Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/JOqUoEayZRdGq6SIdet7NRpJILI.roa
File: JOqUoEayZRdGq6SIdet7NRpJILI.roa (raw, json)
Hash identifier: zDx2n1dxeFY5H72F2q7YmARMZXXpL9QkzToYzRKSqVA=
Subject key identifier: 24:EA:94:A0:46:B2:65:17:46:AB:A4:88:75:EB:7B:35:1A:49:20:B2
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 0196AE37200D65E4E31FB8726DD0DED20D7D
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/JOqUoEayZRdGq6SIdet7NRpJILI.roa
Signing time: Thu 08 May 2025 04:46:10 +0000
ROA not before: Thu 08 May 2025 04:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44765
IP address blocks: 2a00:8e40::/32 maxlen: 48
2a00:8e40:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 May 2025 08:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:37:20:0d:65:e4:e3:1f:b8:72:6d:d0:de:d2:0d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: May 8 04:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24ea94a046b2651746aba48875eb7b351a4920b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:d9:a0:cb:6a:03:05:71:2b:31:5b:5d:8a:
63:07:9b:65:15:6a:96:21:bc:bd:d4:e3:29:cc:f1:
b6:96:80:97:2c:43:ba:ad:73:e1:d9:34:83:fd:56:
11:d0:5e:3f:86:ef:17:a2:fc:d8:ab:5e:e7:f0:46:
44:15:7e:6d:0b:6b:64:5d:9c:45:a4:e0:08:26:4c:
d2:44:4e:01:c7:47:fd:9e:cb:84:a7:d0:66:b8:66:
20:e0:22:bd:7d:94:34:a5:af:a6:97:a6:a6:21:d0:
7c:fd:35:f5:ad:53:11:dc:6f:ca:f4:db:38:27:c3:
6e:fa:5c:7f:0f:e6:49:88:b6:9e:95:47:b0:be:f2:
02:02:4e:18:c1:8b:5c:4d:1f:10:42:b9:09:12:06:
35:91:85:7a:5c:ef:24:b1:0f:68:99:22:43:bf:9e:
77:89:87:c0:17:1a:0a:67:03:7d:74:50:a6:0c:3a:
53:f7:b6:84:2f:9a:fb:50:94:4f:4a:8a:da:1f:1c:
fc:d1:9e:fe:f7:fb:41:73:e0:2b:3c:d9:a7:57:ee:
43:11:3a:26:4f:12:34:a1:2a:c7:20:a1:91:ea:66:
70:48:0b:23:2e:07:66:3c:3b:ca:00:34:35:a8:31:
38:91:48:27:0a:3f:4c:ed:51:5e:42:41:73:60:dc:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:94:A0:46:B2:65:17:46:AB:A4:88:75:EB:7B:35:1A:49:20:B2
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/JOqUoEayZRdGq6SIdet7NRpJILI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8e40::/32
Signature Algorithm: sha256WithRSAEncryption
a6:3e:dc:88:c0:22:a3:5f:8f:8e:7f:d6:83:92:d8:2a:2f:c5:
ee:6a:3a:24:7b:a6:50:d1:ea:54:cd:7b:17:55:f1:98:42:23:
ad:2d:2a:e0:7f:7b:1c:47:78:04:51:ff:25:29:41:ce:e1:33:
80:7d:64:39:ae:87:e9:0c:1e:27:84:00:c4:4e:20:43:74:9a:
e6:6c:62:8d:2d:8d:4a:ea:d2:24:a3:1a:e8:3e:98:42:4a:ca:
bb:97:f5:b9:74:80:3a:74:9e:4f:37:3b:58:41:f7:bf:1d:23:
5d:53:97:8c:2f:a9:49:e3:9f:d2:f5:8b:1d:e1:42:3e:b2:7e:
52:4c:00:0d:d2:2a:d8:ab:a2:e9:3b:ea:18:84:cf:1b:ee:fb:
89:49:a8:c4:29:ea:a1:62:d8:4a:39:74:17:7f:df:20:05:a1:
55:98:7a:5b:ea:4a:58:ed:46:b2:e9:dd:fc:7a:95:20:a2:73:
be:6c:27:5e:08:a9:3b:df:79:aa:e0:4f:13:f3:fe:e1:51:06:
80:10:70:ba:eb:bd:8d:d5:e2:2d:fc:f3:18:fa:84:33:b9:93:
f2:d0:40:a8:04:4c:27:ed:17:4b:f8:fc:71:ef:30:56:58:77:
7a:b3:63:13:71:64:01:2b:c7:11:e7:a4:2a:3d:91:80:12:3d:
6c:19:80:d1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZauNyANZeTjH7hybdDe0g19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl
OTI3NGIwHhcNMjUwNTA4MDQ0NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGVhOTRhMDQ2YjI2NTE3NDZhYmE0ODg3NWViN2IzNTFhNDkyMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrbZoMtqAwVxKzFbXYpjB5tlFWqW
Iby91OMpzPG2loCXLEO6rXPh2TSD/VYR0F4/hu8XovzYq17n8EZEFX5tC2tkXZxF
pOAIJkzSRE4Bx0f9nsuEp9BmuGYg4CK9fZQ0pa+ml6amIdB8/TX1rVMR3G/K9Ns4
J8Nu+lx/D+ZJiLaelUewvvICAk4YwYtcTR8QQrkJEgY1kYV6XO8ksQ9omSJDv553
iYfAFxoKZwN9dFCmDDpT97aEL5r7UJRPSoraHxz80Z7+9/tBc+ArPNmnV+5DETom
TxI0oSrHIKGR6mZwSAsjLgdmPDvKADQ1qDE4kUgnCj9M7VFeQkFzYNxhPQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCTqlKBGsmUXRqukiHXrezUaSSCyMB8GA1UdIwQY
MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt
MDJhMDliN2E0ZWI3LzEvSk9xVW9FYXlaUmRHcTZTSWRldDdOUnBKSUxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3
LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCOQDAN
BgkqhkiG9w0BAQsFAAOCAQEApj7ciMAio1+Pjn/Wg5LYKi/F7mo6JHumUNHqVM17
F1XxmEIjrS0q4H97HEd4BFH/JSlBzuEzgH1kOa6H6QweJ4QAxE4gQ3Sa5mxijS2N
SurSJKMa6D6YQkrKu5f1uXSAOnSeTzc7WEH3vx0jXVOXjC+pSeOf0vWLHeFCPrJ+
UkwADdIq2Kui6TvqGITPG+77iUmoxCnqoWLYSjl0F3/fIAWhVZh6W+pKWO1Gsund
/HqVIKJzvmwnXgipO995quBPE/P+4VEGgBBwuuu9jdXiLfzzGPqEM7mT8tBAqARM
J+0XS/j8ce8wVlh3erNjE3FkASvHEeekKj2RgBI9bBmA0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:08 2025 by rpki-client