Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/_ZMD0abtycmRMmJeZ4SR-9l9klg.roa
File: _ZMD0abtycmRMmJeZ4SR-9l9klg.roa (raw, json)
Hash identifier: moLV1Q/QnVDJREd6mLbuD0xjVl08NlVHjHQpYlMGbig=
Subject key identifier: FD:93:03:D1:A6:ED:C9:C9:91:32:62:5E:67:84:91:FB:D9:7D:92:58
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197CC5BDFC88BA7A537C89C757CADCBCBFD
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/_ZMD0abtycmRMmJeZ4SR-9l9klg.roa
Signing time: Wed 02 Jul 2025 18:17:42 +0000
ROA not before: Wed 02 Jul 2025 18:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0c:ac6::/32 maxlen: 32
2a0d:adc0::/32 maxlen: 32
2a11:21c0::/32 maxlen: 32
2a11:21c4::/32 maxlen: 32
2a11:21c7::/32 maxlen: 32
2a11:3080::/32 maxlen: 32
2a11:3087::/32 maxlen: 32
2a11:35c2::/32 maxlen: 32
2a11:35c6::/32 maxlen: 32
2a11:3d02::/32 maxlen: 32
2a11:3d05::/32 maxlen: 32
2a11:3d07::/32 maxlen: 32
2a11:7080::/32 maxlen: 32
2a11:7087::/32 maxlen: 32
2a11:d382::/32 maxlen: 32
2a11:d385::/32 maxlen: 32
2a11:d387::/32 maxlen: 32
2a11:d701::/32 maxlen: 32
2a11:d704::/32 maxlen: 32
2a12:24c0::/32 maxlen: 32
2a12:24c6::/32 maxlen: 32
2a12:24c7::/32 maxlen: 32
2a12:35c0::/32 maxlen: 32
2a12:35c1::/32 maxlen: 32
2a12:35c3::/32 maxlen: 32
2a14:9702::/32 maxlen: 32
2a14:9706::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Jul 2025 18:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:5b:df:c8:8b:a7:a5:37:c8:9c:75:7c:ad:cb:cb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jul 2 18:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd9303d1a6edc9c99132625e678491fbd97d9258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:b5:c2:9b:eb:48:15:1a:c4:34:40:cf:dc:
9d:0a:d8:7e:3f:41:c7:d9:9e:f5:5b:5a:82:f8:0b:
ea:eb:fc:80:ef:09:4a:37:64:f9:1a:e6:ee:b2:7c:
b6:19:21:58:35:89:01:25:14:3e:27:ed:d2:d9:a2:
ec:9d:b9:0a:ed:fa:3f:a3:fa:0f:fa:d6:20:76:11:
5d:f3:08:15:d0:99:df:e2:82:d0:8d:05:bf:4e:50:
c7:3e:11:52:97:76:16:e0:f5:7c:c0:c2:76:fd:26:
35:09:a5:c7:f8:3b:f9:62:7d:1e:81:ae:4b:de:ef:
c7:45:27:03:51:4c:e8:6f:39:77:75:3d:a4:33:fa:
03:5b:45:57:c0:5b:76:df:19:7c:85:4d:94:4b:df:
34:dc:0b:fd:0c:60:77:15:1a:64:7e:4b:1a:0b:f5:
26:96:6c:55:ed:8e:14:5d:90:85:90:0a:9b:bc:cc:
c6:5c:73:6a:67:12:97:7b:15:01:71:c0:62:4f:1d:
a3:d9:15:5e:e6:80:42:7c:19:7a:74:83:fc:fd:51:
92:93:9c:76:a8:f3:07:28:42:d5:75:ea:76:9c:7a:
eb:2d:a9:88:fe:94:45:37:b9:1f:8e:ab:b5:3d:85:
c2:79:1a:e5:19:29:0d:91:84:29:f8:eb:01:21:de:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:03:D1:A6:ED:C9:C9:91:32:62:5E:67:84:91:FB:D9:7D:92:58
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/_ZMD0abtycmRMmJeZ4SR-9l9klg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ac6::/32
2a0d:adc0::/32
2a11:21c0::/32
2a11:21c4::/32
2a11:21c7::/32
2a11:3080::/32
2a11:3087::/32
2a11:35c2::/32
2a11:35c6::/32
2a11:3d02::/32
2a11:3d05::/32
2a11:3d07::/32
2a11:7080::/32
2a11:7087::/32
2a11:d382::/32
2a11:d385::/32
2a11:d387::/32
2a11:d701::/32
2a11:d704::/32
2a12:24c0::/32
2a12:24c6::/31
2a12:35c0::/31
2a12:35c3::/32
2a14:9702::/32
2a14:9706::/32
Signature Algorithm: sha256WithRSAEncryption
63:10:cd:31:27:da:4c:51:6d:68:47:a3:69:90:57:75:49:e5:
8e:f8:6b:4c:f1:d8:84:1c:63:03:29:e4:de:fc:fa:a2:4a:69:
51:8f:e1:e5:fe:3e:bd:b0:fc:d8:66:0e:81:2a:ad:ee:5f:ce:
ca:c4:ca:96:d8:63:56:8a:e9:20:73:ff:f5:ee:1d:59:0c:a0:
5e:71:ed:25:09:77:b2:57:41:63:37:12:87:8c:86:ff:ef:68:
30:6b:93:9b:00:61:02:88:a3:a2:d2:20:5c:af:52:3d:f6:66:
e5:83:b9:66:48:40:27:b3:ab:29:42:46:db:46:b7:45:a8:f1:
a8:a4:27:c8:72:1e:1b:4f:26:0e:98:af:3a:c3:09:cc:2d:1a:
c3:91:e4:30:41:dd:c5:e6:47:90:4c:a2:2e:c8:75:e7:99:e5:
9c:93:59:5f:01:32:28:cf:47:94:ac:23:80:6f:aa:ae:5b:67:
71:c6:d2:62:f3:7a:e2:8b:b4:6b:44:41:f2:0a:66:48:cf:35:
8d:c9:84:dc:e1:43:5d:ac:c8:1f:88:56:2d:a4:6e:10:92:70:
72:3b:c7:60:09:d0:2a:c2:a3:c9:fb:cc:c2:ec:ba:04:90:23:
8e:1b:99:e6:9f:8f:cb:56:d5:61:4b:5f:68:ce:50:da:e6:4b:
23:55:2f:df
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAZfMW9/Ii6elN8icdXyty8v9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjUwNzAyMTgxNzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDkzMDNkMWE2ZWRjOWM5OTEzMjYyNWU2Nzg0OTFmYmQ5N2Q5MjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RC1wpvrSBUaxDRAz9ydCth+P0HH
2Z71W1qC+Avq6/yA7wlKN2T5Gubusny2GSFYNYkBJRQ+J+3S2aLsnbkK7fo/o/oP
+tYgdhFd8wgV0Jnf4oLQjQW/TlDHPhFSl3YW4PV8wMJ2/SY1CaXH+Dv5Yn0ega5L
3u/HRScDUUzobzl3dT2kM/oDW0VXwFt23xl8hU2US9803Av9DGB3FRpkfksaC/Um
lmxV7Y4UXZCFkAqbvMzGXHNqZxKXexUBccBiTx2j2RVe5oBCfBl6dIP8/VGSk5x2
qPMHKELVdep2nHrrLamI/pRFN7kfjqu1PYXCeRrlGSkNkYQp+OsBId6kXwIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFP2TA9Gm7cnJkTJiXmeEkfvZfZJYMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvX1pNRDBhYnR5Y21STW1KZVo0U1ItOWw5a2xnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTCBtgQCAAIwga8DBQAq
DArGAwUAKg2twAMFACoRIcADBQAqESHEAwUAKhEhxwMFACoRMIADBQAqETCHAwUA
KhE1wgMFACoRNcYDBQAqET0CAwUAKhE9BQMFACoRPQcDBQAqEXCAAwUAKhFwhwMF
ACoR04IDBQAqEdOFAwUAKhHThwMFACoR1wEDBQAqEdcEAwUAKhIkwAMFASoSJMYD
BQEqEjXAAwUAKhI1wwMFACoUlwIDBQAqFJcGMA0GCSqGSIb3DQEBCwUAA4IBAQBj
EM0xJ9pMUW1oR6NpkFd1SeWO+GtM8diEHGMDKeTe/PqiSmlRj+Hl/j69sPzYZg6B
Kq3uX87KxMqW2GNWiukgc//17h1ZDKBece0lCXeyV0FjNxKHjIb/72gwa5ObAGEC
iKOi0iBcr1I99mblg7lmSEAns6spQkbbRrdFqPGopCfIch4bTyYOmK86wwnMLRrD
keQwQd3F5keQTKIuyHXnmeWck1lfATIoz0eUrCOAb6quW2dxxtJi83rii7RrREHy
CmZIzzWNyYTc4UNdrMgfiFYtpG4QknByO8dgCdAqwqPJ+8zC7LoEkCOOG5nmn4/L
VtVhS19ozlDa5ksjVS/f
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:47 2025 by rpki-client