRH5wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
17:5a:0e:a6:29:e5:1f:af:bc:ae:fa:21:71:9c:2b:ee:df:1d:
64:f0:94:9e:14:31:6e:47:1d:2d:04:03:e3:43:87:9d:3a:ec:
90:53:bd:aa:23:a2:41:2f:ba:fe:3a:9a:15:50:33:33:0e:1c:
6b:5b:b3:ad:60:b8:93:63:81:1f:5e:c3:f6:53:36:74:fe:8d:
31:b0:9b:2b:de:01:8a:d1:c2:b2:a1:c9:5d:9c:4f:94:d2:4b:
6c:3d:d0:28:48:22:e3:c9:ee:7c:b5:5b:55:35:f4:67:fe:01:
ec:7a:70:95:dd:c5:3b:58:0e:6b:8f:7a:e1:df:8d:84:5e:b6:
75:81:76:59:6f:a0:1f:57:b8:0f:63:c2:6e:2e:5b:02:1e:57:
88:be:ad:0e:be:bf:66:d8:d8:12:cd:d8:2a:4d:55:16:12:f0:
7b:b7:76:12:5c:d8:51:83:58:6d:57:a1:38:de:c1:e5:93:e3:
7b:92:77:74:26:3b:85:4d:51:9d:fb:6d:5e:7c:ea:dd:ca:9b:
78:e4:26:bc:1d:c7:f0:50:a0:21:6d:26:d9:7f:2b:1f:38:e5:
78:4a:fa:e3:33:6e:1b:3d:b9:df:ed:44:7d:12:b6:f3:66:8b:
30:8a:c4:98:2c:ed:35:5e:6d:8d:c0:d0:9f:0d:88:b7:a3:6b:
3c:4f:12:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:20:00 2025 by rpki-client