Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/TibyuvjJZDRBjOM0v1BuTzCV35Y.roa
File: TibyuvjJZDRBjOM0v1BuTzCV35Y.roa (raw, json)
Hash identifier: g9mwOCvVSwWI4zoIbGGA5oEtI9AaJfBzFOu/VFCR/fQ=
Subject key identifier: 4E:26:F2:BA:F8:C9:64:34:41:8C:E3:34:BF:50:6E:4F:30:95:DF:96
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01970E901BD42CCE15B511F864278B3D4BC5
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/TibyuvjJZDRBjOM0v1BuTzCV35Y.roa
Signing time: Mon 26 May 2025 21:46:54 +0000
ROA not before: Mon 26 May 2025 21:46:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209439
IP address blocks: 2a00:8b80::/32 maxlen: 32
2a09:3dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 27 May 2025 19:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:90:1b:d4:2c:ce:15:b5:11:f8:64:27:8b:3d:4b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: May 26 21:46:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e26f2baf8c96434418ce334bf506e4f3095df96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:45:59:8f:22:7d:e2:8e:ef:8e:b4:bd:b3:
ec:b1:88:7f:42:0e:f0:a8:7a:fb:39:d8:70:b1:d4:
34:18:1e:4c:26:0c:e5:9e:e2:6e:64:7d:75:cc:f7:
8c:d3:27:07:ea:4c:d6:3b:fa:28:5a:66:cd:47:d6:
56:77:29:07:6b:39:57:bf:86:17:07:7d:97:d5:b3:
a5:2b:62:09:d9:00:38:a6:4f:5b:0e:1a:df:32:20:
0c:1f:22:5b:e7:09:3e:e2:90:7b:cf:fd:ad:83:aa:
1b:73:e5:2d:bf:d9:bc:b4:67:c5:99:a1:36:d1:20:
55:b5:5c:18:3d:c6:3a:b8:4f:a2:43:e4:47:f9:af:
9b:8b:60:cd:79:7c:18:bc:22:07:21:31:30:14:5a:
41:6b:8c:ad:4c:ae:2d:eb:8b:af:94:04:11:2e:a4:
5c:7a:3c:82:71:a9:f3:f3:b0:52:7d:e8:e7:52:6f:
cd:b1:d6:74:84:46:ce:7f:ab:39:c4:ba:82:1c:8c:
59:f2:10:03:be:66:22:3e:ca:4e:69:cc:13:2e:af:
85:df:f3:0d:67:b2:d9:40:68:e4:54:82:33:48:7b:
a5:4c:ec:26:01:d8:c3:cd:fd:02:a5:68:db:aa:06:
03:c0:d4:94:dd:05:e8:ff:9b:c6:00:2c:e8:83:4a:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:F2:BA:F8:C9:64:34:41:8C:E3:34:BF:50:6E:4F:30:95:DF:96
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/TibyuvjJZDRBjOM0v1BuTzCV35Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8b80::/32
2a09:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:ea:17:6e:fb:f9:e5:09:d1:08:2b:65:ce:42:7b:7d:2f:be:
91:9b:c7:c0:49:1c:85:0b:a6:b2:a2:be:d3:ba:01:67:4c:80:
ab:fa:86:25:bd:73:25:29:be:fe:62:bb:1a:9b:40:46:d4:ad:
2c:d0:c8:8e:55:47:5b:4c:fb:d8:80:2e:05:2f:ca:5d:25:82:
6a:d9:a4:fd:36:4b:93:60:2b:7f:bb:40:51:e2:d5:df:12:73:
4c:f8:83:a9:53:37:72:74:e2:fe:0e:83:6b:ee:01:ca:25:1b:
17:ea:27:b8:4d:72:d6:bc:92:f7:0d:cb:32:86:ba:ce:8c:73:
1c:d5:83:95:e6:d3:81:7c:e1:aa:23:ed:1c:5c:04:d3:96:16:
34:6f:54:60:17:e8:dd:e2:00:b8:5c:08:1b:ff:04:b3:76:9c:
b8:67:7a:61:38:9c:fe:fc:2c:15:8d:68:cb:a8:62:ea:3b:e0:
8c:40:a3:66:ff:e5:6d:94:5c:c8:76:42:56:c3:21:f7:f6:31:
ee:18:0a:31:07:7b:a8:78:12:8e:a6:b8:9c:d9:19:11:ee:a4:
bf:f1:20:b9:61:99:51:6a:33:05:9e:b3:7d:70:14:c6:36:47:
d2:26:bd:01:e5:d9:85:13:c9:4f:75:70:83:1c:92:fe:55:42:
94:61:7b:33
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZcOkBvULM4VtRH4ZCeLPUvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjUwNTI2MjE0NjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTI2ZjJiYWY4Yzk2NDM0NDE4Y2UzMzRiZjUwNmU0ZjMwOTVkZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP9FWY8ifeKO7460vbPssYh/Qg7w
qHr7OdhwsdQ0GB5MJgzlnuJuZH11zPeM0ycH6kzWO/ooWmbNR9ZWdykHazlXv4YX
B32X1bOlK2IJ2QA4pk9bDhrfMiAMHyJb5wk+4pB7z/2tg6obc+Utv9m8tGfFmaE2
0SBVtVwYPcY6uE+iQ+RH+a+bi2DNeXwYvCIHITEwFFpBa4ytTK4t64uvlAQRLqRc
ejyCcanz87BSfejnUm/NsdZ0hEbOf6s5xLqCHIxZ8hADvmYiPspOacwTLq+F3/MN
Z7LZQGjkVIIzSHulTOwmAdjDzf0CpWjbqgYDwNSU3QXo/5vGACzog0pSOQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE4m8rr4yWQ0QYzjNL9Qbk8wld+WMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvVGlieXV2akpaRFJCak9NMHYxQnVUekNWMzVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgCLgAMF
AyoJPcAwDQYJKoZIhvcNAQELBQADggEBAH7qF277+eUJ0QgrZc5Ce30vvpGbx8BJ
HIULprKivtO6AWdMgKv6hiW9cyUpvv5iuxqbQEbUrSzQyI5VR1tM+9iALgUvyl0l
gmrZpP02S5NgK3+7QFHi1d8Sc0z4g6lTN3J04v4Og2vuAcolGxfqJ7hNcta8kvcN
yzKGus6McxzVg5Xm04F84aoj7RxcBNOWFjRvVGAX6N3iALhcCBv/BLN2nLhnemE4
nP78LBWNaMuoYuo74IxAo2b/5W2UXMh2QlbDIff2Me4YCjEHe6h4Eo6muJzZGRHu
pL/xILlhmVFqMwWes31wFMY2R9ImvQHl2YUTyU91cIMckv5VQpRhezM=
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:25:31 2025 by rpki-client