Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/eJajOeAl1dpXoVMyo-TWasmE78U.roa
File: eJajOeAl1dpXoVMyo-TWasmE78U.roa (raw, json)
Hash identifier: e99jaZ34t9Puj9JUGgjuVC8Wtl17GlIfWvReIVg3Lrw=
Subject key identifier: 78:96:A3:39:E0:25:D5:DA:57:A1:53:32:A3:E4:D6:6A:C9:84:EF:C5
Certificate issuer: /CN=b0570845c239e9991c89bc5c50431e9087860c4d
Certificate serial: 0197B10B1344CF5D236F7AEB9382CB2C0615
Authority key identifier: B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/eJajOeAl1dpXoVMyo-TWasmE78U.roa
Signing time: Fri 27 Jun 2025 10:59:42 +0000
ROA not before: Fri 27 Jun 2025 10:59:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213680
IP address blocks: 2a14:c600::/32 maxlen: 32
2a14:c600::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 12:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:0b:13:44:cf:5d:23:6f:7a:eb:93:82:cb:2c:06:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0570845c239e9991c89bc5c50431e9087860c4d
Validity
Not Before: Jun 27 10:59:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7896a339e025d5da57a15332a3e4d66ac984efc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:4c:fb:00:58:1e:5b:ba:51:85:30:e7:c5:
1b:d6:91:9b:ae:fd:f4:fe:33:5d:73:23:bd:65:dc:
2e:87:35:93:1b:24:42:0e:99:cf:6a:54:0c:16:6f:
43:de:5c:99:b4:37:ca:41:4b:93:16:91:ed:0e:e7:
f4:7b:d3:0f:b6:15:8f:f6:8b:4d:92:6e:74:e4:d1:
6d:f0:21:45:a2:11:7e:da:bc:60:08:be:4e:e3:65:
22:cc:73:fb:30:07:d2:3e:4b:f9:df:64:94:dd:41:
f6:55:aa:dc:65:57:a6:79:1f:5a:11:70:d0:ec:90:
72:b1:88:db:72:26:5c:96:6c:6d:d5:f1:9f:cb:f6:
85:47:e2:01:63:fc:08:fb:d4:fd:62:f4:13:1b:84:
fd:d5:da:49:b2:ae:23:b1:73:d7:16:49:a5:6a:49:
3e:15:64:fe:05:1c:a6:15:12:fd:08:f8:a7:de:ac:
15:93:9f:8a:eb:39:fc:d9:a2:09:cf:11:32:72:e4:
1c:48:e7:37:5a:e3:92:89:35:a4:88:0f:ef:02:5e:
9e:5e:69:64:26:65:d2:7e:9c:71:24:d2:ae:92:85:
e2:70:88:eb:e3:a9:c0:88:8d:26:1f:5c:a3:36:4e:
37:12:7d:b6:99:38:a2:ac:97:a7:3f:fd:53:7e:6a:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:96:A3:39:E0:25:D5:DA:57:A1:53:32:A3:E4:D6:6A:C9:84:EF:C5
X509v3 Authority Key Identifier:
keyid:B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/eJajOeAl1dpXoVMyo-TWasmE78U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c600::/32
Signature Algorithm: sha256WithRSAEncryption
70:f8:79:5d:11:c9:06:df:d7:f4:47:01:d2:ed:fe:18:dc:fc:
0e:63:c9:44:4c:ae:58:d4:9b:77:ca:fd:d2:69:dc:4d:af:4d:
25:7d:35:72:d2:97:c7:0f:65:9c:c5:d4:bc:7c:a1:4e:51:c9:
5e:90:b1:5e:81:29:e8:0f:d9:a6:a8:2d:97:f3:33:f2:36:ec:
70:88:c5:d5:d8:b3:f0:ba:b5:a2:42:41:11:ab:2f:0a:8d:ac:
9c:d1:47:f0:db:e1:83:ee:ed:cb:53:7c:f6:3e:ea:dd:c6:7f:
2c:da:32:db:30:1e:28:e9:a3:2d:c2:2f:5a:e2:4b:25:28:8a:
2f:b1:88:44:03:11:53:44:ba:7d:13:20:b6:3b:11:33:7d:5d:
ba:bb:b8:98:5f:bc:db:50:b4:6f:58:39:7d:0b:5c:f5:07:9c:
99:3f:c9:b7:f9:fa:be:14:b6:45:c0:ef:0e:c4:5f:98:b8:5f:
41:b1:22:86:a0:90:17:c7:cf:f1:80:ef:35:a1:36:f5:8a:39:
e1:c2:b8:88:20:9c:1e:c3:97:56:04:37:cf:46:f2:46:10:77:
10:d9:50:68:46:9b:84:2a:6b:ed:0c:e8:fc:16:ce:f8:2a:71:
63:d9:b7:ff:1f:c0:b7:95:c2:12:dc:5b:ba:dc:0a:a9:5d:fe:
8b:96:f9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:18:47 2025 by rpki-client