Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/DSSYW-tFacxF2xFQUql3l21jZuY.roa
File: DSSYW-tFacxF2xFQUql3l21jZuY.roa (raw, json)
Hash identifier: XPbx0yGb3s+aYLa2zwUJHZxQ2Q1H/sYuBdOz3VOvuuc=
Subject key identifier: 0D:24:98:5B:EB:45:69:CC:45:DB:11:50:52:A9:77:97:6D:63:66:E6
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 0197B788C1F97FA6004FEF27EAA822C5090A
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/DSSYW-tFacxF2xFQUql3l21jZuY.roa
Signing time: Sat 28 Jun 2025 17:14:42 +0000
ROA not before: Sat 28 Jun 2025 17:14:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:6851:789c/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 28 Jun 2025 18:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:88:c1:f9:7f:a6:00:4f:ef:27:ea:a8:22:c5:09:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 28 17:14:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d24985beb4569cc45db115052a977976d6366e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:f5:79:90:68:b2:51:cf:78:ff:23:b9:4e:
53:73:c7:64:64:8d:e5:00:e5:8a:81:94:2d:08:67:
44:c8:52:55:75:84:86:2e:fc:ee:5f:de:a4:21:61:
72:0e:d8:6e:bb:cd:6a:30:16:42:f9:47:f9:a2:28:
51:61:03:2b:34:1f:7a:ef:d8:99:ce:39:79:5b:06:
d0:e2:ba:d7:ea:66:88:62:f6:4c:b2:b7:fd:4f:a2:
82:ae:e6:ea:60:9c:2e:2c:98:58:1c:32:91:a5:28:
85:10:7a:4b:ae:98:5d:2d:a1:e8:d9:da:60:e8:30:
55:01:5d:fa:30:c8:5f:73:da:e1:ba:60:56:e6:d3:
e8:9a:1c:a9:8f:c4:31:2b:c1:69:68:6c:62:59:f8:
ae:de:e3:83:99:0e:fb:16:a5:0d:f3:0f:a5:99:df:
6d:cc:1c:9c:e2:ea:7b:da:38:11:d4:fd:1b:bf:5f:
b9:0f:47:eb:e4:e1:dc:4d:34:47:c9:e7:ca:f1:7c:
70:81:8d:82:dd:fe:74:c7:29:24:fb:f0:51:85:28:
ab:d3:a9:6a:34:1f:17:0f:ac:5c:5c:19:12:9c:be:
c2:f7:cb:28:54:6b:ba:a5:2d:2b:e4:e6:c1:ba:9e:
02:20:a0:83:37:67:54:f9:53:09:69:32:5b:3a:09:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:98:5B:EB:45:69:CC:45:DB:11:50:52:A9:77:97:6D:63:66:E6
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/DSSYW-tFacxF2xFQUql3l21jZuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:6851:789c/128
Signature Algorithm: sha256WithRSAEncryption
1f:a5:c9:b2:df:e7:cd:d6:e8:cd:d3:b4:f9:ff:47:2e:fa:bd:
b9:9f:b5:e8:20:a9:f5:aa:3e:6b:0d:4c:d7:f4:e2:da:6b:d5:
43:03:f5:fa:c0:45:4d:1d:33:bb:89:f0:b1:92:31:cd:3a:06:
34:49:d4:b1:15:3c:05:6b:99:60:05:e6:18:f6:48:2b:8e:a5:
a2:0a:c1:28:9b:22:8a:a5:51:e6:d6:76:4c:fd:c1:c3:13:34:
12:c5:cc:33:95:e8:a4:98:ae:b7:d0:c2:3e:49:e1:a1:4c:49:
9e:e4:06:d4:bd:12:85:7d:80:12:e3:4f:9b:48:5e:84:37:97:
74:f7:90:e1:e3:18:bb:01:7b:d4:56:53:15:d5:b7:6f:2b:b2:
6f:2d:12:1d:f1:a5:c8:e9:13:7f:20:e4:c9:63:9d:56:25:f0:
63:79:52:6b:27:97:86:b5:d8:ce:8b:1f:1f:bc:b0:5d:ed:2c:
02:28:ca:cb:a8:67:2a:1c:e6:f3:6e:54:0a:e8:2b:b9:2d:0b:
95:1b:c1:85:88:4d:14:98:3d:71:05:9f:82:e2:a7:d7:15:7f:
02:6f:b0:f7:fb:78:c6:dd:3b:40:e7:78:b7:c3:df:31:bf:9e:
1a:41:97:c5:b5:50:1a:3f:60:b4:cd:b2:df:2c:62:ba:53:f3:
23:19:a2:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:10:21 2025 by rpki-client