Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nBTTe69AUuKVNOhuaDw8tYurSCY.roa
File: nBTTe69AUuKVNOhuaDw8tYurSCY.roa (raw, json)
Hash identifier: 6EFHCCERH0hqAiwNTgSzagWc5awFE9QoudSbd9ooLis=
Subject key identifier: 9C:14:D3:7B:AF:40:52:E2:95:34:E8:6E:68:3C:3C:B5:8B:AB:48:26
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0196AE3C9E7C902B2A73300F498203FD76CB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nBTTe69AUuKVNOhuaDw8tYurSCY.roa
Signing time: Thu 08 May 2025 04:52:10 +0000
ROA not before: Thu 08 May 2025 04:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 2a01:7120:6::/48 maxlen: 48
2a01:7120:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 May 2025 13:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:3c:9e:7c:90:2b:2a:73:30:0f:49:82:03:fd:76:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 8 04:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c14d37baf4052e29534e86e683c3cb58bab4826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:7c:61:a5:e0:f6:b8:6d:b4:1a:1c:d7:26:
83:9c:b2:19:a3:39:6e:1c:3c:8f:f5:7c:18:fa:92:
90:79:7d:47:f1:dd:e4:76:0c:ea:83:61:dc:d1:47:
c3:26:ef:bf:ee:26:8f:2d:0c:e4:60:4a:e6:24:78:
83:b2:65:bf:c1:80:55:e0:9f:e9:c2:80:92:ba:c6:
72:9b:b0:fa:67:e0:d9:80:ef:de:ad:7a:31:8b:b9:
98:84:f9:ed:ea:22:9d:40:88:f6:46:fb:dc:da:e8:
3b:2a:9b:ad:d5:84:cc:af:71:49:73:e4:be:39:dd:
85:28:c0:dc:3c:c3:da:f9:53:07:0c:45:ec:bb:3b:
b4:86:9a:39:3e:bf:72:e9:f4:31:b8:1a:12:2a:68:
8c:52:82:99:93:5f:60:c3:bd:75:be:dd:bf:24:ee:
d8:52:67:f2:59:3f:79:0c:c1:34:68:ad:78:32:91:
26:49:6c:32:c5:6e:35:d3:38:4f:75:87:9d:ab:db:
f1:43:f8:b0:bb:08:f6:41:e3:b6:2d:dd:46:5a:89:
6b:a1:cc:56:fe:2b:51:7f:a8:3f:d1:7e:e3:5e:fd:
12:13:64:8b:4e:d6:a0:75:88:e3:b2:e6:16:04:ac:
f9:7b:db:b3:25:92:c6:12:82:e4:10:ee:6d:28:20:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:14:D3:7B:AF:40:52:E2:95:34:E8:6E:68:3C:3C:B5:8B:AB:48:26
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nBTTe69AUuKVNOhuaDw8tYurSCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:7120:6::/47
Signature Algorithm: sha256WithRSAEncryption
2e:46:3c:5a:4d:dc:82:76:f1:53:a2:03:dc:fa:0c:af:0e:62:
03:21:ed:7b:84:b9:a6:72:ba:b2:64:49:20:b9:c4:19:d9:92:
bd:cf:bf:33:54:54:d3:08:a6:3c:6d:cf:a2:5f:be:41:62:82:
05:f7:03:57:d5:d1:d4:b2:5d:e7:aa:94:1b:79:6e:58:f5:20:
8d:02:02:24:65:86:d3:aa:ab:7e:d5:ae:d9:52:6c:b1:a1:1d:
d8:7d:47:cb:17:3f:b9:0c:14:61:f0:f0:2f:93:f8:d4:2b:6a:
ed:b5:48:2d:7a:e7:66:ac:47:d8:4b:e2:3a:a7:57:e0:7a:f7:
77:19:b2:4a:79:a6:36:ac:71:92:82:41:79:9a:a9:5e:d7:8a:
43:a3:7f:5a:97:18:3f:dd:81:76:61:64:18:4b:6f:da:76:6b:
73:2a:5d:b0:7b:fc:09:cf:ba:7e:b8:65:b8:79:9c:d1:6c:5b:
b1:11:78:84:61:9c:af:f9:6a:fa:19:b4:68:8f:b7:e7:e8:f2:
07:e7:ac:75:52:c7:72:a4:d8:0b:10:48:58:2a:2c:fc:be:50:
de:91:93:1a:d4:69:6b:9b:47:77:2b:9a:c1:d5:3c:0d:fb:81:
4d:72:c3:c8:6c:ca:90:ed:f2:cc:eb:3a:de:c4:0d:66:4d:be:
9f:83:3e:cf
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZauPJ58kCsqczAPSYID/XbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwNTA4MDQ1MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzE0ZDM3YmFmNDA1MmUyOTUzNGU4NmU2ODNjM2NiNThiYWI0ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArId8YaXg9rhttBoc1yaDnLIZozlu
HDyP9XwY+pKQeX1H8d3kdgzqg2Hc0UfDJu+/7iaPLQzkYErmJHiDsmW/wYBV4J/p
woCSusZym7D6Z+DZgO/erXoxi7mYhPnt6iKdQIj2Rvvc2ug7Kput1YTMr3FJc+S+
Od2FKMDcPMPa+VMHDEXsuzu0hpo5Pr9y6fQxuBoSKmiMUoKZk19gw711vt2/JO7Y
UmfyWT95DME0aK14MpEmSWwyxW410zhPdYedq9vxQ/iwuwj2QeO2Ld1GWolrocxW
/itRf6g/0X7jXv0SE2SLTtagdYjjsuYWBKz5e9uzJZLGEoLkEO5tKCAo4wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJwU03uvQFLilTTobmg8PLWLq0gmMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvbkJUVGU2OUFVdUtWTk9odWFEdzh0WXVyU0NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgFxIAAG
MA0GCSqGSIb3DQEBCwUAA4IBAQAuRjxaTdyCdvFTogPc+gyvDmIDIe17hLmmcrqy
ZEkgucQZ2ZK9z78zVFTTCKY8bc+iX75BYoIF9wNX1dHUsl3nqpQbeW5Y9SCNAgIk
ZYbTqqt+1a7ZUmyxoR3YfUfLFz+5DBRh8PAvk/jUK2rttUgteudmrEfYS+I6p1fg
evd3GbJKeaY2rHGSgkF5mqle14pDo39alxg/3YF2YWQYS2/admtzKl2we/wJz7p+
uGW4eZzRbFuxEXiEYZyv+Wr6GbRoj7fn6PIH56x1UsdypNgLEEhYKiz8vlDekZMa
1Glrm0d3K5rB1TwN+4FNcsPIbMqQ7fLM6zrexA1mTb6fgz7P
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:24:57 2025 by rpki-client