Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vXgB5cL9ycQSADT0XaX6kSC4hr8.roa
File: vXgB5cL9ycQSADT0XaX6kSC4hr8.roa (raw, json)
Hash identifier: 6vYMD8cKTB0Fr6gKKN8a7Q4twHeBJPAKsG+0gVcaZjA=
Subject key identifier: BD:78:01:E5:C2:FD:C9:C4:12:00:34:F4:5D:A5:FA:91:20:B8:86:BF
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019686895C62865E41A7E94E9447990AE7D6
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vXgB5cL9ycQSADT0XaX6kSC4hr8.roa
Signing time: Wed 30 Apr 2025 11:51:10 +0000
ROA not before: Wed 30 Apr 2025 11:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:ac00::/29 maxlen: 29
2a13:c3c0::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 29 May 2025 12:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:89:5c:62:86:5e:41:a7:e9:4e:94:47:99:0a:e7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 30 11:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd7801e5c2fdc9c4120034f45da5fa9120b886bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:06:29:e8:7e:73:b3:e1:34:97:82:4d:79:b4:
42:68:5b:48:e9:d3:9f:71:7f:55:26:6c:5d:59:a3:
07:d1:c5:1d:65:6f:cb:c2:7a:01:25:75:66:aa:99:
d5:2e:18:a9:4b:35:b2:1e:f5:5a:a4:01:5d:e5:f0:
e3:e9:8d:ee:3f:8f:ed:e4:b7:b8:f9:e4:b0:00:f8:
40:10:d2:53:4d:f3:bf:4d:7b:8f:6e:a4:3e:66:7d:
a6:fb:fa:94:b6:38:ff:dc:f8:58:81:c9:bf:dd:5c:
13:d8:f5:0b:e0:43:26:84:22:a8:92:e4:58:ac:34:
43:36:ac:88:1c:10:08:a7:38:74:c2:cc:07:e6:69:
c3:2e:06:b3:79:29:ce:bb:3d:3d:12:03:37:ce:94:
07:cf:66:c4:16:b3:aa:77:d7:82:1c:ff:a6:44:99:
ae:7a:b4:ae:b7:f1:f6:c8:0a:86:2e:19:f8:f3:30:
c7:7d:f4:09:2c:5f:10:d1:52:90:fb:eb:f8:e6:68:
e8:ae:93:f4:1a:7c:d4:aa:cf:0e:1c:be:a7:53:75:
26:f5:0d:d4:5f:13:c5:d7:b1:43:9b:84:d1:12:29:
d6:9d:ab:b8:e2:8d:f7:9d:41:5d:26:a1:89:2a:82:
80:69:c4:7d:09:63:91:dd:6c:b6:b3:fd:88:38:d7:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:01:E5:C2:FD:C9:C4:12:00:34:F4:5D:A5:FA:91:20:B8:86:BF
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vXgB5cL9ycQSADT0XaX6kSC4hr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
2a13:c3c0::/29
2a13:e040::/29
2a14:62c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
8e:68:8a:96:d9:96:d7:4e:79:62:25:21:92:0d:79:f0:61:f2:
fb:8e:3d:7c:cc:e1:d5:f5:1c:cb:6d:e2:68:87:23:04:27:c5:
91:a7:3a:54:ef:e5:5f:a8:38:cd:cd:55:8c:da:80:1a:06:fa:
e6:e8:2c:ea:90:52:04:19:75:58:94:78:71:26:20:9f:fc:d8:
2a:02:79:00:fb:11:9d:c9:de:73:91:2b:97:79:e5:e1:11:35:
4c:30:0c:fa:2f:51:7f:c0:86:eb:8c:6d:30:f1:a3:bc:b9:98:
be:e6:9f:14:4d:4e:09:f7:57:f6:1b:83:83:6c:b4:70:d8:18:
6d:f6:e1:15:8d:e2:93:b5:b6:01:2e:e4:d5:76:24:ab:7a:ac:
10:9f:25:a6:70:a1:26:b8:6d:2f:ca:5d:b3:98:f4:67:92:33:
c1:0b:1f:64:85:be:28:32:cc:ef:61:3b:0c:0e:bb:cc:ee:24:
f6:d9:c5:c6:4e:51:7d:29:a6:34:7b:ac:f0:53:63:9c:02:9c:
36:0f:48:e9:fb:62:f0:c2:d5:22:b6:bb:22:7e:c3:63:1e:9a:
5d:e0:29:40:e7:6a:25:50:a6:52:62:c6:b6:e3:b0:25:30:de:
56:73:28:53:d0:e2:d0:2e:95:e8:c4:95:8b:2c:cc:f9:c0:00:
72:a4:1e:6e
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZaGiVxihl5Bp+lOlEeZCufWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwNDMwMTE1MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDc4MDFlNWMyZmRjOWM0MTIwMDM0ZjQ1ZGE1ZmE5MTIwYjg4NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwYp6H5zs+E0l4JNebRCaFtI6dOf
cX9VJmxdWaMH0cUdZW/LwnoBJXVmqpnVLhipSzWyHvVapAFd5fDj6Y3uP4/t5Le4
+eSwAPhAENJTTfO/TXuPbqQ+Zn2m+/qUtjj/3PhYgcm/3VwT2PUL4EMmhCKokuRY
rDRDNqyIHBAIpzh0wswH5mnDLgazeSnOuz09EgM3zpQHz2bEFrOqd9eCHP+mRJmu
erSut/H2yAqGLhn48zDHffQJLF8Q0VKQ++v45mjorpP0GnzUqs8OHL6nU3Um9Q3U
XxPF17FDm4TREinWnau44o33nUFdJqGJKoKAacR9CWOR3Wy2s/2IONfyewIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFL14AeXC/cnEEgA09F2l+pEguIa/MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvdlhnQjVjTDl5Y1FTQURUMFhhWDZrU0M0aHI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKgusAAMF
AyoTw8ADBQMqE+BAAwUDKhRiwAMFAyoUakAwDQYJKoZIhvcNAQELBQADggEBAI5o
ipbZltdOeWIlIZINefBh8vuOPXzM4dX1HMtt4miHIwQnxZGnOlTv5V+oOM3NVYza
gBoG+uboLOqQUgQZdViUeHEmIJ/82CoCeQD7EZ3J3nORK5d55eERNUwwDPovUX/A
huuMbTDxo7y5mL7mnxRNTgn3V/Ybg4NstHDYGG324RWN4pO1tgEu5NV2JKt6rBCf
JaZwoSa4bS/KXbOY9GeSM8ELH2SFvigyzO9hOwwOu8zuJPbZxcZOUX0ppjR7rPBT
Y5wCnDYPSOn7YvDC1SK2uyJ+w2Meml3gKUDnaiVQplJixrbjsCUw3lZzKFPQ4tAu
lejElYsszPnAAHKkHm4=
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:04:12 2025 by rpki-client