Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EuRFmz2gbRCx8vERmKb1e9dsUlo.roa
File: EuRFmz2gbRCx8vERmKb1e9dsUlo.roa (raw, json)
Hash identifier: yuB/ZQmV2f2ZlbguiHJ/FjaaDoWFZApOWDXD3pvoVqE=
Subject key identifier: 12:E4:45:9B:3D:A0:6D:10:B1:F2:F1:11:98:A6:F5:7B:D7:6C:52:5A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196F2BF20BD4DEA4D92DC350D509ADA3CE4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EuRFmz2gbRCx8vERmKb1e9dsUlo.roa
Signing time: Wed 21 May 2025 12:08:54 +0000
ROA not before: Wed 21 May 2025 12:08:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 2a11:4c40::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 28 May 2025 13:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:bf:20:bd:4d:ea:4d:92:dc:35:0d:50:9a:da:3c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 21 12:08:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e4459b3da06d10b1f2f11198a6f57bd76c525a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:fa:3e:92:f0:bf:d3:ef:1d:b7:ee:7c:9c:
59:b6:29:ad:15:8d:b3:6b:5b:39:3d:90:f0:2d:1c:
df:3b:0f:68:07:6f:d6:ce:8a:7c:5e:81:dd:bd:eb:
2c:2b:0d:91:2c:a8:09:74:09:f4:4e:2a:88:6c:2b:
c7:5d:bd:60:18:45:e0:b6:82:b7:3b:f1:f9:70:f3:
da:31:f0:0b:16:7d:e0:8b:01:61:a7:1c:cf:c3:0c:
b6:80:ce:fd:5d:94:78:a2:bf:6b:62:aa:54:7b:5f:
5b:93:73:da:47:8b:74:1b:1a:ac:21:85:e2:13:83:
ae:e4:5a:f9:4b:ab:3c:08:3f:a2:35:7f:4a:a3:ec:
6d:01:72:fd:57:aa:b5:7e:68:fa:90:65:4c:a2:8a:
e9:47:a4:4e:bb:9e:58:88:e7:fe:5b:f9:cd:3c:0c:
49:33:c9:b6:48:ee:10:50:7e:9e:39:f0:84:c4:05:
01:4e:f8:1b:69:c2:15:74:7f:dc:c3:8c:8a:39:68:
67:6b:1e:2d:fd:5e:0a:f4:52:e2:e1:e6:21:f0:2a:
3f:03:f1:8d:9b:07:4c:0a:59:31:de:6f:bf:85:50:
cf:3f:2d:ec:f7:63:39:c6:dd:d4:d9:22:d3:3a:80:
b7:bb:3b:31:6e:12:f0:d2:2a:76:02:00:0d:97:14:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:45:9B:3D:A0:6D:10:B1:F2:F1:11:98:A6:F5:7B:D7:6C:52:5A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EuRFmz2gbRCx8vERmKb1e9dsUlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4c40::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
c0:2a:5d:5a:bf:c7:e8:52:15:73:8b:a1:eb:6d:ae:b1:68:05:
7d:88:3e:f3:69:14:0b:c1:e1:71:ef:ab:20:19:3f:03:b5:2d:
14:4d:fd:bd:49:75:cd:f3:65:9e:83:6e:73:b5:34:37:15:cd:
25:65:25:96:94:ae:2f:d3:22:15:25:79:31:da:86:ff:3b:39:
13:79:29:41:d1:10:57:f3:5c:c5:17:69:56:db:e2:d5:2e:c4:
fc:92:1a:eb:a2:cc:42:c2:66:7c:fb:a6:77:6e:a7:04:f0:ca:
9c:f2:39:f6:68:5b:b4:08:4d:29:9d:e7:fe:13:29:10:43:42:
ac:0d:85:5c:57:c6:0f:5c:8c:b8:eb:27:44:04:fe:44:73:d3:
52:4e:24:cc:60:d4:be:57:ef:d7:fe:14:42:a1:df:c5:fa:77:
7e:4b:d4:23:bd:ba:40:b3:c8:26:af:0f:35:14:35:12:a0:91:
45:a0:19:cf:52:0d:62:bc:d6:02:b8:ce:e6:ea:b3:8a:06:5d:
81:ec:d0:6c:fa:b1:e6:fb:9c:14:3f:dd:cd:d5:0c:aa:b0:a9:
2f:5d:0f:4e:47:2b:2e:c3:f1:63:7f:e4:7e:11:01:9e:36:8a:
03:70:2b:bc:3c:9f:cf:b8:26:60:ae:45:73:8c:57:c4:4a:8a:
35:34:2d:76
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZbyvyC9TepNktw1DVCa2jzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTIxMTIwODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmU0NDU5YjNkYTA2ZDEwYjFmMmYxMTE5OGE2ZjU3YmQ3NmM1MjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF36PpLwv9PvHbfufJxZtimtFY2z
a1s5PZDwLRzfOw9oB2/Wzop8XoHdvessKw2RLKgJdAn0TiqIbCvHXb1gGEXgtoK3
O/H5cPPaMfALFn3giwFhpxzPwwy2gM79XZR4or9rYqpUe19bk3PaR4t0GxqsIYXi
E4Ou5Fr5S6s8CD+iNX9Ko+xtAXL9V6q1fmj6kGVMoorpR6ROu55YiOf+W/nNPAxJ
M8m2SO4QUH6eOfCExAUBTvgbacIVdH/cw4yKOWhnax4t/V4K9FLi4eYh8Co/A/GN
mwdMClkx3m+/hVDPPy3s92M5xt3U2SLTOoC3uzsxbhLw0ip2AgANlxQ4vwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBLkRZs9oG0QsfLxEZim9XvXbFJaMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRXVSRm16MmdiUkN4OHZFUm1LYjFlOWRzVWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhFMQAMF
AyoTDMAwDQYJKoZIhvcNAQELBQADggEBAMAqXVq/x+hSFXOLoettrrFoBX2IPvNp
FAvB4XHvqyAZPwO1LRRN/b1Jdc3zZZ6DbnO1NDcVzSVlJZaUri/TIhUleTHahv87
ORN5KUHREFfzXMUXaVbb4tUuxPySGuuizELCZnz7pndupwTwypzyOfZoW7QITSmd
5/4TKRBDQqwNhVxXxg9cjLjrJ0QE/kRz01JOJMxg1L5X79f+FEKh38X6d35L1CO9
ukCzyCavDzUUNRKgkUWgGc9SDWK81gK4zubqs4oGXYHs0Gz6seb7nBQ/3c3VDKqw
qS9dD05HKy7D8WN/5H4RAZ42igNwK7w8n8+4JmCuRXOMV8RKijU0LXY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:36:00 2025 by rpki-client