Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/k6xNdIXiDOEK9ky1Kk_XCXUSoJg.roa
File: k6xNdIXiDOEK9ky1Kk_XCXUSoJg.roa (raw, json)
Hash identifier: ffdlilPIsKoxK/F7f8M9zThmp6LxOtKW8w+OCbRBiJs=
Subject key identifier: 93:AC:4D:74:85:E2:0C:E1:0A:F6:4C:B5:2A:4F:D7:09:75:12:A0:98
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0197DDE59F35E6FD832BFCD65FE3FDCD15EE
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/k6xNdIXiDOEK9ky1Kk_XCXUSoJg.roa
Signing time: Sun 06 Jul 2025 04:01:42 +0000
ROA not before: Sun 06 Jul 2025 04:01:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a01:fb00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 09 Jul 2025 17:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dd:e5:9f:35:e6:fd:83:2b:fc:d6:5f:e3:fd:cd:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Jul 6 04:01:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93ac4d7485e20ce10af64cb52a4fd7097512a098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:72:8c:ff:5d:ed:b0:20:95:01:bb:36:26:
cb:05:56:e6:a1:48:b1:33:7b:6b:24:32:cb:67:a3:
dc:dc:10:68:8d:12:48:3f:9f:d9:b2:1d:47:4f:50:
40:ed:90:c7:23:61:9e:2c:1d:46:c0:5d:f9:3f:62:
34:69:1f:05:7a:2d:67:19:27:bd:a9:50:f6:3b:7d:
28:04:d9:ec:f3:fb:65:be:91:e9:f4:d4:8c:bf:3d:
1c:b1:2b:83:39:31:64:6d:b8:81:dd:9f:6c:d9:58:
4f:c5:5e:ee:01:61:65:23:c3:60:a8:db:b8:b6:74:
f4:4d:8a:e6:dc:41:1e:cb:2f:87:57:91:91:3b:12:
a2:95:59:eb:c6:54:13:d1:1b:5e:c7:fd:c1:6e:6e:
cb:e3:17:9c:f2:da:2c:6d:50:cd:98:7f:00:73:3d:
9c:79:56:a4:3f:0a:b7:0e:0e:69:6e:66:12:bf:ab:
a5:61:3d:02:6c:85:f8:fd:13:82:5c:6b:2a:42:84:
28:fb:f9:75:6d:58:b4:56:90:1a:b1:ef:da:0c:fd:
cf:db:0b:cd:fb:79:86:7f:ba:9c:85:56:c8:96:7d:
6c:32:8c:70:f6:d1:a9:ee:4b:ab:ad:a3:69:23:6e:
f1:2a:c2:04:20:e2:eb:2d:b2:58:ca:38:89:23:0c:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AC:4D:74:85:E2:0C:E1:0A:F6:4C:B5:2A:4F:D7:09:75:12:A0:98
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/k6xNdIXiDOEK9ky1Kk_XCXUSoJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
0d:4d:e6:be:9d:af:a9:aa:0c:00:43:6a:9c:dd:91:4c:6a:49:
b7:dd:0a:01:4f:85:e6:8f:fb:7b:77:bc:5d:26:23:fe:6b:c5:
90:91:51:14:d5:9e:1a:eb:1b:1d:b6:ec:75:6a:7d:32:6f:39:
b8:3a:18:93:d9:a4:7c:0f:dd:6f:3d:a9:1d:1a:36:21:af:cb:
b4:ed:ec:85:41:ad:74:60:15:45:72:ba:13:49:72:fd:a3:20:
28:80:9f:9b:18:79:2d:53:c4:db:72:0a:9f:d7:b5:d0:d8:39:
9c:d7:f7:f5:2e:b9:0f:59:33:ed:62:d4:c5:34:21:71:b0:87:
1e:53:5f:d2:29:4c:e9:a8:1e:6c:24:8d:97:de:a5:0a:25:7e:
4b:b3:4d:e2:7e:0c:07:a0:4b:76:48:7e:26:b7:6b:95:55:aa:
17:8d:92:e1:3f:b7:f4:ff:45:75:13:08:99:fd:e5:47:ac:69:
95:4a:6a:b1:dc:ce:05:83:86:c1:51:b9:94:8b:cd:cf:68:a3:
e1:b7:38:94:a1:29:da:46:e0:15:30:e8:9d:6d:b7:f5:f1:00:
20:2f:90:4a:f5:ae:01:6b:3c:74:c3:b2:19:20:14:0a:48:4c:
24:fc:a5:ca:02:48:30:66:46:45:a9:a2:ff:81:e7:6d:11:6d:
27:76:6d:d8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZfd5Z815v2DK/zWX+P9zRXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0
Yzk1ZTYwHhcNMjUwNzA2MDQwMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2FjNGQ3NDg1ZTIwY2UxMGFmNjRjYjUyYTRmZDcwOTc1MTJhMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH9yjP9d7bAglQG7NibLBVbmoUix
M3trJDLLZ6Pc3BBojRJIP5/Zsh1HT1BA7ZDHI2GeLB1GwF35P2I0aR8Fei1nGSe9
qVD2O30oBNns8/tlvpHp9NSMvz0csSuDOTFkbbiB3Z9s2VhPxV7uAWFlI8NgqNu4
tnT0TYrm3EEeyy+HV5GROxKilVnrxlQT0Rtex/3Bbm7L4xec8tosbVDNmH8Acz2c
eVakPwq3Dg5pbmYSv6ulYT0CbIX4/ROCXGsqQoQo+/l1bVi0VpAase/aDP3P2wvN
+3mGf7qchVbIln1sMoxw9tGp7kurraNpI27xKsIEIOLrLbJYyjiJIwyuPwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJOsTXSF4gzhCvZMtSpP1wl1EqCYMB8GA1UdIwQY
MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt
NmUyZDk3Y2ExNWZmLzEvazZ4TmRJWGlET0VLOWt5MUtrX1hDWFVTb0pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm
LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgH7ADAN
BgkqhkiG9w0BAQsFAAOCAQEADU3mvp2vqaoMAENqnN2RTGpJt90KAU+F5o/7e3e8
XSYj/mvFkJFRFNWeGusbHbbsdWp9Mm85uDoYk9mkfA/dbz2pHRo2Ia/LtO3shUGt
dGAVRXK6E0ly/aMgKICfmxh5LVPE23IKn9e10Ng5nNf39S65D1kz7WLUxTQhcbCH
HlNf0ilM6agebCSNl96lCiV+S7NN4n4MB6BLdkh+JrdrlVWqF42S4T+39P9FdRMI
mf3lR6xplUpqsdzOBYOGwVG5lIvNz2ij4bc4lKEp2kbgFTDonW239fEAIC+QSvWu
AWs8dMOyGSAUCkhMJPylygJIMGZGRami/4HnbRFtJ3Zt2A==
-----END CERTIFICATE-----
Generated at Mon Jul 21 06:54:21 2025 by rpki-client