Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/JzpK9353L9mnqUgDrAGB51xo-1c.roa
File: JzpK9353L9mnqUgDrAGB51xo-1c.roa (raw, json)
Hash identifier: RQT1sKv9KFdoPNtpjjbYh9cwVRPNJxPVAdAWiknTaOU=
Subject key identifier: 27:3A:4A:F7:7E:77:2F:D9:A7:A9:48:03:AC:01:81:E7:5C:68:FB:57
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01977FC2BB4684ABAAD30C73E34CBF89E154
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/JzpK9353L9mnqUgDrAGB51xo-1c.roa
Signing time: Tue 17 Jun 2025 21:19:17 +0000
ROA not before: Tue 17 Jun 2025 21:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a0d:adc5::/32 maxlen: 32
2a11:21c3::/32 maxlen: 32
2a12:24c5::/32 maxlen: 32
2a12:35c4::/32 maxlen: 32
2a12:41c4::/32 maxlen: 32
2a14:9704::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Jun 2025 18:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:c2:bb:46:84:ab:aa:d3:0c:73:e3:4c:bf:89:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jun 17 21:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=273a4af77e772fd9a7a94803ac0181e75c68fb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:17:62:80:87:d7:3e:a5:26:18:85:78:a1:
69:de:39:5b:f0:c1:b3:99:3b:1f:2d:5e:5b:a6:33:
99:d4:d3:3a:5d:37:29:86:f6:36:cd:9f:96:03:83:
12:59:fa:c1:29:93:c5:47:c3:3a:a7:17:5c:71:58:
08:bf:38:9f:b0:89:da:ec:60:20:42:6c:35:f3:e8:
af:e3:69:af:0e:78:10:d7:01:6f:d6:82:d7:83:34:
7f:4d:ac:12:17:4d:60:f8:c0:e5:b4:4c:1b:01:a9:
e3:54:91:37:36:b2:49:3f:80:27:f5:53:38:34:14:
57:dc:55:85:7e:dc:a5:fd:55:d0:b6:21:99:f9:cb:
ae:a0:57:2d:04:8f:00:b1:5f:9c:4f:04:43:19:0e:
91:97:5c:da:34:a6:79:28:2a:e6:bd:39:b1:a1:61:
e8:7e:ee:9b:63:f4:81:44:f5:94:a3:da:22:0a:60:
e7:87:ab:9c:e6:8e:a5:e6:58:5e:3a:4c:2d:51:11:
a6:e3:e3:ae:37:d0:4e:21:44:fd:41:0a:ee:af:02:
06:cf:95:28:fc:a7:d0:cc:91:54:2b:b4:d3:09:6f:
fd:33:4a:4e:a8:9b:40:5f:d2:e6:0b:24:86:48:8f:
7a:62:9b:61:1e:c8:a5:17:ff:43:eb:2e:85:62:f0:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:4A:F7:7E:77:2F:D9:A7:A9:48:03:AC:01:81:E7:5C:68:FB:57
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/JzpK9353L9mnqUgDrAGB51xo-1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:adc5::/32
2a11:21c3::/32
2a12:24c5::/32
2a12:35c4::/32
2a12:41c4::/32
2a14:9704::/32
Signature Algorithm: sha256WithRSAEncryption
b1:80:0a:21:62:d3:06:95:84:51:3f:6a:81:d1:ea:05:29:f4:
f5:64:24:b2:8d:85:a1:19:58:64:c1:67:14:50:09:9a:53:91:
4e:49:17:a6:34:a3:b1:6c:95:76:0f:71:a4:13:27:50:85:5a:
ee:b6:14:9d:bb:ff:34:44:0c:3f:82:6e:5d:87:2b:0b:a4:fe:
e4:77:f7:a4:9e:d6:46:a2:3b:dc:38:17:0d:68:95:12:7e:bd:
7a:ca:90:4f:6e:f6:4e:4c:0f:88:50:a0:41:12:2e:eb:3f:07:
c1:78:21:02:16:2f:13:0c:ba:fc:85:48:85:2e:26:22:d9:e4:
d7:20:6e:2c:bb:2c:20:b1:10:a5:36:4d:fc:81:aa:41:3b:4d:
2b:14:ab:0f:df:1c:ef:5e:c8:06:df:0a:7f:c1:3d:8e:e1:c4:
96:b0:bc:06:59:ed:44:06:a6:18:ad:af:ca:f8:04:10:d1:27:
8f:b7:62:49:48:4b:f6:e6:11:3d:5c:77:f6:f9:5a:04:26:d6:
b3:5a:00:80:e9:b9:1c:9e:21:e1:c6:1a:bd:c2:ce:89:4d:c8:
94:28:22:36:b5:a6:31:2a:72:99:59:54:5e:50:e8:9a:b8:90:
d3:2c:d4:be:a9:8f:82:f7:f8:ee:12:fa:99:9f:58:56:75:3f:
9d:ff:c7:b1
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZd/wrtGhKuq0wxz40y/ieFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjUwNjE3MjExOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzNhNGFmNzdlNzcyZmQ5YTdhOTQ4MDNhYzAxODFlNzVjNjhmYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx4XYoCH1z6lJhiFeKFp3jlb8MGz
mTsfLV5bpjOZ1NM6XTcphvY2zZ+WA4MSWfrBKZPFR8M6pxdccVgIvzifsIna7GAg
Qmw18+iv42mvDngQ1wFv1oLXgzR/TawSF01g+MDltEwbAanjVJE3NrJJP4An9VM4
NBRX3FWFftyl/VXQtiGZ+cuuoFctBI8AsV+cTwRDGQ6Rl1zaNKZ5KCrmvTmxoWHo
fu6bY/SBRPWUo9oiCmDnh6uc5o6l5lheOkwtURGm4+OuN9BOIUT9QQrurwIGz5Uo
/KfQzJFUK7TTCW/9M0pOqJtAX9LmCySGSI96YpthHsilF/9D6y6FYvCZywIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCc6Svd+dy/Zp6lIA6wBgedcaPtXMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvSnpwSzkzNTNMOW1ucVVnRHJBR0I1MXhvLTFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUAKg2txQMF
ACoRIcMDBQAqEiTFAwUAKhI1xAMFACoSQcQDBQAqFJcEMA0GCSqGSIb3DQEBCwUA
A4IBAQCxgAohYtMGlYRRP2qB0eoFKfT1ZCSyjYWhGVhkwWcUUAmaU5FOSRemNKOx
bJV2D3GkEydQhVruthSdu/80RAw/gm5dhysLpP7kd/ekntZGojvcOBcNaJUSfr16
ypBPbvZOTA+IUKBBEi7rPwfBeCECFi8TDLr8hUiFLiYi2eTXIG4suywgsRClNk38
gapBO00rFKsP3xzvXsgG3wp/wT2O4cSWsLwGWe1EBqYYra/K+AQQ0SePt2JJSEv2
5hE9XHf2+VoEJtazWgCA6bkcniHhxhq9ws6JTciUKCI2taYxKnKZWVReUOiauJDT
LNS+qY+C9/juEvqZn1hWdT+d/8ex
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:48 2025 by rpki-client