Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/9SJQfbTe4_ZvG5hIxc5fjkFGnU4.roa
File: 9SJQfbTe4_ZvG5hIxc5fjkFGnU4.roa (raw, json)
Hash identifier: x+GMplPt21Dz5gJ2IUO93b5p5+cqrOEj+7SrJNIUjec=
Subject key identifier: F5:22:50:7D:B4:DE:E3:F6:6F:1B:98:48:C5:CE:5F:8E:41:46:9D:4E
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197F4FBC11345E81251E1B70ACA5A18C699
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/9SJQfbTe4_ZvG5hIxc5fjkFGnU4.roa
Signing time: Thu 10 Jul 2025 15:37:09 +0000
ROA not before: Thu 10 Jul 2025 15:37:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 2a11:7086::/32 maxlen: 32
2a12:24c1::/32 maxlen: 32
2a12:35c5::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Jul 2025 15:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:fb:c1:13:45:e8:12:51:e1:b7:0a:ca:5a:18:c6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jul 10 15:37:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f522507db4dee3f66f1b9848c5ce5f8e41469d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:08:2f:05:c5:e7:6c:d8:57:3b:14:25:ab:
46:3b:61:24:84:ef:39:a2:3f:da:b2:35:2b:be:6c:
4c:9e:ec:7b:5d:75:78:ad:83:63:8e:e9:3e:a7:a9:
b9:f7:92:ce:32:b1:cd:bf:35:4a:1f:8a:6b:5f:fb:
85:0f:c8:f7:95:4b:be:f1:2f:d2:71:d7:0e:8a:72:
0d:60:28:1d:01:a4:e8:7d:16:6f:c6:e5:a8:66:bd:
87:82:76:4a:48:8e:85:f5:46:3c:0a:7d:3a:11:3d:
3a:47:e4:e1:d6:69:62:d6:02:11:1a:8f:1f:8a:f6:
8b:ba:35:f1:c9:23:db:e0:ae:9a:6a:b4:57:2a:ba:
4e:92:92:b6:ce:73:bd:a5:ac:2b:ad:60:aa:8b:73:
08:d8:e9:2a:ae:2d:38:42:0e:45:b5:c9:e8:eb:59:
1f:5d:10:68:76:f4:68:17:da:21:6a:97:bd:f4:f2:
90:26:37:92:42:b2:f6:70:aa:a9:06:c2:04:3b:90:
56:7d:e9:df:50:13:15:8d:8f:54:ee:8c:ce:27:d5:
51:8a:a8:34:ad:e1:76:8e:40:ad:83:6f:e9:92:a4:
e0:38:97:7a:f5:a2:af:f0:74:ae:a7:e9:20:46:84:
3a:d0:bd:a1:37:bb:45:49:7b:b2:d3:ed:ae:d2:6a:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:50:7D:B4:DE:E3:F6:6F:1B:98:48:C5:CE:5F:8E:41:46:9D:4E
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/9SJQfbTe4_ZvG5hIxc5fjkFGnU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7086::/32
2a12:24c1::/32
2a12:35c5::/32
Signature Algorithm: sha256WithRSAEncryption
81:d3:8b:ea:cc:0a:bb:f7:c7:18:d8:b9:75:4b:ac:37:af:35:
b1:75:96:c3:82:cd:ff:36:62:8c:67:14:8a:ab:4a:79:b6:93:
a1:d4:6c:e7:c2:0c:26:27:0e:37:c1:a6:f2:e9:d5:81:8a:80:
2e:ab:0d:ca:0d:2a:57:fd:a5:09:77:e5:11:c5:2b:80:ae:c6:
c5:1f:5b:ff:28:14:50:81:06:1a:35:2d:7b:41:9a:e4:59:3f:
4e:bf:d8:d9:ea:fa:55:fb:96:93:83:bb:7e:6c:98:10:8e:09:
e6:9b:ac:1e:3d:af:07:06:63:6d:9e:12:d0:c0:eb:88:5e:02:
fd:26:79:90:59:ae:09:88:a7:31:80:27:71:59:0d:42:5c:b9:
73:50:b7:22:bb:0f:7c:83:ec:f3:7a:1e:5d:53:97:bc:3c:88:
2c:af:84:e8:b5:85:9a:f0:36:bd:db:5e:7f:7b:a4:46:a7:84:
1b:4a:22:50:2d:6a:68:94:8b:02:ab:f3:b7:1b:9d:e6:83:b2:
37:33:a7:dc:a4:9c:cd:e6:91:ee:d6:19:76:ac:04:84:92:66:
21:de:9b:28:d9:7f:4a:8c:a2:da:a5:57:09:b7:95:18:f7:7a:
92:60:00:18:66:05:fe:0b:e3:de:8c:6d:16:63:12:3d:ca:52:
30:5a:12:f2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZf0+8ETRegSUeG3CspaGMaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjUwNzEwMTUzNzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTIyNTA3ZGI0ZGVlM2Y2NmYxYjk4NDhjNWNlNWY4ZTQxNDY5ZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAossILwXF52zYVzsUJatGO2EkhO85
oj/asjUrvmxMnux7XXV4rYNjjuk+p6m595LOMrHNvzVKH4prX/uFD8j3lUu+8S/S
cdcOinINYCgdAaTofRZvxuWoZr2HgnZKSI6F9UY8Cn06ET06R+Th1mli1gIRGo8f
ivaLujXxySPb4K6aarRXKrpOkpK2znO9pawrrWCqi3MI2Okqri04Qg5Ftcno61kf
XRBodvRoF9ohape99PKQJjeSQrL2cKqpBsIEO5BWfenfUBMVjY9U7ozOJ9VRiqg0
reF2jkCtg2/pkqTgOJd69aKv8HSup+kgRoQ60L2hN7tFSXuy0+2u0mozeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPUiUH203uP2bxuYSMXOX45BRp1OMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvOVNKUWZiVGU0X1p2RzVoSXhjNWZqa0ZHblU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKhFwhgMF
ACoSJMEDBQAqEjXFMA0GCSqGSIb3DQEBCwUAA4IBAQCB04vqzAq798cY2Ll1S6w3
rzWxdZbDgs3/NmKMZxSKq0p5tpOh1GznwgwmJw43waby6dWBioAuqw3KDSpX/aUJ
d+URxSuArsbFH1v/KBRQgQYaNS17QZrkWT9Ov9jZ6vpV+5aTg7t+bJgQjgnmm6we
Pa8HBmNtnhLQwOuIXgL9JnmQWa4JiKcxgCdxWQ1CXLlzULciuw98g+zzeh5dU5e8
PIgsr4TotYWa8Da9215/e6RGp4QbSiJQLWpolIsCq/O3G53mg7I3M6fcpJzN5pHu
1hl2rASEkmYh3pso2X9KjKLapVcJt5UY93qSYAAYZgX+C+PejG0WYxI9ylIwWhLy
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:19 2025 by rpki-client